Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mm9TrERQlwWo2OlFjphHRR5dFVU.roa
File: mm9TrERQlwWo2OlFjphHRR5dFVU.roa (raw, json)
Hash identifier: JS4MyL5Q9a0TaJypCpSCGnPhkU/JApkkL562MoTfB9w=
Subject key identifier: 9A:6F:53:AC:44:50:97:05:A8:D8:E9:45:8E:98:47:45:1E:5D:15:55
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1669
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mm9TrERQlwWo2OlFjphHRR5dFVU.roa
Signing time: Sun 07 Feb 2021 12:10:17 +0000
ROA not before: Sun 07 Feb 2021 12:10:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5737 (0x1669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:10:17 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9A6F53AC44509705A8D8E9458E9847451E5D1555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e7:fc:5f:ab:7d:e3:40:7d:49:b4:84:60:cb:
b9:40:81:8c:94:30:62:26:62:ee:56:3a:7a:54:e5:
95:99:40:51:b0:28:1f:d2:bb:c5:af:34:2f:5f:81:
08:84:b4:eb:d4:88:01:6d:1c:84:9a:88:34:f9:c7:
fb:1d:83:51:d4:b7:65:19:08:8b:13:93:b6:4a:d0:
5b:46:7e:31:ed:fa:e7:df:58:b3:ee:cb:ce:fc:c3:
59:f6:f5:c6:dc:b7:4a:ca:b3:55:93:0a:fe:22:75:
5f:94:c3:0e:ac:6b:9b:85:b4:77:ed:dc:8f:27:c5:
d4:5e:cc:3a:0c:0a:ef:2b:71:ab:6f:6c:df:8b:4b:
79:11:06:6a:ff:ec:92:cf:c8:c9:b5:44:19:3c:84:
e8:7a:3c:e9:ab:c2:c4:e1:5c:60:01:5b:c7:77:c8:
db:07:c4:77:c5:52:48:a1:4c:4d:9d:b7:4d:ce:6d:
19:04:e2:4d:93:cc:b9:e1:cf:57:2f:ed:db:49:b7:
f3:20:49:4b:81:f4:67:37:20:55:90:04:bf:6d:55:
96:ff:39:94:e3:a0:9b:42:9c:9b:26:84:b0:bc:01:
4d:c6:40:e1:0f:3e:4c:eb:06:25:07:6a:bb:cb:94:
b5:1c:51:be:4b:d1:5c:9e:7f:d4:10:6f:0a:2f:3c:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6F:53:AC:44:50:97:05:A8:D8:E9:45:8E:98:47:45:1E:5D:15:55
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mm9TrERQlwWo2OlFjphHRR5dFVU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.160.0/20
Signature Algorithm: sha256WithRSAEncryption
28:c3:6d:60:cd:cd:f5:a6:21:f3:a9:46:13:1d:6f:0d:35:bd:
c7:6f:24:fa:1e:55:54:99:9b:d2:8a:00:32:06:a6:ea:26:05:
3a:8c:0c:dc:d4:a1:c9:06:d5:11:a0:89:1f:d7:35:b5:f8:c8:
3d:73:88:2c:7e:3c:7c:26:3c:dd:d5:28:06:96:c9:00:11:a1:
ce:5e:c5:d6:ac:f7:30:a9:44:f1:18:05:c9:fc:4b:6b:7b:3b:
78:98:9c:5a:37:26:b1:85:33:a0:14:d4:4c:0b:90:19:6b:17:
11:9c:08:f3:9e:d7:ef:a9:e2:62:1b:06:0a:72:63:ae:c8:c9:
5a:09:21:5a:c9:8a:3a:17:78:00:58:52:25:e9:fc:75:68:11:
80:95:29:7d:fb:f9:ab:32:1e:26:e6:06:7b:17:73:a0:22:53:
df:db:36:e5:63:eb:c0:60:45:c2:9e:02:b8:4e:0a:04:6d:9a:
fb:54:ea:38:73:f9:e3:15:f3:6e:03:e6:76:5c:76:3c:9b:94:
26:54:31:6e:c2:ff:ee:7d:a5:32:a0:21:37:e2:92:d4:2f:23:
bb:70:2e:87:fd:5d:ed:12:0b:88:20:fe:9a:99:76:55:b9:7c:
e0:de:05:b8:95:3f:e9:73:33:10:cc:12:8f:be:ea:42:6e:5b:
98:54:76:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org