Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VehnzZqOuaGQ6FKU1_Y92pJvBqA.roa
File: VehnzZqOuaGQ6FKU1_Y92pJvBqA.roa (raw, json)
Hash identifier: 4fqxAZRuikwGwqqBTTOldS/akLxaZ+TJX2UQDxc1lBc=
Subject key identifier: 55:E8:67:CD:9A:8E:B9:A1:90:E8:52:94:D7:F6:3D:DA:92:6F:06:A0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D47
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VehnzZqOuaGQ6FKU1_Y92pJvBqA.roa
Signing time: Tue 29 Sep 2020 09:54:23 +0000
ROA not before: Tue 29 Sep 2020 09:54:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3399 (0xd47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:23 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=55E867CD9A8EB9A190E85294D7F63DDA926F06A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b5:3f:53:73:6d:7e:79:d5:3d:5b:0c:ac:e7:
4f:1a:07:56:01:1e:4a:50:17:30:4b:51:a4:ca:74:
0c:e4:a6:ae:64:92:0f:05:f7:19:0d:96:7c:89:04:
2e:ec:5a:4e:87:2c:00:10:8b:61:cb:03:a5:74:51:
c4:3e:81:54:a8:66:b8:b9:01:55:c6:3f:65:72:7b:
f4:ed:9a:56:6b:9a:f5:31:11:db:2e:64:63:52:2f:
d1:b8:33:f5:44:bf:24:e8:a5:6e:0e:e3:e5:0f:9b:
e8:c0:4b:dc:a1:76:e4:e6:06:31:ec:ed:1d:62:bd:
01:b9:00:a9:af:22:89:91:c2:dc:bd:55:34:ed:59:
e5:8c:08:71:35:57:17:a7:d9:b6:d3:5e:09:8c:4d:
cf:78:57:0a:4b:d9:56:58:92:a3:78:42:44:e1:b8:
e6:2d:a1:b1:7e:b5:50:51:26:ac:0a:7c:cb:2e:44:
f5:a9:a7:61:c9:70:79:eb:51:83:94:7a:3d:43:56:
6f:41:d0:81:97:c9:b1:9b:d2:aa:22:09:56:94:16:
b0:73:92:65:c1:c4:97:a1:48:c7:27:77:be:a1:c4:
83:18:70:1c:ec:ef:99:cc:32:80:47:8b:c8:0f:43:
5c:38:3a:d9:27:9e:66:07:7b:52:58:16:09:89:14:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E8:67:CD:9A:8E:B9:A1:90:E8:52:94:D7:F6:3D:DA:92:6F:06:A0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VehnzZqOuaGQ6FKU1_Y92pJvBqA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.8.0/22
Signature Algorithm: sha256WithRSAEncryption
84:19:8a:d2:e0:67:b5:80:7e:d6:20:26:3e:90:53:43:c9:6e:
44:f6:0f:ff:f9:5d:27:88:b2:6c:29:a1:eb:cb:8f:eb:de:f4:
d4:34:94:7f:96:fd:5d:3e:c0:b3:ab:76:f9:36:f3:f8:98:e8:
1b:48:15:f5:e1:03:39:06:f4:c7:f1:d9:25:ac:fc:fb:3a:a6:
b6:8a:6c:d6:a6:8f:84:47:4e:38:5a:3f:8f:15:71:5a:33:6b:
7f:26:1b:77:a4:89:62:a6:78:59:5a:11:37:3d:1d:70:71:5d:
cf:1c:94:63:32:19:49:b4:7e:20:6f:ab:e5:88:5e:a3:41:22:
b2:39:4d:a0:53:2f:61:c9:8e:bb:c7:1f:46:44:b4:29:e3:0b:
1a:76:7f:eb:1e:cf:d1:2f:1f:cb:be:1d:f0:06:89:a9:7b:31:
52:7e:c1:65:e2:ad:f8:bb:c2:83:ad:f1:cc:80:d5:c4:dc:8d:
1d:34:28:61:a9:62:04:c5:7e:59:48:30:84:e5:ed:8e:d6:4d:
15:e0:78:71:ed:ad:af:b4:f9:4e:9f:ec:07:14:5e:97:4c:38:
77:df:1d:0d:11:a6:d6:a9:5e:51:84:6c:de:41:b8:2b:a3:76:
95:aa:82:72:c2:7d:bd:7a:72:38:4d:d1:ac:b8:71:11:b7:4c:
1b:2a:15:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org