Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jj5UKQmJTYJAr029RqW19PyGcmo.roa
File: jj5UKQmJTYJAr029RqW19PyGcmo.roa (raw, json)
Hash identifier: jxheELuzHLnQivXIItoVgaeuDFxkyUUbs0ttwzL+mPk=
Subject key identifier: 8E:3E:54:29:09:89:4D:82:40:AF:4D:BD:46:A5:B5:F4:FC:86:72:6A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D7D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jj5UKQmJTYJAr029RqW19PyGcmo.roa
Signing time: Tue 29 Sep 2020 09:54:36 +0000
ROA not before: Tue 29 Sep 2020 09:54:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3453 (0xd7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:36 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8E3E542909894D8240AF4DBD46A5B5F4FC86726A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2f:32:1c:27:6a:75:55:ea:bb:ee:9e:9f:63:
cb:c2:86:32:c3:99:7b:ee:e0:1d:d6:0d:45:54:57:
88:02:f8:a9:36:cd:b7:74:e9:2d:49:c6:7b:ab:5f:
7a:8e:e7:4f:ec:6f:78:6e:f7:10:1b:00:75:9b:8b:
65:4f:87:72:51:6c:48:36:f2:22:ee:03:b0:aa:f1:
e7:2d:c9:46:df:4d:e6:09:01:33:e4:1a:ae:d6:22:
a7:80:5b:ef:79:23:bd:87:4b:3b:54:07:45:c7:fe:
3e:a5:92:8d:0d:9e:54:42:21:d3:24:26:27:06:a9:
ac:ed:bf:96:d2:17:c8:44:c1:7f:3a:ac:9b:1c:2b:
0d:45:e5:00:dd:b1:c7:9d:ae:7d:ef:7b:da:bf:54:
dd:05:3d:48:95:00:d5:f5:30:14:a3:14:68:1f:cf:
9d:6c:a8:59:5a:ab:ae:2c:65:7c:0f:b5:6d:f5:14:
0d:7c:27:f9:d8:bd:15:a6:52:b2:03:e2:8d:e1:59:
cf:c3:bc:34:44:73:44:3c:59:a0:b1:40:54:14:11:
4d:83:d0:e6:3c:44:2b:3d:be:2c:4b:f1:60:40:36:
8b:94:2f:43:27:0d:20:52:65:23:5e:25:8d:98:03:
4a:0c:21:ea:c2:39:7f:65:b1:ed:83:f7:ac:8d:9e:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3E:54:29:09:89:4D:82:40:AF:4D:BD:46:A5:B5:F4:FC:86:72:6A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jj5UKQmJTYJAr029RqW19PyGcmo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.72.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:1b:16:83:19:21:83:38:1b:a5:2d:be:d8:36:14:15:d7:07:
1b:ea:4c:3b:54:6a:da:d6:20:de:95:94:b3:7f:63:fd:1c:b4:
42:a0:ef:ce:f9:a7:88:05:b1:d1:75:3d:e5:a5:28:b3:16:87:
aa:78:74:3c:03:5e:6a:05:19:95:5b:61:64:4c:db:48:1e:b7:
db:15:e4:2f:37:cb:09:32:e0:9d:1d:a7:b8:d8:09:8e:67:ca:
a6:e5:01:b8:a0:1a:d0:06:e9:55:12:2e:b7:95:da:25:df:0d:
ec:7c:9b:5c:e6:05:0a:cc:ee:b6:1b:00:39:55:af:ad:79:1e:
b7:10:6d:c2:f9:0b:d0:53:e9:79:28:c4:a8:b9:6f:49:27:97:
b3:1d:7b:63:fb:06:f9:12:d4:5e:5d:ec:de:a8:ae:2d:6d:fc:
22:9f:91:47:7d:ab:0b:82:08:e5:ca:8c:23:98:4c:43:a2:97:
3c:cf:ea:33:9a:c3:83:25:cc:22:c1:4a:84:51:9d:a0:c2:c2:
6d:6e:b9:ec:e8:cc:b3:42:a2:1d:86:6c:0d:39:e9:4b:cf:a5:
c9:bd:ff:85:bc:88:bb:bc:3d:7a:b9:85:7b:34:64:d4:ea:e5:
a0:72:d2:bf:60:55:a8:37:45:26:52:a3:69:2d:33:2b:86:4c:
4c:12:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:26 2023 by rpki-client on console-ams.rpki-client.org