Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VMzhT1BZ4BcTtsOXTTOzlmerMZQ.roa
File: VMzhT1BZ4BcTtsOXTTOzlmerMZQ.roa (raw, json)
Hash identifier: 61+onlG/MyeH32t4Key3Z1Xuq9LII+ilja0qun8KH6c=
Subject key identifier: 54:CC:E1:4F:50:59:E0:17:13:B6:C3:97:4D:33:B3:96:67:AB:31:94
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0CF1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VMzhT1BZ4BcTtsOXTTOzlmerMZQ.roa
Signing time: Tue 29 Sep 2020 09:53:59 +0000
ROA not before: Tue 29 Sep 2020 09:53:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.223.128/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3313 (0xcf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:53:59 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=54CCE14F5059E01713B6C3974D33B39667AB3194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a5:05:f0:06:a5:06:85:f8:bb:42:59:65:1c:
f3:de:a0:2e:1e:a3:82:ec:b4:d6:8d:68:29:c0:1a:
fa:66:e8:cb:b6:db:96:25:43:96:0c:8f:de:d1:ea:
e0:72:ce:50:2a:34:0c:27:36:ab:d5:04:cb:c5:d8:
9a:75:df:22:82:36:c8:3b:35:e3:16:55:02:71:c8:
58:96:bd:58:8c:b8:89:da:6a:ed:ac:ac:2d:0a:88:
7a:a3:77:a1:b5:74:7c:b6:01:2e:d2:c4:e8:12:f4:
34:dd:4d:0a:18:eb:f6:66:3b:c1:40:52:90:44:06:
e0:e9:be:4a:87:47:0d:88:57:0d:05:07:aa:a3:02:
27:d5:4f:0c:22:fa:42:af:a2:34:87:22:0a:f5:7b:
8f:2a:9c:da:09:fd:4f:5a:78:19:32:3a:db:c8:56:
75:aa:b8:04:fe:89:14:0f:2e:f3:65:ba:f6:79:50:
1f:81:43:5a:cc:5b:db:8d:4d:6c:8b:75:70:0d:2d:
a9:6c:b2:fd:58:f0:e9:e6:83:f5:04:19:14:9f:90:
31:77:a3:b6:88:f4:85:0f:a4:29:b2:da:bf:f8:98:
e3:36:c3:74:9f:bf:ab:99:9a:59:bd:88:5d:dd:6e:
d8:a5:02:83:fd:b5:a1:8c:8f:e1:a6:be:9f:bd:53:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CC:E1:4F:50:59:E0:17:13:B6:C3:97:4D:33:B3:96:67:AB:31:94
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VMzhT1BZ4BcTtsOXTTOzlmerMZQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.223.128/26
Signature Algorithm: sha256WithRSAEncryption
63:a4:02:d8:de:17:4b:0f:bd:0b:b6:86:80:36:27:7f:ee:a6:
d6:bb:ab:f1:0b:7d:08:2b:ae:8b:83:ef:e5:15:ac:ac:a2:73:
93:32:74:6d:d9:03:3d:65:4e:c6:8a:73:59:6f:76:a2:79:81:
13:d7:ad:61:ee:da:e8:66:65:9a:11:fd:74:5b:d7:dc:27:dc:
4f:ff:de:f0:83:c1:38:65:e9:8a:36:68:91:0c:ab:c7:08:5f:
61:a5:00:ac:f8:86:7e:b4:56:33:e8:08:b6:0d:5c:eb:85:ab:
52:06:f8:f8:2c:9e:e0:11:4c:38:86:b2:ed:9a:27:fa:31:df:
57:25:bc:87:f8:c0:b2:cf:8d:ab:f4:64:fa:1b:2f:75:87:fd:
84:51:66:88:bf:62:b9:eb:a7:9e:f1:6e:a0:68:fc:21:fc:86:
5a:af:0e:72:4a:d7:82:e3:15:b9:7b:80:85:86:62:e2:92:10:
61:70:41:e5:81:ac:fd:7d:71:f5:a3:10:b6:52:9f:00:2c:ed:
31:9e:49:5a:18:c0:38:52:51:95:20:8e:a3:f0:c2:f7:98:1d:
11:b1:fb:c5:9a:09:94:de:fa:9a:a0:ad:b8:81:7c:e7:b5:bb:
f9:7c:e8:92:94:a8:3b:61:0c:18:c3:3a:da:fb:30:ff:10:4a:
10:a5:66:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org