Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VsNHoMK1cppiIttJzAc4UciRhZc.roa
File: VsNHoMK1cppiIttJzAc4UciRhZc.roa (raw, json)
Hash identifier: g73x2FS8baBEJ6zI5Mlae7rjq2trP3MAoZDCppwFR9Q=
Subject key identifier: 56:C3:47:A0:C2:B5:72:9A:62:22:DB:49:CC:07:38:51:C8:91:85:97
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1679
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VsNHoMK1cppiIttJzAc4UciRhZc.roa
Signing time: Sun 07 Feb 2021 12:10:42 +0000
ROA not before: Sun 07 Feb 2021 12:10:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5753 (0x1679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:10:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=56C347A0C2B5729A6222DB49CC073851C8918597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:b4:fd:46:2d:c7:72:4d:f3:7a:59:5a:51:
e9:77:1c:3e:01:5f:44:8b:f9:78:60:20:d7:c6:2c:
8e:cc:c6:24:ea:91:4d:ea:b8:0d:4d:57:bd:8c:f8:
79:47:a8:ae:ca:64:b4:90:5c:14:80:4f:17:f5:08:
ac:a9:4e:3d:ab:e3:4b:46:81:3f:0d:49:65:21:36:
8d:5f:65:e5:76:98:94:7e:8c:fc:9e:9c:71:a3:71:
cb:d4:63:43:80:67:53:9a:ae:28:cd:da:82:98:fb:
7c:a2:9a:26:6e:aa:9a:a2:c9:e3:27:cd:5c:17:49:
92:64:87:81:22:22:5c:07:77:eb:c6:be:d9:6e:f4:
84:79:00:89:3a:ed:77:0a:a5:5e:78:45:5f:7a:6a:
ce:e9:d7:70:02:0e:3c:93:93:bb:d4:05:a9:2b:c7:
3a:ce:40:e8:08:4e:c9:37:9c:26:72:d2:aa:69:39:
18:88:98:e8:62:45:b8:b5:c9:7f:b3:b1:c6:49:89:
97:a5:9b:1d:2c:06:71:6b:6b:d2:8f:3a:71:99:86:
63:54:bf:7a:58:68:8d:ee:75:46:7b:c1:03:02:1a:
c8:83:18:ae:00:b7:4b:59:a9:92:2e:59:19:be:ec:
f3:4f:63:78:ed:29:a0:7c:71:06:b7:8a:85:a5:f3:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C3:47:A0:C2:B5:72:9A:62:22:DB:49:CC:07:38:51:C8:91:85:97
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VsNHoMK1cppiIttJzAc4UciRhZc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.179.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:2c:ac:52:9a:9f:5a:34:f9:0e:d3:9b:e5:50:12:f3:44:01:
7f:4e:ee:2d:5b:92:14:60:dc:4a:47:6f:52:dd:ce:a6:05:54:
c4:14:b0:90:84:77:88:39:9d:24:d7:a0:da:d3:2c:91:9d:c4:
d6:73:95:7e:b3:26:a1:74:81:36:62:55:0c:9d:52:79:e8:2e:
53:25:7e:97:a6:64:1d:7a:0e:74:9b:4c:2e:6a:67:17:ef:5a:
5e:a0:1a:f5:21:43:56:1d:d9:10:61:09:83:c8:84:7b:8e:28:
92:a6:8a:f9:fc:3b:1e:bc:95:fd:4e:dc:a0:47:7f:9e:75:d0:
d9:9e:6f:65:f8:bd:a9:d0:d4:af:d6:02:14:81:3f:38:89:86:
21:6d:94:69:f2:e8:e4:31:7b:6c:a2:9b:15:4d:a4:a5:2e:64:
0a:6f:fe:5e:89:87:6e:37:6b:46:f4:fc:8e:25:39:85:c4:15:
d2:f1:5a:a5:e7:25:28:25:b9:1f:b7:30:03:3c:d9:b5:5c:7c:
b7:e0:ab:37:ad:ed:a9:3e:85:1b:71:9d:5d:68:16:0e:a1:29:
8b:fa:2b:c7:73:4e:02:61:93:d5:16:f9:af:c4:31:2d:18:e3:
54:09:d9:71:bc:f5:0d:72:31:cf:e5:c3:2f:2b:83:1a:76:bc:
eb:19:59:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:30 2023 by rpki-client on console-fra.rpki-client.org