Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jr1wngcHZwW6EChDRg5uDtRLTGU.roa
File: jr1wngcHZwW6EChDRg5uDtRLTGU.roa (raw, json)
Hash identifier: F9/d7D+dX+9Ww0H7Y21BZE6LXK3k5lX2Du3ieh2oyOA=
Subject key identifier: 8E:BD:70:9E:07:07:67:05:BA:10:28:43:46:0E:6E:0E:D4:4B:4C:65
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F11
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jr1wngcHZwW6EChDRg5uDtRLTGU.roa
Signing time: Tue 29 Sep 2020 09:56:27 +0000
ROA not before: Tue 29 Sep 2020 09:56:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3857 (0xf11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:27 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8EBD709E07076705BA102843460E6E0ED44B4C65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:56:5d:51:2d:07:b6:40:5d:2b:10:34:b1:
1d:c5:ba:1c:c5:21:d7:b4:23:6a:7c:37:12:9c:78:
a7:8c:c7:55:21:69:04:ba:fe:35:bc:a9:39:9b:d0:
90:08:10:7c:1a:ce:d7:86:37:f0:51:5a:b0:a9:76:
ce:e9:c7:04:b6:7c:d8:07:0b:8a:9d:eb:0c:2e:34:
68:c3:25:46:a2:61:05:2c:e5:a2:a7:97:93:07:6b:
fd:49:3a:9a:f8:77:72:4e:ba:fa:6d:76:5a:08:cb:
7c:4e:1e:10:61:3f:20:df:40:b6:da:d0:50:9b:3f:
16:e5:38:12:bd:75:33:e6:55:0b:84:f3:9c:03:fd:
93:29:65:7b:48:a8:aa:1b:5e:3e:20:d0:cd:78:87:
fc:4c:ba:52:26:53:e9:04:70:0b:c8:01:b2:50:3a:
db:77:c1:d5:c3:55:b0:1b:79:16:36:e1:6a:67:97:
9f:19:51:96:d0:04:aa:1a:c9:d6:f5:34:5a:0f:9c:
f0:f6:14:90:c0:44:6d:4e:3b:e0:01:8d:3f:07:32:
65:43:bc:d7:15:8b:24:0d:63:b0:62:e0:7f:96:04:
8e:61:55:a4:d5:ae:c4:8a:ed:1e:77:96:c0:dc:c4:
7e:cf:1c:8a:3c:71:d3:46:c7:ac:f1:c0:f7:23:9a:
7a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BD:70:9E:07:07:67:05:BA:10:28:43:46:0E:6E:0E:D4:4B:4C:65
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jr1wngcHZwW6EChDRg5uDtRLTGU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.237.0/24
Signature Algorithm: sha256WithRSAEncryption
89:63:4a:f9:96:5c:9a:54:15:49:ea:b5:a9:ec:68:7c:86:e3:
d5:b2:71:df:cf:03:97:cf:fe:63:ed:b3:4b:0f:42:b6:da:3d:
37:01:13:d4:b5:a7:c3:05:44:d8:7e:4b:c1:0f:ea:f3:10:91:
46:c7:d6:6d:0c:da:2e:94:3f:8f:b7:a4:62:03:35:77:19:66:
2c:2a:19:54:c8:af:a9:6d:8d:26:36:1c:e7:36:85:e1:24:c7:
28:17:b6:f5:6a:f7:4b:cd:fd:22:d9:b8:6f:ae:9b:5f:26:e9:
8f:87:49:09:7f:8b:86:6e:92:69:24:54:fb:ab:ea:1e:f0:2c:
cc:70:af:ef:10:a8:5e:30:f4:18:b7:c4:10:d8:6b:0d:80:37:
7e:d9:e4:b8:23:8a:0d:aa:21:7f:5d:1a:f8:ac:c7:c6:51:42:
dd:3c:ec:04:d3:2b:13:c0:e8:5b:f1:06:d5:ce:01:59:e1:01:
70:db:92:8d:7f:ce:3f:bb:d6:4c:20:9a:03:e4:7d:2e:5b:9e:
41:f5:73:28:e3:6d:2b:ff:e1:c5:df:34:28:87:a1:e4:47:2a:
b2:98:32:7f:eb:c0:d5:3d:b3:ca:1b:2e:48:4d:bb:48:f5:2a:
55:c6:63:cd:9a:9b:32:9f:75:e0:7e:0a:22:82:ff:0f:f3:60:
ef:45:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org