Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZgYvdz4j5o-Q_K8Qj52VOK7EXIo.roa
File: ZgYvdz4j5o-Q_K8Qj52VOK7EXIo.roa (raw, json)
Hash identifier: LM7uDAa58Q3Rq7yeIt29SgtKfldod4U+pvSmK5f7jmI=
Subject key identifier: 66:06:2F:77:3E:23:E6:8F:90:FC:AF:10:8F:9D:95:38:AE:C4:5C:8A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D40
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZgYvdz4j5o-Q_K8Qj52VOK7EXIo.roa
Signing time: Tue 29 Sep 2020 09:54:22 +0000
ROA not before: Tue 29 Sep 2020 09:54:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.228.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3392 (0xd40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:22 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=66062F773E23E68F90FCAF108F9D9538AEC45C8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:a7:19:dd:f3:3b:62:d1:ec:5d:71:30:23:
50:2f:24:23:de:94:a4:81:9c:9b:39:fb:2f:24:4c:
07:40:ce:47:f9:79:2c:6a:1e:45:3a:a2:c8:9f:49:
40:b2:74:6b:54:89:ab:4d:bc:f6:78:6f:7b:04:8e:
96:a6:df:b0:53:c8:af:f7:c9:7d:d1:48:f1:67:0c:
9a:0c:4d:79:a3:52:29:bb:4a:cb:00:cf:fa:55:12:
e9:45:a4:3a:9f:d1:16:39:3e:1d:af:82:69:7e:d7:
57:04:79:ec:96:0e:c7:26:ec:9e:a3:18:ca:62:12:
fa:6d:d1:4f:bd:28:ce:c3:b4:31:a1:10:e9:0b:95:
37:d3:d0:b8:49:3d:23:15:5e:69:f0:eb:37:bf:a4:
b1:90:1c:1e:ab:ea:33:2f:21:d9:9d:4a:a8:14:ec:
9f:25:90:2f:1f:ac:6f:a1:52:de:78:97:7e:5a:7e:
5c:29:a7:62:49:d8:ae:e3:47:75:bf:a8:6e:e1:48:
0c:56:64:77:1e:a5:b8:4d:9f:47:db:9f:16:84:c1:
a5:1f:5c:38:7c:1f:4c:96:dc:b0:b6:62:1d:cc:d0:
ab:f8:a2:74:26:7f:51:4c:ce:84:35:60:bc:05:8b:
ce:b2:39:9e:8a:c6:83:4b:80:b6:79:af:17:70:c5:
b1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:06:2F:77:3E:23:E6:8F:90:FC:AF:10:8F:9D:95:38:AE:C4:5C:8A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZgYvdz4j5o-Q_K8Qj52VOK7EXIo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.228.0/22
Signature Algorithm: sha256WithRSAEncryption
44:4d:88:fc:11:40:50:b3:34:a5:27:3e:ee:45:07:8a:9e:1f:
ee:59:e7:07:05:b2:d1:6d:db:bc:da:fd:be:90:10:cd:3e:55:
5c:73:d5:24:60:c2:cb:bc:6d:03:ad:3b:ad:f6:4b:c9:95:f5:
c0:61:35:ad:b7:48:fa:62:26:7b:8f:06:a8:9f:1f:5a:f8:e4:
8d:29:ee:6a:97:4a:45:16:c6:f7:82:69:3d:a0:75:5e:a3:74:
b7:57:fb:5a:93:ad:cc:ca:e2:53:8b:da:2e:47:3a:e9:71:d9:
4b:b6:7c:fe:2e:9a:06:f8:6b:b5:5b:f4:97:f3:f9:1b:05:98:
27:d9:0a:b2:46:06:65:98:06:25:1a:db:6e:68:94:f7:4d:59:
62:3a:c1:99:ec:fe:54:62:b5:0a:bb:2f:81:d3:55:dc:3b:29:
52:a6:c5:c0:64:6f:69:a4:b1:c8:64:85:36:d2:f5:9d:42:0a:
68:fb:65:90:43:1a:7d:af:9f:e7:fb:9a:be:d0:05:c3:4b:07:
3a:62:c5:cc:4a:e3:8d:54:58:34:11:a7:6c:f2:19:3b:e9:36:
29:28:74:b8:16:c4:b9:e1:bf:50:c4:c4:9f:81:fb:d6:6c:84:
da:af:a4:54:c0:59:cb:d6:bb:b3:27:1e:d4:36:9b:b1:5c:fa:
a0:e1:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org