Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nOS_23ejhxme_ALlnBj8Vtfnp0E.roa
File: nOS_23ejhxme_ALlnBj8Vtfnp0E.roa (raw, json)
Hash identifier: RcjAeOWTdOuvoswygR9pjUlHBh/Ee6XOsO7SlViDnjQ=
Subject key identifier: 9C:E4:BF:DB:77:A3:87:19:9E:FC:02:E5:9C:18:FC:56:D7:E7:A7:41
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DE7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nOS_23ejhxme_ALlnBj8Vtfnp0E.roa
Signing time: Tue 29 Sep 2020 09:55:07 +0000
ROA not before: Tue 29 Sep 2020 09:55:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3559 (0xde7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:07 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9CE4BFDB77A387199EFC02E59C18FC56D7E7A741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:6a:31:d1:98:08:3d:56:e2:5b:5c:5d:de:
62:3c:66:ab:ab:8f:75:40:83:52:87:9f:88:7c:a1:
8d:59:5d:d2:5c:89:71:93:76:2b:04:13:de:f2:dc:
55:cc:f3:d8:5e:58:07:dc:23:52:e0:18:13:a8:aa:
f1:bb:4e:d4:7b:47:b9:78:10:0f:1e:50:b1:09:89:
b9:64:e3:b9:20:0d:43:c6:d8:fe:32:58:f2:10:fb:
c1:68:56:85:c5:61:0a:42:56:e3:d5:9e:f3:91:cf:
60:8e:fa:ca:69:23:59:f8:f0:6b:6d:46:17:53:3a:
18:74:a4:a7:38:ca:8d:5e:89:59:96:e2:15:7d:57:
68:17:6d:8b:86:e9:09:ed:35:84:6a:b0:bd:0f:d6:
ef:30:06:f7:a8:ab:81:cf:6d:05:4d:e2:49:fc:05:
6c:25:b9:0d:ad:c6:d1:eb:3b:2f:bc:b5:8c:75:2d:
de:07:64:32:a8:02:cf:ff:91:8a:cf:22:24:47:25:
11:2c:2f:a8:39:7a:23:41:8a:61:7b:ec:8a:86:eb:
c7:91:55:86:39:57:3d:bd:32:4e:b5:1a:55:e1:e8:
51:9e:88:ba:a4:1c:22:5d:34:27:08:33:9d:1c:25:
72:7f:b7:33:bb:90:3e:54:fb:8b:24:0b:6c:01:44:
30:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E4:BF:DB:77:A3:87:19:9E:FC:02:E5:9C:18:FC:56:D7:E7:A7:41
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nOS_23ejhxme_ALlnBj8Vtfnp0E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.196.0/22
Signature Algorithm: sha256WithRSAEncryption
29:70:fd:d8:28:e4:bf:72:ee:b7:cb:89:09:1e:ef:87:70:72:
11:79:49:83:0f:6c:1a:ed:c5:f9:03:24:77:7e:c3:09:66:d4:
63:84:2c:9f:01:d3:ae:aa:d5:09:b0:09:07:b3:ac:a9:c6:85:
e1:41:eb:47:82:f2:fe:0b:41:e0:01:8b:26:0b:71:65:4e:e0:
42:74:7e:20:bf:b8:af:68:a4:49:c9:47:f2:d1:72:5e:e5:3a:
d4:e0:4e:56:91:f8:9d:3a:a2:e6:60:9d:83:d4:26:86:76:b3:
79:36:3f:e3:ec:6c:40:a1:36:89:3b:c4:1a:25:ed:98:db:54:
1f:24:e6:13:bb:64:84:5f:c8:a1:24:9a:86:4e:ab:e3:99:e2:
80:90:a5:f1:ee:6f:9d:50:8e:16:b4:f1:b8:4e:43:4c:43:9a:
a0:3f:4e:e8:4a:0e:41:f5:30:bd:31:47:76:16:87:5e:8d:4c:
fd:33:4f:b4:3c:e6:02:d1:3f:ba:25:4f:c3:52:73:e7:a3:1e:
49:bf:f5:d8:3b:08:6c:79:10:fb:47:59:5e:f4:ff:e0:44:e6:
5e:59:34:b4:8f:a8:36:86:fe:48:84:14:74:26:a8:5c:63:6f:
f1:94:c0:b3:1b:de:ce:07:ed:54:a1:a3:c9:6d:ef:36:42:99:
9d:87:6e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org