Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pOHKvVYOcs5u5sONccP9M8UbGnA.roa
File: pOHKvVYOcs5u5sONccP9M8UbGnA.roa (raw, json)
Hash identifier: 4d0dvL3FmvTcvSXdD8iMfC7fYn6C7LC1+e+IxhfszDY=
Subject key identifier: A4:E1:CA:BD:56:0E:72:CE:6E:E6:C3:8D:71:C3:FD:33:C5:1B:1A:70
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EED
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pOHKvVYOcs5u5sONccP9M8UbGnA.roa
Signing time: Tue 29 Sep 2020 09:56:17 +0000
ROA not before: Tue 29 Sep 2020 09:56:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3821 (0xeed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:17 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A4E1CABD560E72CE6EE6C38D71C3FD33C51B1A70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:4e:3a:20:b8:88:f1:15:36:90:99:54:13:
d2:2b:11:5b:f9:62:a6:f0:8f:e7:b8:fc:d0:af:35:
02:39:fb:fe:16:2c:50:22:0d:fc:e7:6b:3d:a1:37:
b9:98:d3:96:d3:e2:ce:5e:10:ad:5d:3c:42:ad:ac:
79:82:53:f5:2e:0f:70:c2:97:f3:9c:80:1b:26:07:
54:ed:b0:51:4e:e7:a0:86:af:14:c1:5f:b5:d0:ee:
39:6a:f5:35:1b:da:7e:f4:8f:29:1e:52:2e:64:af:
c2:ac:a7:70:fb:78:23:f7:45:1d:b3:9b:98:ab:17:
47:ab:48:8e:3e:a5:68:e2:45:15:db:1b:4f:c3:88:
e9:66:ff:ff:d1:e1:ea:17:57:b4:90:98:39:41:3f:
cf:fd:b1:db:85:33:33:e4:8a:28:db:8e:e5:56:af:
e5:64:9a:b6:5d:1f:1d:89:ab:00:f0:db:9a:d6:82:
41:fc:68:3d:2e:84:71:60:f1:86:a4:bb:be:95:d9:
14:5c:f4:6b:8e:dc:6b:1b:3a:6f:b1:58:12:36:ca:
35:61:ba:ea:01:dc:26:85:23:d1:42:20:ed:91:82:
8e:aa:2d:dd:e7:97:8d:db:aa:60:03:d9:5b:cf:b8:
59:fc:30:93:08:e8:a2:89:c5:a1:2a:97:55:4f:49:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E1:CA:BD:56:0E:72:CE:6E:E6:C3:8D:71:C3:FD:33:C5:1B:1A:70
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pOHKvVYOcs5u5sONccP9M8UbGnA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.120.0/21
Signature Algorithm: sha256WithRSAEncryption
24:ec:6e:3c:d9:c8:e7:7f:b6:91:02:e2:05:7c:02:df:dd:15:
a8:70:32:c2:6a:14:d8:5b:9c:d7:4c:5e:2a:43:94:60:0f:f9:
03:b5:6b:b0:ee:92:d1:0a:f1:7e:cf:81:2e:00:d0:e2:9a:3a:
25:a3:36:70:f5:b6:7e:41:30:6d:2e:a1:e1:ec:61:a8:9b:5a:
91:17:f7:b3:2b:17:27:3e:d4:be:6c:f7:88:f8:2a:92:65:ac:
52:b9:1c:7a:46:b0:2a:7e:da:90:3e:aa:7a:41:73:40:1b:35:
06:7e:0f:7a:7d:bc:57:30:2b:1b:91:b9:fd:9b:28:fe:71:0c:
b5:e6:56:fe:39:29:de:62:d0:c6:30:bf:3e:e6:83:8f:cf:ae:
12:85:5a:15:f2:58:53:a0:9c:06:81:e6:70:25:8d:25:11:56:
13:6a:bf:e4:08:c7:c1:4c:98:77:1e:b6:6b:bb:8a:d5:ee:cd:
6d:1c:64:96:db:e5:d6:d6:c5:01:56:78:37:bc:6a:dd:88:88:
92:8d:e5:6b:6e:29:97:28:49:c0:c5:7c:01:05:d7:23:5c:e1:
0d:4b:0c:e4:7f:a5:86:9d:63:cc:65:72:58:b7:9c:12:0c:b3:
63:83:e5:d8:b6:e9:c8:5a:80:c7:6a:a2:37:1f:d9:34:6c:7c:
59:f5:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:28 2023 by rpki-client on console-ams.rpki-client.org