Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZKXm0gWnLWqfrn4DSDaQPcQyZEM.roa
File: ZKXm0gWnLWqfrn4DSDaQPcQyZEM.roa (raw, json)
Hash identifier: yEj6I62LtZsAKSl+winaFTmCc6p3Z3l6ESCGvid1LP4=
Subject key identifier: 64:A5:E6:D2:05:A7:2D:6A:9F:AE:7E:03:48:36:90:3D:C4:32:64:43
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F46
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZKXm0gWnLWqfrn4DSDaQPcQyZEM.roa
Signing time: Tue 29 Sep 2020 09:56:43 +0000
ROA not before: Tue 29 Sep 2020 09:56:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3910 (0xf46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=64A5E6D205A72D6A9FAE7E034836903DC4326443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:23:ee:51:0f:c4:f7:1f:a7:d1:64:eb:82:
2d:cc:4c:2a:e4:b3:07:fd:c2:fb:bb:5b:5f:97:dd:
2d:05:85:1b:8e:04:25:23:cd:fc:b8:7e:4d:46:4f:
d5:a5:6e:c0:31:ff:23:48:e3:0e:ab:ce:13:2c:28:
1d:0c:cc:95:15:04:d8:f7:f6:e3:5e:d3:0b:91:33:
ef:a4:a7:02:44:60:b5:3f:4c:17:34:bd:c0:22:4b:
24:d5:fd:2c:ed:5d:92:8f:dc:11:c1:83:25:f1:e2:
40:81:55:5f:14:ac:fd:10:39:db:ff:c6:ee:75:bd:
94:0c:7e:57:81:a3:03:8a:c6:b4:03:81:1c:f6:77:
b9:34:ce:66:15:3d:13:b6:e3:0e:15:1c:79:d0:06:
2d:87:7b:ec:72:10:84:35:51:90:97:68:d5:33:81:
36:b0:66:82:bd:5c:82:36:29:78:c7:44:5b:f3:75:
44:1d:cd:fb:0b:c0:ea:da:2b:47:61:8f:4d:a1:a3:
14:9a:21:0f:59:1b:94:7c:8b:ac:cf:40:82:47:ef:
50:c3:4f:a9:8d:75:4f:09:80:88:05:de:eb:a6:c6:
d8:c0:5f:e7:c1:31:6d:c3:b1:e2:9d:db:b6:f8:5a:
82:b8:57:5a:66:0b:e8:e4:c7:01:2e:e4:d5:f5:7c:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A5:E6:D2:05:A7:2D:6A:9F:AE:7E:03:48:36:90:3D:C4:32:64:43
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZKXm0gWnLWqfrn4DSDaQPcQyZEM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.244.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:0f:97:f0:1d:d5:68:6d:eb:f6:1e:f9:96:f6:38:f7:96:f7:
de:77:e2:c7:81:f0:f7:6c:1f:46:26:3e:9d:03:a6:3c:b1:27:
46:d1:5b:2b:54:d1:44:58:26:95:43:90:39:de:21:15:01:45:
e7:1b:d7:5c:4d:e9:f8:85:44:fd:a7:d1:5e:74:ad:bf:e4:47:
43:4e:c5:28:44:6c:59:c9:df:3d:e8:03:50:fc:e9:82:34:02:
fb:bd:3a:99:dc:93:52:a9:70:05:52:c2:05:70:8f:9c:f2:41:
85:8c:f4:21:b2:5e:14:fb:ed:fc:25:4c:f5:ba:46:9b:d7:b5:
85:af:da:cc:f8:f9:c8:0a:df:11:ec:a7:9a:1e:4d:de:cd:5e:
82:1e:7b:26:57:0d:0a:de:87:58:08:3a:64:29:61:d0:84:c6:
a9:be:e4:18:ba:29:6e:9c:59:3d:8d:89:a6:80:5f:de:1b:45:
9e:d0:c0:ff:20:ad:c7:b1:92:7e:e0:33:a7:97:da:f4:82:d2:
c2:bd:93:49:82:8e:86:e6:99:be:23:a4:87:17:54:f8:b1:b7:
c0:3d:1c:60:c8:de:b6:37:7b:b4:2b:8a:56:cf:b3:28:52:08:
cf:6f:9e:1a:3a:8d:16:7f:bf:3d:ae:bf:56:72:ae:f9:dc:22:
83:50:b4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org