Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lZ6Uj6CvReKyrok1vt9-oi7g85I.roa
File: lZ6Uj6CvReKyrok1vt9-oi7g85I.roa (raw, json)
Hash identifier: ZIfd19+58fTc8AfP+HOgNxAVECw+4ttThJtpmLQqwSo=
Subject key identifier: 95:9E:94:8F:A0:AF:45:E2:B2:AE:89:35:BE:DF:7E:A2:2E:E0:F3:92
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D56
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lZ6Uj6CvReKyrok1vt9-oi7g85I.roa
Signing time: Tue 29 Sep 2020 09:54:27 +0000
ROA not before: Tue 29 Sep 2020 09:54:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3414 (0xd56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:27 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=959E948FA0AF45E2B2AE8935BEDF7EA22EE0F392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:cf:21:0a:95:7c:0e:04:9d:50:92:2b:fb:
11:19:95:0b:8f:bd:4f:a3:cc:9a:3b:7e:2d:8a:2e:
c4:df:b3:48:fc:d0:c3:07:44:b4:10:3a:ff:40:66:
3f:9b:10:8f:f6:3b:7b:5d:79:0c:c7:3e:09:e0:da:
e8:5d:16:b4:1c:00:23:3a:d7:9a:06:fe:cb:ee:91:
2e:a2:0e:1d:be:00:f4:fa:3c:23:19:3c:2a:b7:aa:
cf:11:dd:30:2a:ac:7b:b8:b6:e9:5e:c4:94:6f:9d:
6f:90:24:4e:b3:93:ac:fc:d8:9f:3c:4e:35:dc:9a:
e8:08:71:b3:ec:39:de:01:41:18:ef:df:6f:ed:55:
40:e5:eb:31:b1:b5:72:ea:aa:50:7a:84:32:00:33:
28:79:1a:45:e6:df:c0:7c:ab:b5:78:20:84:1c:39:
55:bc:19:0f:81:6f:9a:07:89:f8:14:82:3c:ee:5f:
77:9d:aa:10:a2:d5:5a:37:0b:0c:04:cd:f3:c7:09:
c6:76:29:5d:00:b6:42:53:cd:5c:c1:83:73:1b:c6:
df:a3:da:1b:9c:c3:6c:9c:f6:1e:b9:2e:5f:c9:f3:
b7:92:a5:33:d2:72:7b:12:5f:b5:db:dd:2c:5f:3c:
3d:7b:e5:85:dd:d9:ee:89:cb:c0:ee:7c:b4:aa:a9:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9E:94:8F:A0:AF:45:E2:B2:AE:89:35:BE:DF:7E:A2:2E:E0:F3:92
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lZ6Uj6CvReKyrok1vt9-oi7g85I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:7d:eb:80:09:1a:94:a9:8e:21:e4:be:7b:22:87:37:39:19:
d4:a1:86:09:60:6d:95:ea:90:4f:2a:91:9c:0d:b1:a9:6a:05:
b2:c2:b3:9d:b1:e7:ab:87:b7:a4:bb:01:07:b3:cd:35:5c:6e:
f3:83:35:28:2c:c0:bd:14:1e:68:6a:18:8d:a4:6a:c4:63:8a:
c9:5e:17:38:be:44:ba:18:ff:56:07:b3:e0:27:b2:fc:c3:c8:
ed:7b:f8:fd:28:86:41:e8:a3:7b:ad:41:a4:45:c3:cc:6d:9e:
a0:20:ef:2f:0b:59:43:2b:6e:7c:9b:78:b0:73:5d:f7:ac:33:
c0:00:0c:1e:5d:18:bb:40:2b:14:b9:a1:c1:e1:83:45:19:2b:
a8:5f:c9:f1:0d:6f:1b:47:ab:c3:a7:0f:32:db:e6:78:7f:34:
5b:8e:1d:24:9c:c3:b8:95:11:d5:1f:bb:0f:17:aa:0a:5b:50:
90:57:31:d2:0b:7a:32:91:78:45:e8:4b:89:1e:bd:ad:59:14:
e4:aa:9e:ed:9b:ec:da:81:9a:e7:6b:54:4a:64:af:e0:8f:34:
77:04:9e:ce:f3:aa:0e:8a:3b:15:b0:20:87:75:cc:dd:59:66:
76:9e:08:8a:dd:48:34:e6:d9:1a:77:aa:7f:d4:8b:98:1e:e3:
65:e8:22:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org