Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rcNJabLfPBc5T-xt34R35ANAc1M.roa
File: rcNJabLfPBc5T-xt34R35ANAc1M.roa (raw, json)
Hash identifier: KJf6yqarMdwZLN6hDHWupaYK6BQc05f31aBJxRp9v6w=
Subject key identifier: AD:C3:49:69:B2:DF:3C:17:39:4F:EC:6D:DF:84:77:E4:03:40:73:53
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D2D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rcNJabLfPBc5T-xt34R35ANAc1M.roa
Signing time: Tue 29 Sep 2020 09:54:16 +0000
ROA not before: Tue 29 Sep 2020 09:54:16 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3373 (0xd2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:16 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=ADC34969B2DF3C17394FEC6DDF8477E403407353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:3a:79:fd:5b:2d:b0:c0:db:62:b2:ad:bf:
bc:bb:46:ae:6a:9f:5e:cc:13:12:82:9d:3d:d7:29:
54:8e:32:7c:5f:3b:4d:b9:45:e6:a5:76:48:df:d4:
d2:0e:89:2c:3f:39:66:ac:d0:8a:9b:fb:63:95:52:
fb:13:38:81:31:09:f5:13:2f:b6:b7:f9:f0:27:30:
c2:c6:dc:5c:02:ed:c3:6f:6d:ae:a2:2c:b0:63:f1:
a6:27:16:c7:2f:42:57:a9:04:02:49:8a:5c:8b:50:
dc:d2:8f:d8:e7:e7:bd:38:85:ee:77:5a:b6:a3:15:
ec:87:d9:a7:00:41:f2:69:7b:fc:bd:d6:a8:f0:be:
73:f2:0c:a1:d2:77:87:3e:56:ef:08:41:10:2a:14:
79:a1:5f:eb:a0:c1:b6:6d:79:c7:1a:ec:48:df:4c:
44:34:10:59:57:dd:1e:31:5a:5b:17:1b:d0:00:58:
7f:31:30:17:79:0d:2d:6a:67:48:df:2a:b7:a1:f1:
20:7d:06:ab:b5:53:8b:5c:64:c2:a4:fa:ab:18:a8:
43:72:aa:72:97:2f:a4:2b:21:63:18:75:74:df:38:
a5:a1:c7:d9:c7:e3:20:3d:a8:0e:be:57:ab:6c:98:
75:27:ad:be:95:79:d2:54:29:a2:59:2f:19:c9:18:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C3:49:69:B2:DF:3C:17:39:4F:EC:6D:DF:84:77:E4:03:40:73:53
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rcNJabLfPBc5T-xt34R35ANAc1M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.16.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:0e:00:40:67:bd:34:be:2d:cd:1a:b4:03:ac:cd:29:97:28:
cb:ce:06:66:16:b9:3d:af:5f:00:19:16:41:7f:1b:b2:a8:98:
32:f5:e0:37:66:af:6f:65:e8:c0:f5:37:f2:13:c1:9f:18:39:
de:c3:99:e4:db:de:b7:df:0d:80:32:12:21:cd:30:0b:e1:40:
d7:f2:2e:96:67:84:ab:82:6c:b4:77:e3:8c:bb:60:24:fc:cf:
95:03:78:41:10:28:06:6a:63:74:6e:3a:c3:92:8c:a4:db:48:
d3:26:20:ae:ce:40:e5:13:26:8a:dc:7a:56:59:7c:06:8b:56:
60:63:a5:32:fd:9a:b8:21:3a:e7:2c:af:4f:bd:d3:d8:08:35:
e0:1a:d9:db:8a:5f:09:82:7e:cc:98:d9:56:02:a1:e7:38:45:
81:05:b3:ae:07:22:24:42:81:37:ad:81:49:dc:7d:a0:0b:08:
b2:04:31:99:7a:57:ba:02:e2:1f:63:24:db:26:7d:3c:e4:7c:
9a:db:43:63:df:22:13:2d:d5:98:cf:52:d4:e5:f1:6d:75:bb:
fa:5e:12:4a:59:71:8b:b5:dc:b5:3d:72:b0:77:17:cb:4b:7a:
8c:29:a2:16:4d:cb:e4:4b:d2:8b:92:7d:5a:f0:62:ca:50:89:
00:c2:61:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org