Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nm1k5-nwckm4x1lI34X2ZaVHK8Q.roa
File: nm1k5-nwckm4x1lI34X2ZaVHK8Q.roa (raw, json)
Hash identifier: eOoolG/zcjlYULFfzMoWWEIl1i/TwZ81+uSP18YcYz0=
Subject key identifier: 9E:6D:64:E7:E9:F0:72:49:B8:C7:59:48:DF:85:F6:65:A5:47:2B:C4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0CE3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nm1k5-nwckm4x1lI34X2ZaVHK8Q.roa
Signing time: Tue 29 Sep 2020 09:53:55 +0000
ROA not before: Tue 29 Sep 2020 09:53:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.8.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3299 (0xce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:53:55 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9E6D64E7E9F07249B8C75948DF85F665A5472BC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:ca:7f:05:b9:c4:4f:56:19:d1:cf:54:32:
38:b3:9c:77:f6:35:03:26:ec:34:12:36:56:c5:c3:
e5:fb:b8:29:75:9d:83:9e:0c:ba:3e:0c:23:88:d8:
15:5e:01:bb:5b:a1:9e:73:85:a5:83:28:f8:d2:63:
2a:fa:93:54:59:17:ca:29:15:47:2e:a0:4f:a2:7e:
c9:b5:99:d0:56:ec:06:9c:40:4a:e7:b7:f2:aa:5b:
86:b6:f1:91:8d:16:be:93:64:c8:6d:a3:29:4d:54:
60:8e:ad:f5:33:ea:06:a1:6f:c1:52:23:93:8c:bb:
33:14:bc:17:72:db:15:5e:89:2b:b3:26:c2:ec:5f:
21:26:d2:7e:c9:b2:01:2e:cd:0d:ad:24:2f:d9:e4:
a5:0a:7c:55:3a:02:9c:71:a3:6a:cc:79:16:f5:4c:
f7:5d:be:ea:cc:89:b8:fb:11:8d:a5:7e:b8:dc:97:
2a:8e:ac:90:64:34:5b:2a:71:97:01:c1:e8:89:27:
9a:08:0d:5a:eb:e4:02:dc:82:11:44:a5:a2:e2:88:
0b:73:f5:cd:45:f3:e6:3e:a1:cb:39:95:e1:e3:ca:
2a:fe:3a:31:f8:39:12:58:ea:90:11:68:86:f2:0b:
c9:9c:3a:eb:82:9e:99:29:c9:c3:85:24:6d:23:76:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6D:64:E7:E9:F0:72:49:B8:C7:59:48:DF:85:F6:65:A5:47:2B:C4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nm1k5-nwckm4x1lI34X2ZaVHK8Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.8.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:ac:90:ff:b3:a6:28:4a:53:96:da:c3:89:57:e2:04:78:3f:
01:f1:32:25:65:99:3c:d7:4a:f2:17:3d:5d:3a:91:6b:bb:ae:
08:aa:b0:72:11:53:53:9e:12:3c:b6:9a:d8:7b:c4:3b:2f:84:
fd:cf:38:de:6b:37:37:0d:40:63:06:2d:a5:bd:02:49:ab:3c:
53:a8:95:65:29:4d:54:a5:c2:3c:96:5f:cb:d4:8b:f2:8c:ef:
00:3f:5e:b0:1e:b8:95:0c:76:df:a3:da:ea:0e:ee:2b:0e:25:
f8:ff:77:49:0a:73:91:2e:d9:a3:65:56:a1:76:2d:22:ac:ce:
f0:41:54:7c:11:26:53:95:bc:fc:9e:f9:82:87:84:db:98:84:
d5:43:20:91:3d:8b:25:47:d6:d2:91:fc:9e:20:aa:92:ca:0a:
fb:06:88:56:07:96:5f:e0:34:75:0d:ab:8b:54:80:b9:01:3a:
66:30:6c:17:16:6c:21:7f:d7:00:83:a6:9f:54:d1:5c:1f:15:
19:6f:8e:45:55:e0:95:bb:d4:87:4e:e1:e2:b1:30:63:d0:22:
f2:8f:16:e7:03:bc:6f:50:77:05:c5:ed:6d:66:e2:df:c0:4d:
7d:3c:72:78:9d:f8:a9:3c:f8:99:24:e8:ef:8b:26:ff:05:dd:
d3:f5:6a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org