Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ecUFbbgYBp3LJ8KIyuvdn9dcX9E.roa
File: ecUFbbgYBp3LJ8KIyuvdn9dcX9E.roa (raw, json)
Hash identifier: dF5Y1VR4K8jkTaC6EgVkfSPA2Mis1tcy1hPz1sFi6T4=
Subject key identifier: 79:C5:05:6D:B8:18:06:9D:CB:27:C2:88:CA:EB:DD:9F:D7:5C:5F:D1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DCA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ecUFbbgYBp3LJ8KIyuvdn9dcX9E.roa
Signing time: Tue 29 Sep 2020 09:54:59 +0000
ROA not before: Tue 29 Sep 2020 09:54:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.192.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3530 (0xdca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:59 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=79C5056DB818069DCB27C288CAEBDD9FD75C5FD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:35:85:88:67:a2:d1:37:5a:6a:f3:a7:1b:
8f:fa:fb:75:4e:1c:bf:9e:95:53:d8:83:6a:e4:82:
5c:82:20:8b:10:76:02:a2:a6:09:5b:d6:d8:ef:d4:
9b:82:84:fa:60:4a:b2:cf:41:a8:79:3a:7e:6a:12:
dd:77:53:18:04:58:21:81:7c:0e:2f:25:2d:8e:28:
9f:3c:6d:66:33:03:51:d2:b8:c4:5c:ac:49:63:23:
1d:3c:c0:a0:2c:32:57:59:cf:cf:b7:83:f1:1e:da:
1f:38:f0:4d:97:52:12:87:97:d5:8f:92:8d:a0:5e:
26:71:7a:ad:3b:7c:eb:e7:c1:4a:c8:d7:24:87:6f:
a8:d8:59:24:3a:03:31:da:04:f9:ad:a9:25:a9:80:
df:d8:bf:3b:98:df:66:b8:de:cc:89:96:08:9d:3c:
a4:b9:04:8e:47:f1:b5:39:7e:ff:8e:e3:49:e1:32:
ce:82:22:63:43:56:56:0d:01:aa:54:45:02:df:fc:
d8:6e:43:0b:4a:9a:ed:98:6e:79:f2:05:ec:85:35:
2d:2b:1f:fd:27:87:d4:fa:f8:84:4c:61:5b:50:41:
28:76:a7:ea:63:f3:e5:e3:c8:8b:b8:70:f3:97:7b:
9d:8c:5c:af:c9:91:78:ea:87:39:5b:df:4a:29:67:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C5:05:6D:B8:18:06:9D:CB:27:C2:88:CA:EB:DD:9F:D7:5C:5F:D1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ecUFbbgYBp3LJ8KIyuvdn9dcX9E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:de:23:8f:17:7d:b6:ec:a8:4a:b1:0d:ca:eb:ec:f1:a5:27:
d0:61:ee:ee:75:39:8c:60:e6:6f:a3:1f:78:9e:c1:8f:02:74:
a8:87:b7:81:1b:6b:0e:f9:0a:ba:74:ac:7d:e3:64:a2:ba:4d:
7c:80:23:5f:9b:30:19:9c:23:de:46:c7:cb:ab:a9:36:71:70:
5e:93:da:52:d7:ce:db:81:5e:99:84:da:04:43:53:80:cb:06:
ec:9d:ff:15:54:1c:10:e8:40:6b:ea:30:8a:c9:ce:4e:42:23:
84:7f:c9:e8:2d:d9:08:f3:69:d1:2f:30:a9:d0:07:db:47:18:
05:df:ff:bd:08:31:84:21:4d:74:05:c0:11:9b:e7:c8:1e:15:
00:51:ed:0b:35:1d:80:cc:1c:70:77:08:71:94:3e:70:cd:af:
15:94:88:6e:41:9e:e0:7a:71:bd:c0:1b:97:4e:33:6f:99:98:
9a:ad:07:0c:85:a9:91:c9:84:95:0b:39:89:80:4b:69:52:4b:
84:63:bd:11:c9:d9:aa:1f:50:d5:ba:5d:c7:c1:b1:36:85:f7:
72:e0:55:db:e5:89:f2:53:a9:27:f3:af:54:06:dd:c3:9d:5b:
48:8d:85:54:02:6f:51:ee:46:c2:d1:af:c9:19:64:2f:17:40:
da:3a:81:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org