Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cHRZp8R_cGJ810lF43Nz5Edm7GQ.roa
File: cHRZp8R_cGJ810lF43Nz5Edm7GQ.roa (raw, json)
Hash identifier: AfaDDtcmqrsg37BP+qk/aEVHs+21KDdCyoP2G3UMjOY=
Subject key identifier: 70:74:59:A7:C4:7F:70:62:7C:D7:49:45:E3:73:73:E4:47:66:EC:64
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D0B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cHRZp8R_cGJ810lF43Nz5Edm7GQ.roa
Signing time: Tue 29 Sep 2020 09:54:07 +0000
ROA not before: Tue 29 Sep 2020 09:54:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3339 (0xd0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:07 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=707459A7C47F70627CD74945E37373E44766EC64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:04:71:1f:a3:87:ab:8e:90:18:cf:30:92:f5:
5e:03:8f:56:55:f5:2a:6b:de:e9:76:07:6b:d5:db:
e8:e0:d3:96:80:ec:97:21:18:38:54:2d:11:c7:58:
7d:81:9b:ae:fa:c1:d7:2c:e5:31:32:46:84:7d:09:
08:8c:f7:b3:0c:a3:d0:39:2f:cc:7d:d9:e6:e9:35:
3e:91:47:9b:d5:36:21:3f:63:37:77:a5:26:49:e6:
8e:71:d7:e0:79:08:ef:aa:21:9b:a9:f5:be:bd:6c:
bd:6c:f2:5b:da:d6:cc:d3:c4:3b:cb:bf:1e:3f:28:
e9:23:73:1b:c6:28:ee:cd:06:24:6c:9f:fd:94:0b:
95:c6:a9:ad:1a:3d:f4:f4:1e:78:fa:35:d6:8d:97:
b0:e8:91:5f:c9:ed:24:7a:e4:d1:d0:70:46:e4:9b:
e8:80:2a:77:dc:10:c3:59:8c:b7:8c:2f:fe:d1:44:
ab:46:71:9a:24:07:d8:8a:d9:e8:88:ea:5c:45:01:
e3:fc:a8:73:ee:49:d5:a0:76:eb:9d:13:b0:46:b9:
5f:4b:37:92:91:5c:eb:9a:23:0e:34:7a:e3:26:3e:
c8:6b:b6:72:eb:ff:9e:04:a8:06:35:de:83:49:77:
56:4d:11:a8:b8:f1:25:2e:f3:cf:09:d9:8f:3e:a3:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:74:59:A7:C4:7F:70:62:7C:D7:49:45:E3:73:73:E4:47:66:EC:64
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cHRZp8R_cGJ810lF43Nz5Edm7GQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.192.0/21
Signature Algorithm: sha256WithRSAEncryption
29:75:f4:f1:57:48:3f:4f:40:cc:fe:db:26:d7:aa:0d:0d:8f:
e8:0e:a6:e4:f0:81:f4:7a:58:9b:c7:da:f5:74:23:35:38:b3:
4c:b4:a7:89:b4:ad:e7:00:63:45:c9:1b:98:f2:af:b1:b1:6a:
0f:ea:52:16:1f:24:07:83:96:aa:31:de:78:3d:46:6e:64:7e:
36:23:c1:94:63:f2:a5:45:0c:fa:b2:50:26:07:be:fc:ef:5a:
ec:f8:7e:0a:ed:d7:c6:cb:9e:60:ab:4a:92:71:ec:29:b4:65:
be:c4:fc:00:c1:ab:77:a9:6c:46:db:5a:27:38:50:c4:f8:cf:
21:6d:96:02:c3:a8:22:97:5b:e0:21:52:d4:69:60:71:19:a0:
1e:a9:e1:ba:86:43:a2:f3:2f:b9:63:44:cc:cc:60:b4:bb:40:
c1:c3:f2:b1:34:a4:41:91:00:39:cb:9a:f7:25:74:10:1d:c1:
28:72:aa:44:5a:55:99:21:9c:3d:f6:48:15:8a:62:65:40:d0:
18:86:39:e7:2a:d3:26:6e:a8:c3:cf:c6:f6:e0:44:20:ab:43:
77:d2:a5:17:7f:5d:67:75:4d:aa:de:ba:d6:2f:55:29:a1:f7:
2e:77:e3:c3:90:0b:83:52:56:ac:b3:13:7c:8b:00:10:3e:4d:
60:8e:e2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org