Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/figitZBxCZpB5Om8c4iLwZBO_Oo.roa
File: figitZBxCZpB5Om8c4iLwZBO_Oo.roa (raw, json)
Hash identifier: Wex7keaq8lm3MBh8U1KsUU8axe02XYnPBFdqDwlEpPs=
Subject key identifier: 7E:28:22:B5:90:71:09:9A:41:E4:E9:BC:73:88:8B:C1:90:4E:FC:EA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EAE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/figitZBxCZpB5Om8c4iLwZBO_Oo.roa
Signing time: Tue 29 Sep 2020 09:56:01 +0000
ROA not before: Tue 29 Sep 2020 09:56:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3758 (0xeae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:01 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7E2822B59071099A41E4E9BC73888BC1904EFCEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:5f:50:12:70:b3:90:dd:5b:30:86:fe:43:
30:f2:22:18:86:70:02:08:1e:0c:6e:99:ec:b0:55:
33:13:1e:91:be:36:d9:56:d2:5d:86:9b:b1:b5:f2:
d6:8c:0d:dd:1a:53:73:9b:b5:d7:ba:95:b7:29:b4:
e8:52:de:8a:e0:ae:cb:fc:06:00:86:d1:82:e4:5b:
73:d8:ce:86:c3:60:7a:2a:a9:a8:be:30:83:bc:e4:
fd:69:aa:50:d2:4a:e0:08:1e:c7:51:f7:94:a9:f1:
b3:10:0a:37:02:98:70:c0:77:5a:b0:38:01:25:19:
13:67:3b:84:a3:90:b6:96:c1:c8:ec:ab:96:66:93:
37:d3:d4:5a:04:cb:2b:34:b1:db:19:bb:8f:da:70:
15:2e:ca:f0:99:87:40:05:12:00:01:c8:15:bc:43:
22:a6:b6:b9:84:d2:06:e6:d6:8f:30:97:38:3c:43:
f7:6d:c5:da:ef:5b:81:b6:19:c0:eb:96:36:d7:5a:
b5:21:e9:23:02:5e:99:a3:c4:11:e4:74:07:13:1d:
2e:47:b7:1b:0e:6c:5b:6c:f7:6b:c2:e7:02:91:8b:
46:82:11:a2:88:3f:8c:58:b8:e8:76:1e:5c:c0:a5:
c4:74:8a:5c:28:4a:c0:72:51:f2:53:94:da:09:06:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:28:22:B5:90:71:09:9A:41:E4:E9:BC:73:88:8B:C1:90:4E:FC:EA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/figitZBxCZpB5Om8c4iLwZBO_Oo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.224.0/21
Signature Algorithm: sha256WithRSAEncryption
20:2e:95:10:96:60:78:17:41:6a:26:31:1c:71:66:7c:24:5b:
30:5f:3e:57:0c:7a:d6:01:b7:b2:28:14:a0:3c:2e:6b:16:2d:
00:bd:17:fb:bc:4c:44:05:62:f8:e4:70:fb:05:0f:f9:2e:b1:
d2:71:c2:06:db:f2:d3:da:c5:6a:4e:d1:6d:72:51:e8:13:95:
6d:a6:c9:a4:ac:95:5a:fd:ad:70:d9:b6:48:21:30:03:86:e4:
77:1d:d4:94:0c:9d:6f:a9:8f:e7:2f:c0:f4:cb:e8:24:9b:20:
bf:6c:d3:40:7c:3b:bc:a6:1c:86:cd:57:a8:81:c4:d1:d3:47:
2f:82:bb:7c:e4:40:aa:aa:53:f3:af:d0:26:b4:9e:b4:2c:ab:
af:32:43:c8:65:6f:3e:1c:f1:21:92:50:ca:dd:4e:e7:9d:b1:
60:91:bf:5b:49:63:bb:ca:19:2b:b5:5c:3f:c0:bc:5e:7f:41:
54:bf:91:8b:83:9b:3b:c8:4e:8c:46:55:fd:95:47:00:fd:ac:
d0:18:f6:b4:30:8c:f3:10:43:8c:63:94:ce:f7:00:f3:22:dd:
1d:ef:28:56:35:aa:e8:97:d8:db:e4:95:85:17:ca:99:f5:6f:
6b:e8:79:0c:9a:bd:5e:bb:5a:17:05:ac:63:e6:4b:da:e9:16:
14:86:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org