Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XZGPu-cIrEVp7E7nfkmyuxREhz0.roa
File: XZGPu-cIrEVp7E7nfkmyuxREhz0.roa (raw, json)
Hash identifier: XfEWeQkLBgSuhDRFzui7aF8g1oELpMLYaw4kYAs/zZA=
Subject key identifier: 5D:91:8F:BB:E7:08:AC:45:69:EC:4E:E7:7E:49:B2:BB:14:44:87:3D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DDC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XZGPu-cIrEVp7E7nfkmyuxREhz0.roa
Signing time: Tue 29 Sep 2020 09:55:05 +0000
ROA not before: Tue 29 Sep 2020 09:55:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3548 (0xddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:05 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5D918FBBE708AC4569EC4EE77E49B2BB1444873D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:df:f2:29:17:17:ec:db:ac:ea:01:d1:51:
db:4c:7e:fa:7b:ca:a9:13:2b:1b:e1:b8:db:4d:ed:
2b:02:ea:2c:2c:bd:d2:47:d3:ad:f6:44:7a:70:a4:
50:cf:de:60:05:d4:63:92:5b:17:00:1a:e8:16:d7:
be:8e:77:32:72:6d:d4:e6:3c:ae:41:c5:14:b3:3a:
ef:f5:71:91:32:42:23:1c:15:c4:f5:e3:2e:a0:2f:
3f:56:11:b5:ea:fc:84:5c:39:f0:b7:ac:8e:80:56:
ed:d7:a3:f1:31:aa:3d:92:aa:4c:33:1c:df:56:51:
f2:3d:52:52:93:42:37:de:11:9a:cd:29:8a:5c:7a:
0f:ac:4d:2c:76:e6:d1:bb:df:3d:0b:da:3e:1c:0b:
87:1d:93:3a:3a:db:32:f9:16:97:50:7c:3b:91:3f:
68:13:cb:3e:f2:08:85:55:91:47:06:49:02:90:e4:
bb:13:dc:42:ff:ff:5d:b6:47:c2:81:9d:d2:96:1a:
af:0c:9e:7a:29:ec:7f:a8:24:a9:de:e9:0e:8f:9e:
48:65:96:1c:5d:4c:3f:75:d2:47:73:6f:bb:9e:ca:
03:12:b4:60:e4:2b:81:1c:1f:81:65:67:2b:c6:dd:
e2:fe:19:e3:7c:44:ef:3c:d6:3e:e8:67:79:6e:72:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:91:8F:BB:E7:08:AC:45:69:EC:4E:E7:7E:49:B2:BB:14:44:87:3D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XZGPu-cIrEVp7E7nfkmyuxREhz0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.40.0/22
Signature Algorithm: sha256WithRSAEncryption
84:45:9d:d5:72:bf:d5:c6:ce:aa:bf:56:75:4d:dc:a2:37:61:
ea:76:4b:94:fc:a1:9e:48:1e:bf:28:7a:c1:64:47:80:91:a4:
ea:04:c6:36:6e:4a:86:34:8a:4f:15:af:1a:d4:53:1f:3f:6d:
73:ad:a9:d5:d8:1d:63:8e:52:4a:b9:5f:c6:e8:a7:ec:ff:bd:
e8:97:60:2c:9f:c6:12:f2:29:d4:bb:0a:e3:a9:1e:ce:e0:ba:
9f:c1:27:ec:ff:f3:12:ba:29:92:ed:4d:03:85:77:9b:e1:07:
87:5a:d8:50:83:b2:eb:a5:c1:91:e7:69:6a:33:77:4c:8b:c3:
df:b4:f7:c1:04:de:21:5d:f3:c6:77:99:f1:b2:95:5d:30:ca:
ef:08:5e:33:21:24:b3:e0:ec:93:54:31:6c:b1:01:b4:89:3c:
db:37:fa:10:2c:a7:71:b4:68:d7:e7:ea:72:1f:b1:cd:9c:3b:
f2:91:10:0b:14:38:0b:81:6d:a0:01:90:ed:d0:b6:fd:27:50:
22:c4:ce:82:58:88:9c:3b:4e:2a:bb:2a:e5:a3:36:a8:2b:d9:
32:4e:bb:48:6c:bf:37:93:1d:8f:4c:9d:67:4c:a5:52:17:76:
3b:b4:f9:7b:a1:18:2b:57:e8:b3:9c:1d:a0:e5:35:e3:29:b8:
be:97:fd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org