Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hImNOl1mG3jkbdMMUq1hN2IRzms.roa
File: hImNOl1mG3jkbdMMUq1hN2IRzms.roa (raw, json)
Hash identifier: 7cHTvRQHWW5ln/x6W2pyr+SIhhrnY75FbU/9I0qBNfc=
Subject key identifier: 84:89:8D:3A:5D:66:1B:78:E4:6D:D3:0C:52:AD:61:37:62:11:CE:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DB7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hImNOl1mG3jkbdMMUq1hN2IRzms.roa
Signing time: Tue 29 Sep 2020 09:54:53 +0000
ROA not before: Tue 29 Sep 2020 09:54:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.193.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3511 (0xdb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:53 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=84898D3A5D661B78E46DD30C52AD61376211CE6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:72:1f:e9:a0:e9:f4:ae:7a:25:52:ae:14:
89:92:cb:f4:38:05:6a:4c:ed:bb:8e:c0:a7:72:5f:
ba:f9:20:7d:28:d2:cd:5b:37:22:bd:51:a8:1f:48:
cd:6c:24:e6:c6:61:0e:a2:75:f7:64:42:98:6e:8c:
5b:28:ba:24:c9:27:23:c9:ec:31:88:36:d4:09:d8:
75:d9:6d:6b:41:3a:e5:2c:db:6e:bc:d8:18:77:9a:
13:d8:a7:20:90:4e:aa:72:13:97:41:4c:28:15:ba:
08:2c:ac:86:5e:69:8c:50:7a:60:eb:38:b8:43:e0:
ad:51:79:c9:87:42:3d:7e:64:6c:f4:33:c9:b4:3f:
58:05:9e:9b:16:73:b0:45:67:d7:0b:2f:a1:a3:ec:
89:58:9a:a3:71:3e:67:68:95:df:ca:ec:ac:e6:1b:
71:3a:b9:2d:1e:51:45:97:22:d6:b6:2b:84:c0:6e:
dd:bb:a3:26:8d:a5:f7:41:6a:10:72:cd:b3:4f:a1:
02:13:1c:6e:9f:09:55:6f:ce:c4:ea:30:d8:d0:8f:
a6:b3:88:a3:e1:0f:b9:f3:b7:cc:a9:39:98:65:2e:
61:16:b6:35:43:6c:85:94:b5:77:8a:96:2c:4c:08:
02:18:7c:61:1c:c1:85:79:11:64:46:ba:e1:9d:4e:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:89:8D:3A:5D:66:1B:78:E4:6D:D3:0C:52:AD:61:37:62:11:CE:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hImNOl1mG3jkbdMMUq1hN2IRzms.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.64.0/20
Signature Algorithm: sha256WithRSAEncryption
13:a5:59:3a:98:97:86:c7:23:59:a9:fa:96:df:7d:2a:67:2c:
0b:e9:bd:ad:e7:85:e5:2a:78:fd:d8:e8:bb:7f:cb:eb:b7:92:
e5:25:d3:09:31:11:0c:31:32:b1:26:a5:c0:c8:64:15:9f:c0:
47:be:61:8b:dc:65:7e:48:30:7e:60:aa:71:9e:fc:05:c0:b6:
52:45:00:60:f5:14:bd:40:45:11:1e:9a:85:19:fa:af:be:2b:
ba:1d:3c:0c:d4:b8:5e:5c:92:21:01:a7:f2:5e:51:52:db:ae:
12:8b:78:67:7f:a0:6a:0e:c2:8c:ff:b1:61:9d:de:14:41:b2:
98:41:ae:e4:cf:2f:cb:76:7f:cd:e6:45:a0:93:05:01:10:d0:
af:29:05:ff:48:4f:3a:64:5f:e5:96:97:6d:32:eb:23:c7:14:
72:3f:a7:3d:a3:1c:91:a9:fb:f4:67:ea:dd:9c:3e:c5:91:10:
c9:42:f1:72:52:de:55:0d:14:08:29:be:31:e1:b1:ce:51:33:
8e:0b:63:20:68:ea:08:81:3c:01:9f:8b:2f:81:b4:0c:9d:22:
36:1f:90:dd:0f:88:ee:ce:ed:2d:50:a9:7a:59:0b:d7:06:4b:
93:00:27:dc:c3:75:ec:39:21:df:37:4d:e0:3b:a6:04:59:d9:
f6:28:fa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org