Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fsJuvp2ANhn9m8E48B4DhkLdpuE.roa
File: fsJuvp2ANhn9m8E48B4DhkLdpuE.roa (raw, json)
Hash identifier: mRXQkmzDMKY7jg66blc7EI9Zj/O4hnl56Gu3o+jcE6w=
Subject key identifier: 7E:C2:6E:BE:9D:80:36:19:FD:9B:C1:38:F0:1E:03:86:42:DD:A6:E1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EC1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fsJuvp2ANhn9m8E48B4DhkLdpuE.roa
Signing time: Tue 29 Sep 2020 09:56:06 +0000
ROA not before: Tue 29 Sep 2020 09:56:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3777 (0xec1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:06 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7EC26EBE9D803619FD9BC138F01E038642DDA6E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:62:bf:ca:46:ed:7a:5e:7f:88:63:08:d8:
ee:37:b5:a6:ee:98:d3:51:7b:3d:a8:15:b3:9d:b0:
66:a5:c5:8b:71:5f:a2:ca:b5:ca:18:55:14:2f:9d:
34:0f:04:d0:8f:0b:30:11:89:ab:d8:e2:b0:2d:6c:
bc:fb:d4:fb:37:92:d4:e1:15:2b:82:49:39:43:28:
14:6b:69:da:20:e7:9f:51:71:64:25:5e:6e:0c:e0:
47:82:19:96:d6:7d:36:b6:71:e8:99:8d:39:fe:6a:
e6:63:ff:47:e0:d5:32:ee:0d:bd:7e:10:c6:ab:a2:
67:6d:cf:7a:0e:49:6c:af:75:8c:d9:f8:66:d0:39:
c5:a1:b6:60:b6:96:72:4c:ab:30:10:55:1b:69:95:
91:d6:ce:c1:30:1a:06:8e:d2:34:1f:20:3b:79:e8:
cf:36:d2:d2:16:48:bd:ed:6a:c8:40:9b:41:fe:ca:
1d:7c:05:f9:a1:26:98:a1:c2:a6:a1:ca:fd:dc:01:
1f:7b:c5:89:fe:f5:72:15:0d:07:af:01:f3:c1:3f:
0f:ac:e2:6e:81:85:02:96:70:af:1e:09:a1:a7:2f:
86:a8:31:eb:c1:af:8a:20:87:5a:12:e3:fc:4b:fc:
50:21:c7:1e:c5:a1:74:3e:61:19:59:17:b9:15:12:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C2:6E:BE:9D:80:36:19:FD:9B:C1:38:F0:1E:03:86:42:DD:A6:E1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fsJuvp2ANhn9m8E48B4DhkLdpuE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.160.0/22
Signature Algorithm: sha256WithRSAEncryption
18:16:e8:2d:cf:67:75:06:e4:26:72:7f:e4:35:55:24:ec:ba:
e9:ed:3c:14:b4:e1:b2:51:fe:eb:af:52:57:42:4f:15:0e:df:
d1:59:aa:df:dc:66:38:a7:3f:6c:8f:34:56:04:03:e2:fb:c4:
3d:a7:71:ea:21:44:f7:00:08:70:62:22:b6:03:7e:92:ed:5a:
63:75:37:7e:f3:50:98:1c:5d:48:77:60:c6:89:46:1d:d1:13:
da:ab:45:1f:d7:f5:56:b5:0f:a7:f0:0e:d1:7d:21:db:15:a9:
0e:87:e1:6b:10:c3:dd:5e:8e:3b:0e:fd:6c:69:30:19:2f:39:
62:ff:84:70:1b:53:8e:f1:c2:57:20:d5:89:b3:eb:bd:fb:13:
7a:7d:a1:03:2a:f5:aa:a6:62:60:67:84:fc:dc:69:6d:04:7a:
c2:f3:88:88:68:6b:2a:b2:35:7d:a1:9b:f8:9e:5e:0b:52:a6:
f3:6a:98:c3:21:05:e2:a9:25:ae:b3:24:3b:57:39:ef:cd:bd:
ec:46:4c:05:75:51:f3:ab:12:39:d9:e6:aa:65:bb:80:b5:aa:
44:ca:b3:c1:66:f8:5b:de:c1:85:d4:f6:8c:a7:8f:09:65:1e:
12:ad:82:67:2e:88:b9:8e:40:7b:4c:f4:17:b0:93:e6:a4:e8:
89:16:4f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org