Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UFz5VNN74oM_yN_KZEWfMrdQcyQ.roa
File: UFz5VNN74oM_yN_KZEWfMrdQcyQ.roa (raw, json)
Hash identifier: 8bRmkJFG9BHIDHNtcS82IatwUqVd7sWDpy7W3CY5z2s=
Subject key identifier: 50:5C:F9:54:D3:7B:E2:83:3F:C8:DF:CA:64:45:9F:32:B7:50:73:24
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E41
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UFz5VNN74oM_yN_KZEWfMrdQcyQ.roa
Signing time: Tue 29 Sep 2020 09:55:31 +0000
ROA not before: Tue 29 Sep 2020 09:55:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3649 (0xe41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:31 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=505CF954D37BE2833FC8DFCA64459F32B7507324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:67:82:c6:3b:1e:ae:fb:65:2d:22:aa:8e:5a:
a9:9e:8b:c8:d3:00:e8:10:b6:5a:88:5b:88:f8:4c:
25:e9:bf:ce:88:31:44:84:50:a9:75:45:17:6d:68:
45:13:17:69:94:da:6d:7d:65:15:a5:67:56:2d:14:
9b:d2:a0:09:11:5d:26:fb:9b:b2:f4:b0:b8:a4:20:
24:03:c6:ac:2f:65:d4:d5:65:a5:9f:15:95:3a:91:
a3:6d:a7:92:d6:9f:d7:29:ae:68:10:37:36:d0:bd:
5a:5e:b7:8c:02:c7:9b:8e:22:e9:b8:2a:18:86:54:
a4:17:1f:b7:a8:5c:36:61:60:69:12:eb:64:ff:a9:
61:31:57:ad:19:0c:94:8e:8c:13:e5:f3:f0:fc:b2:
4f:33:60:f3:7a:73:3c:b4:62:dd:22:b4:8a:90:fd:
e3:d6:ba:dc:24:a5:69:b5:f3:18:b6:35:92:76:c8:
82:0b:26:6d:a8:80:e8:47:83:93:5c:42:7f:65:8e:
57:22:ee:e3:72:a2:d5:c4:4b:b3:30:72:61:e4:e8:
a1:53:99:bd:00:6e:b0:d1:f4:46:72:c4:7d:0a:93:
19:c9:c3:c5:56:66:a2:da:fb:cd:75:4d:6a:5f:70:
da:e4:d6:28:35:84:23:c3:de:c4:97:9d:1f:e2:3d:
37:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5C:F9:54:D3:7B:E2:83:3F:C8:DF:CA:64:45:9F:32:B7:50:73:24
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UFz5VNN74oM_yN_KZEWfMrdQcyQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.172.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:a0:fd:59:c0:cf:39:4b:48:a5:ac:76:86:5c:34:b3:b9:bf:
a8:3e:90:ef:34:09:df:be:0c:43:9d:9f:1b:5c:6e:de:a9:ec:
46:2d:13:95:24:96:70:c4:f5:e5:16:10:38:e9:40:6c:70:97:
52:66:3d:dd:2b:84:e4:a7:15:7f:44:27:93:70:14:04:a9:71:
d6:3d:33:e1:f6:60:b9:23:81:73:22:14:fa:8f:07:57:41:b7:
e9:fd:80:dc:ab:94:bc:54:5b:00:f4:9d:c1:b8:25:f0:88:4c:
65:7f:6e:4f:97:3f:f8:1c:2d:0a:6c:6c:13:90:5a:7b:73:a0:
29:63:a0:ed:2e:80:17:dd:8f:6a:c2:e8:00:37:38:d5:f2:90:
3e:70:83:23:a2:1e:41:55:61:6e:28:0f:42:28:d8:3a:5f:67:
5a:1d:e5:48:63:a3:8d:7e:72:7f:8c:ae:f2:1f:05:70:34:35:
e5:a9:9f:44:2b:4b:81:37:f9:89:6c:ff:fc:61:bc:12:15:2e:
a2:a7:68:d8:53:f9:ef:93:72:b7:1d:2c:42:ed:5b:54:ca:52:
aa:63:ee:c0:a4:5e:b7:2a:98:c6:80:0b:aa:4d:aa:c5:7b:87:
63:0b:b1:67:4d:6e:8a:b4:82:a1:33:03:dd:b6:34:2f:07:d1:
c2:50:4b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org