Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/apofOKl9bI5-6X1IzMFPWlcIo7w.roa
File: apofOKl9bI5-6X1IzMFPWlcIo7w.roa (raw, json)
Hash identifier: Zs0C6Fb4bFFHvn9RJv56haWfzgSOMf83fSMbdA973MQ=
Subject key identifier: 6A:9A:1F:38:A9:7D:6C:8E:7E:E9:7D:48:CC:C1:4F:5A:57:08:A3:BC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F09
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/apofOKl9bI5-6X1IzMFPWlcIo7w.roa
Signing time: Tue 29 Sep 2020 09:56:25 +0000
ROA not before: Tue 29 Sep 2020 09:56:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.193.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3849 (0xf09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:25 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6A9A1F38A97D6C8E7EE97D48CCC14F5A5708A3BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:c8:0c:10:a6:d2:e4:86:5c:66:0e:0b:ce:
a5:28:63:e3:b9:35:38:a2:08:92:0f:ed:b3:63:ac:
2d:4f:cc:6c:77:3b:6b:e7:71:bd:07:88:8e:26:a5:
c9:1b:74:e0:21:d1:21:20:7f:b6:75:db:30:2f:d8:
70:dd:bd:13:0a:39:e8:ae:ef:70:ae:9e:f5:15:c1:
af:1c:94:f4:16:e2:fe:06:1f:be:f1:27:f1:c3:29:
9b:07:45:d3:25:ea:29:49:f8:98:87:c2:52:e9:0d:
d8:7f:dc:b5:ba:56:fd:e2:d0:f4:c4:d5:1a:a2:6a:
23:d2:01:2a:93:c0:41:93:b4:80:b7:f6:a8:16:b8:
39:06:83:06:05:c0:fd:41:d8:da:75:50:0f:77:f7:
dd:3c:86:f6:b5:18:90:19:99:b4:9b:da:e2:ad:6b:
3e:e1:f9:d2:68:e8:61:cf:fe:ed:4d:3c:03:84:9e:
8d:e4:d6:b3:51:43:19:46:4c:00:f0:77:b3:fb:59:
bf:95:ff:d7:6e:6a:9b:a3:5b:af:f8:c4:dd:15:34:
7b:b5:1d:05:80:9d:d7:b2:5e:0e:43:c2:85:89:44:
73:9d:a8:5d:dd:7a:f2:c1:28:68:94:bf:4a:a4:27:
ef:07:31:99:83:38:92:8f:6c:61:39:c9:62:d9:f5:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9A:1F:38:A9:7D:6C:8E:7E:E9:7D:48:CC:C1:4F:5A:57:08:A3:BC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/apofOKl9bI5-6X1IzMFPWlcIo7w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.80.0/20
Signature Algorithm: sha256WithRSAEncryption
60:2d:43:1c:7f:80:c5:7a:d2:47:01:5b:a0:ae:91:b4:2e:0e:
49:60:29:7a:f7:7e:9c:33:59:5a:91:91:39:45:54:e0:1b:90:
6a:73:fb:12:1e:69:28:d8:7b:cd:2a:c4:95:96:d3:f9:6c:86:
e1:e2:b0:2a:2c:eb:0c:b5:52:01:42:9b:2e:b2:13:4f:14:5c:
6d:aa:5c:dd:49:a4:e9:d8:39:98:c2:ad:fc:1f:b9:db:6f:a0:
ae:d3:5a:63:ed:26:4d:4e:0b:f0:17:5d:b4:da:1e:1a:b0:c4:
ac:9a:42:a6:95:d6:17:de:87:23:7b:db:68:29:2f:a4:6e:b3:
ae:cf:e6:e0:65:80:3c:34:da:9c:08:7b:21:04:f9:80:a4:b2:
4e:fb:cf:d1:bd:d0:38:f8:c6:54:36:32:1f:16:4c:f9:68:79:
50:4a:08:73:6e:15:73:07:be:42:4f:7b:d7:1b:e2:b7:04:7d:
c7:a2:ad:c3:d5:2f:4e:2b:5c:6f:8f:fa:e7:f4:09:7e:f6:90:
40:2f:d6:ac:31:e0:73:42:5e:4e:f1:88:5c:b3:59:2b:90:a4:
15:11:e9:9e:95:6e:8b:4b:d7:33:9c:31:cb:fe:b3:a3:86:cf:
40:dd:b5:6e:1b:ac:de:4f:a2:cc:2d:26:36:a1:4c:bb:e2:50:
94:0d:c2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org