Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UKrNBSLo5dASpwcZKdd4h3YfmDA.roa
File: UKrNBSLo5dASpwcZKdd4h3YfmDA.roa (raw, json)
Hash identifier: FthbFbJgKYyY1aX0yuRGsHV+bNUQ6eMhQ3n5eUv6umE=
Subject key identifier: 50:AA:CD:05:22:E8:E5:D0:12:A7:07:19:29:D7:78:87:76:1F:98:30
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E2B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UKrNBSLo5dASpwcZKdd4h3YfmDA.roa
Signing time: Tue 29 Sep 2020 09:55:25 +0000
ROA not before: Tue 29 Sep 2020 09:55:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.228.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3627 (0xe2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:25 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=50AACD0522E8E5D012A7071929D77887761F9830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:0a:1c:9f:6f:b6:2c:d6:11:a1:48:65:d8:
50:96:04:f9:9f:96:5d:f8:38:3d:2a:f3:bb:5d:1e:
d1:0a:e2:ca:e3:ec:85:3c:dc:9e:df:8e:e8:f1:72:
46:fc:8a:cd:42:0f:e8:a2:ca:26:4f:c3:f9:0d:29:
66:79:66:34:b4:80:64:dd:f7:22:de:89:1c:3b:3d:
e2:5e:13:6d:4e:d9:d7:b3:e9:77:79:6f:1c:36:d2:
17:8f:ed:a6:45:06:f4:b0:8e:13:22:9d:6b:07:e6:
67:72:14:ef:af:4f:54:c9:79:d7:4e:58:94:18:b2:
d5:fa:ef:f8:ca:06:b5:28:38:83:d5:25:1a:90:ab:
c4:7f:08:13:ac:bd:3a:a5:21:72:76:51:b5:ad:7a:
e5:fb:fa:e5:d5:47:a5:f7:8a:a7:47:97:2f:f8:f0:
f8:13:5f:fd:ed:27:37:04:c1:24:19:5c:dd:1e:92:
41:d8:0e:7c:80:82:0c:3a:87:df:97:87:75:b5:ec:
45:d6:1f:49:99:ad:f3:70:db:f7:f9:49:a9:58:c9:
02:a9:07:22:a3:1e:f0:d5:dd:92:0e:3b:5a:74:99:
dc:b6:2e:3d:3c:1f:b6:bd:5a:95:9b:e9:eb:c7:71:
bb:92:df:c2:35:7f:0b:df:42:9d:aa:1d:5e:57:a5:
0e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AA:CD:05:22:E8:E5:D0:12:A7:07:19:29:D7:78:87:76:1F:98:30
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UKrNBSLo5dASpwcZKdd4h3YfmDA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.228.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:d1:37:23:c2:fa:89:b3:91:f3:e7:e1:ed:9c:32:cf:6d:04:
b3:bb:ca:61:e5:5a:c6:d0:48:39:22:ab:3c:2a:f3:ee:2f:fc:
94:97:e3:0b:ac:f0:d0:f6:14:39:69:5c:2b:96:74:07:bd:c5:
20:18:fd:af:d6:9b:0d:4d:87:bc:da:5a:2f:d5:5e:f2:8c:5b:
9a:6f:89:ed:f4:f8:ad:a1:9c:f3:01:64:ba:1b:d7:01:5d:d9:
6a:4a:5a:44:f7:16:6f:18:ab:63:5e:58:dc:ed:3c:c1:9d:c0:
6c:e9:25:1e:00:5d:dc:6c:88:67:e2:70:f0:a7:a8:55:de:c8:
aa:aa:8c:fb:94:8c:98:9e:82:d2:c3:21:69:b6:9d:ea:f9:5d:
f3:ee:ec:8e:80:8f:9e:dc:f1:5b:0f:40:8a:44:12:e9:e1:e8:
d1:ce:09:c0:bb:45:90:46:26:e1:3c:31:87:ce:ad:4c:20:77:
f8:8a:1b:57:8d:13:53:04:98:a1:f1:6c:e4:67:95:9f:d3:cb:
31:c4:7b:20:cd:b9:4a:bc:75:cd:5c:65:a7:cb:1b:36:28:55:
8b:b4:f5:3f:a2:3a:27:e4:59:bc:79:46:ab:1c:78:95:6f:7d:
03:22:96:ec:d3:32:3f:09:02:b7:83:42:75:58:be:8b:59:89:
90:03:21:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org