Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/heuOY7olFDwXv4Eszs-bJMgi0Cg.roa
File: heuOY7olFDwXv4Eszs-bJMgi0Cg.roa (raw, json)
Hash identifier: JzkJ4bGHKiN5EPNNQGzCaDjp2Bcd4V3OiIZmE2zR1mY=
Subject key identifier: 85:EB:8E:63:BA:25:14:3C:17:BF:81:2C:CE:CF:9B:24:C8:22:D0:28
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D06
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/heuOY7olFDwXv4Eszs-bJMgi0Cg.roa
Signing time: Tue 29 Sep 2020 09:54:05 +0000
ROA not before: Tue 29 Sep 2020 09:54:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3334 (0xd06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:05 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=85EB8E63BA25143C17BF812CCECF9B24C822D028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:8a:cc:60:71:99:6b:e1:62:95:34:5c:a2:
7b:05:15:e1:2c:ae:df:39:21:e6:3e:c0:a7:84:4c:
b0:bd:70:fa:93:a9:50:b2:31:39:b8:a9:a8:4b:e4:
ac:bb:78:43:6b:18:33:18:ad:ab:94:6c:d7:2b:48:
76:ea:ca:ef:77:14:fe:99:a8:0a:93:a5:96:53:16:
01:85:e6:36:71:c7:1b:42:34:b7:04:41:9b:db:4f:
26:24:ef:82:3d:08:0b:16:12:ac:40:56:9f:19:84:
6f:17:45:91:9e:1f:a6:4a:a0:a5:3f:ef:92:2c:4e:
8d:0a:65:dd:5d:cc:67:c8:91:93:79:7f:f8:3f:ac:
7a:1b:b9:8e:1c:33:81:0c:50:cb:4e:b3:c6:62:a3:
ab:19:ab:5e:07:cd:74:39:48:05:8b:6e:0f:2a:1d:
e4:f1:82:98:84:44:b1:24:38:ee:8a:2f:6a:52:34:
31:00:b4:c3:0a:fb:68:c1:a3:eb:06:6d:95:4b:ff:
b6:8e:b9:92:8d:61:4b:53:02:fc:6a:0c:97:8b:22:
b1:2d:b9:66:23:0b:83:10:55:5c:77:8f:b7:34:a7:
9d:f6:91:34:f5:ce:48:09:b1:58:8d:ec:52:3e:2a:
ef:ea:65:00:00:6d:9d:4b:3c:67:9b:57:40:cf:13:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EB:8E:63:BA:25:14:3C:17:BF:81:2C:CE:CF:9B:24:C8:22:D0:28
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/heuOY7olFDwXv4Eszs-bJMgi0Cg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.80.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:3f:6e:31:36:25:8e:a0:42:30:50:7c:cf:79:98:2b:8a:b1:
70:0f:2b:db:c8:b2:48:41:5b:90:dc:ce:cd:23:32:5a:77:d0:
ca:59:31:d5:65:39:67:c5:98:d6:46:aa:45:e5:2a:a7:5f:5a:
fc:19:c1:b1:a0:d6:37:48:81:11:e3:fa:c6:f2:87:07:95:93:
fd:f6:44:77:d9:3f:aa:f1:ae:70:8d:ab:8c:01:f6:d1:81:83:
9b:da:78:29:0e:2d:67:69:b0:da:72:4d:53:12:f6:12:d8:b6:
8d:ad:df:0f:59:04:b7:f5:c1:86:c2:16:77:2d:23:d9:a1:2f:
0a:b2:f5:a5:5a:7d:a5:e3:d9:5e:14:13:7b:38:73:b4:97:98:
ee:78:b2:7d:fd:1d:7e:92:ff:03:20:23:f1:70:35:1e:a2:14:
b3:fd:73:0f:ba:84:f9:c7:98:b0:53:e0:06:81:0a:da:58:5f:
bb:74:3c:6f:bf:81:cb:4a:6a:05:b8:14:4a:7d:a1:c5:e0:3a:
85:60:eb:24:a5:f4:03:23:d4:6e:78:06:97:6a:bf:8e:9b:af:
da:9b:60:a0:8a:b2:ab:c3:5c:9f:f2:de:d5:d9:2d:1b:08:2d:
18:05:0c:e2:ad:2d:f8:7c:4f:0a:e5:96:1c:9d:62:1e:9b:61:
b4:b5:56:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:26 2023 by rpki-client on console-ams.rpki-client.org