Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eaSCHF2E3nSO-TtjoJSXPNzszXQ.roa
File: eaSCHF2E3nSO-TtjoJSXPNzszXQ.roa (raw, json)
Hash identifier: T88mksVAUS7KJH49SRUMA4Y2l+26ri27KM6x3/0W/tc=
Subject key identifier: 79:A4:82:1C:5D:84:DE:74:8E:F9:3B:63:A0:94:97:3C:DC:EC:CD:74
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1905
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eaSCHF2E3nSO-TtjoJSXPNzszXQ.roa
Signing time: Sun 07 Feb 2021 12:56:14 +0000
ROA not before: Sun 07 Feb 2021 12:56:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6405 (0x1905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:56:14 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=79A4821C5D84DE748EF93B63A094973CDCECCD74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:4f:8d:d6:83:dc:6b:a5:bc:02:78:4b:3f:
d9:23:fb:bb:0f:22:71:73:ba:f1:98:a3:eb:8f:98:
9e:1e:5b:d2:5b:72:c0:b6:34:b4:61:f3:2d:b5:32:
8f:8d:e8:0a:f5:bc:fb:95:92:a1:ed:3a:ab:70:93:
28:8e:1d:95:00:6d:2d:60:9d:18:8a:21:89:18:9e:
2d:90:38:8f:1d:48:f9:52:2e:2f:f4:20:00:eb:3a:
dc:14:ff:0a:64:58:64:1d:7e:fc:c4:6f:52:ab:5d:
52:8e:e3:29:b8:d2:43:ec:ff:e7:03:c6:75:9b:66:
0e:67:e8:67:fa:55:42:ce:41:9f:d1:83:9b:8c:d3:
c5:c4:ca:16:a5:62:81:8f:39:c8:b0:14:eb:1a:bb:
d4:45:ac:4a:c3:4d:69:ea:3b:c6:33:e8:f9:07:d5:
b6:a8:27:56:47:84:81:5c:a0:f5:7b:a5:99:48:04:
47:33:aa:52:39:aa:a6:90:eb:3b:98:8e:0c:12:e2:
72:30:01:31:f7:d7:f8:87:5f:54:90:6f:b8:6c:e5:
91:e8:42:47:4e:bc:c2:b2:00:7f:d8:61:84:97:ac:
16:d0:9d:ea:55:f2:36:0f:4b:8c:d6:41:54:95:ef:
21:03:7b:16:cd:89:b9:b9:f0:ce:f5:07:cf:39:d5:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A4:82:1C:5D:84:DE:74:8E:F9:3B:63:A0:94:97:3C:DC:EC:CD:74
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eaSCHF2E3nSO-TtjoJSXPNzszXQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.224.0/20
Signature Algorithm: sha256WithRSAEncryption
77:ff:d1:81:9e:5a:03:a8:95:01:5b:3a:cb:d2:25:7b:8b:6e:
bf:a2:a4:49:cc:35:48:bd:10:36:52:2f:6f:3c:6e:fd:11:c8:
b9:f1:1b:f6:31:b6:65:38:bb:3b:99:39:e6:e7:71:96:b6:7e:
e7:b9:8f:a3:dc:b1:3f:c7:c4:26:44:cb:74:47:b3:dc:bd:70:
6d:16:19:70:97:1d:f9:ac:7b:36:f5:75:e7:c2:07:4d:88:d4:
08:87:05:d5:fa:f7:25:8e:91:46:7e:4c:a7:7e:e7:54:c9:d4:
b2:22:32:56:14:20:74:04:95:ba:72:d5:59:68:ee:2a:76:b3:
95:9d:1e:5b:b5:de:22:79:e4:f5:d1:5a:f3:f7:2e:b3:e9:50:
2b:6e:e0:d0:6b:ff:bb:ed:e6:eb:7f:7f:b9:a3:43:1c:4e:91:
bd:a1:38:8e:58:3e:6c:3a:0a:d2:c6:00:4d:79:0c:f9:1d:3d:
e3:e0:00:a6:db:52:a9:03:ee:d3:68:43:db:2b:83:f9:30:ee:
bd:e2:fa:2c:ee:1b:61:46:38:c8:b4:08:28:b4:62:24:60:cf:
73:e1:a6:38:72:fd:10:a9:dd:01:d0:5a:2f:ab:b1:11:c4:5d:
80:8e:fe:9a:50:88:88:d9:ed:44:f8:dc:6b:d5:54:f7:39:2c:
07:6b:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org