Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gwr_8hKOu9OUBJNIt6MRgNpZC9w.roa
File: gwr_8hKOu9OUBJNIt6MRgNpZC9w.roa (raw, json)
Hash identifier: Re+cXcrmTZ5xPf4twr4muS6kIybAiQabls829MCb9ss=
Subject key identifier: 83:0A:FF:F2:12:8E:BB:D3:94:04:93:48:B7:A3:11:80:DA:59:0B:DC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E25
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gwr_8hKOu9OUBJNIt6MRgNpZC9w.roa
Signing time: Tue 29 Sep 2020 09:55:23 +0000
ROA not before: Tue 29 Sep 2020 09:55:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3621 (0xe25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:23 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=830AFFF2128EBBD394049348B7A31180DA590BDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:a1:e6:5d:42:57:00:93:0e:e7:f3:a4:46:
d6:fd:d7:70:b4:e6:a3:4f:88:61:8c:22:93:9f:36:
12:59:9c:f2:ad:42:c2:37:c9:27:d1:30:cb:b0:cc:
e6:b0:2a:aa:60:c7:0e:74:0b:40:a8:ba:30:c8:a7:
51:71:28:60:72:30:4b:b6:98:8b:d4:f7:a9:95:76:
2b:78:71:4b:45:4e:0b:85:15:ed:2d:14:6e:f8:75:
5b:ca:92:dc:28:c8:a9:5c:a4:04:91:ba:6e:d5:d4:
51:8d:81:cb:65:a6:0a:f5:ba:cc:13:01:59:bf:d3:
b8:63:82:67:ee:fb:e5:72:fe:be:19:dd:20:d7:5e:
fa:3a:b6:be:07:d7:43:d4:0d:9e:40:bf:33:c9:fe:
6b:94:b7:a2:6c:76:f2:69:c7:2e:2c:0c:95:20:1f:
a5:31:0a:da:bc:be:2e:34:67:8f:d5:cb:e2:d1:92:
53:81:e0:4e:2b:64:7c:e4:dc:f5:9c:1a:74:b7:97:
fc:bc:b9:b7:53:17:8b:4d:a0:61:54:59:75:11:03:
9f:03:5a:89:ba:2c:5c:b8:86:da:3b:e1:47:1a:d2:
28:7d:67:cb:1f:1f:51:91:82:92:f9:c6:94:55:69:
7b:af:7b:6f:2b:eb:93:50:99:c8:23:41:27:2e:3f:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0A:FF:F2:12:8E:BB:D3:94:04:93:48:B7:A3:11:80:DA:59:0B:DC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gwr_8hKOu9OUBJNIt6MRgNpZC9w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.20.0/22
Signature Algorithm: sha256WithRSAEncryption
83:0b:22:cd:d3:4c:45:09:33:8d:19:e3:57:90:17:7f:59:f0:
46:c0:7e:24:6d:ea:4a:6c:5d:f4:06:b0:6f:e4:b1:d7:19:30:
d2:9e:2c:2d:e7:eb:6b:b4:7b:1b:67:69:ce:22:97:62:37:44:
fe:fa:f6:5b:c9:2b:9e:12:c1:f3:ef:06:e1:6f:1a:d9:15:e1:
a0:37:df:e3:8f:e9:80:27:18:4b:c2:da:84:d9:d8:40:d4:90:
65:22:a1:8e:82:d6:e1:b5:b6:80:a1:b8:64:f8:cd:2d:14:60:
9b:b1:db:db:8a:cb:7a:07:bb:4d:ff:c6:fd:74:79:97:ca:39:
8e:ad:a0:78:c6:bf:9b:b4:55:59:30:d9:92:9d:a5:6c:0e:df:
c4:75:43:34:5c:40:f1:29:cc:c9:c7:6c:de:73:0f:25:d4:62:
b4:87:ad:c7:10:e1:5c:cd:33:06:8b:ce:86:05:5f:e6:21:7f:
57:b1:aa:47:aa:4d:f0:4e:8c:5f:c3:37:d0:27:eb:a2:e2:ba:
9e:77:9e:a3:ce:b9:00:b2:95:7d:95:5b:75:b2:1f:ed:7e:9b:
a1:07:c3:a5:92:26:ea:81:cd:b4:bc:df:30:da:13:5e:40:c3:
e7:08:bb:0f:9f:71:22:1c:8b:f1:77:76:f4:e0:07:fc:f6:d5:
06:ef:7a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org