Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tCJv7lIKpP25GQcLCI_0kpjJcIE.roa
File: tCJv7lIKpP25GQcLCI_0kpjJcIE.roa (raw, json)
Hash identifier: fEVL8VjXWven97nylrmCCE3E/i2NeIO6yIt9O3uXDqc=
Subject key identifier: B4:22:6F:EE:52:0A:A4:FD:B9:19:07:0B:08:8F:F4:92:98:C9:70:81
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DB6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tCJv7lIKpP25GQcLCI_0kpjJcIE.roa
Signing time: Tue 29 Sep 2020 09:54:52 +0000
ROA not before: Tue 29 Sep 2020 09:54:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3510 (0xdb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:52 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B4226FEE520AA4FDB919070B088FF49298C97081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:b7:1e:52:da:d1:ca:4a:d7:bc:0e:bc:d8:
3b:6b:00:a9:da:f5:f2:c4:0a:7c:70:e7:82:33:43:
66:82:0e:5d:06:8a:c6:b0:e8:7a:cc:9d:f6:35:65:
61:9f:91:2c:6a:1a:a2:26:35:90:63:21:af:c8:71:
d3:70:57:95:37:88:19:dd:bf:3f:d3:b6:9c:87:38:
eb:ca:3a:40:8f:0e:9f:c9:d1:d3:27:98:a0:53:12:
a3:94:9c:3c:8b:d6:ee:a8:d3:21:da:03:ae:68:df:
a2:b2:67:fb:e8:bd:03:64:14:64:34:e8:60:0c:10:
7c:1a:55:5c:14:8e:96:f6:3e:35:76:0d:1c:55:69:
d7:0a:a9:89:9e:bb:58:ef:98:ff:b8:3d:bb:16:d1:
4a:bb:64:db:2f:c5:3f:bf:4e:4e:a6:45:24:ce:5c:
2d:b3:72:a6:ef:5f:0f:ba:a9:43:15:38:40:0c:15:
1f:b9:57:1d:a6:d4:e0:dd:d1:66:65:2d:2a:2b:fe:
99:25:64:48:eb:0b:5b:53:33:3b:29:0a:3d:23:cd:
a8:39:3d:da:87:7b:d5:48:cb:51:91:51:8d:df:c6:
a3:76:4b:b9:08:1f:38:da:93:6a:93:80:1e:c3:79:
fc:b4:17:c0:4d:b2:85:de:21:e8:fb:8d:17:96:93:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:22:6F:EE:52:0A:A4:FD:B9:19:07:0B:08:8F:F4:92:98:C9:70:81
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tCJv7lIKpP25GQcLCI_0kpjJcIE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.192.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:7d:8c:01:80:fb:f0:3a:68:40:b2:c5:a0:e2:7d:01:d6:c9:
6d:70:de:6e:4a:53:8e:bb:b6:bf:43:ee:21:8a:d4:b2:87:ae:
6b:e6:0d:dc:83:76:a6:5c:5c:42:83:60:1a:4d:fd:99:44:34:
cd:ae:5c:0f:d1:bb:d2:65:8d:7a:98:0c:aa:96:8b:15:f0:b3:
9c:b4:61:19:7c:ec:db:37:2c:44:52:0e:94:46:b9:52:7c:35:
7d:86:43:cc:da:8e:02:82:50:a3:90:e3:71:ad:52:48:19:e2:
8f:8f:07:f6:d2:97:20:e8:95:16:2a:7a:26:c5:c0:77:51:6b:
30:ec:9f:4f:f4:ee:e4:85:bf:f7:10:8c:19:6e:e2:ce:36:e7:
e1:55:a1:07:b0:9f:9c:9e:d3:aa:5d:bb:8c:85:2e:83:9b:1b:
28:89:13:5b:0d:b6:44:2f:fd:5b:21:ee:1b:5a:95:42:62:8e:
cb:11:63:25:e4:73:36:ff:cd:bb:fa:61:b7:a3:1c:81:32:21:
f0:62:be:db:63:30:09:67:b8:d9:c1:60:9f:a8:da:08:0c:0c:
71:62:dc:b8:3a:d7:f5:28:8f:70:c6:9d:ac:1f:ab:2e:29:1a:
b8:89:be:69:64:df:a5:c0:fd:f6:dc:14:45:e4:6f:5b:cd:1c:
48:26:df:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org