Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uTX76Nl_zp0PnzfwVrJyf2nXic0.roa
File: uTX76Nl_zp0PnzfwVrJyf2nXic0.roa (raw, json)
Hash identifier: wgkup9yjjLFcpImmW8VEpXqDgV20SMNdu6+8VwDFUxg=
Subject key identifier: B9:35:FB:E8:D9:7F:CE:9D:0F:9F:37:F0:56:B2:72:7F:69:D7:89:CD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F42
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uTX76Nl_zp0PnzfwVrJyf2nXic0.roa
Signing time: Tue 29 Sep 2020 09:56:43 +0000
ROA not before: Tue 29 Sep 2020 09:56:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3906 (0xf42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B935FBE8D97FCE9D0F9F37F056B2727F69D789CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:af:9a:93:b0:b0:c2:cf:72:7b:dc:f6:23:
64:51:4b:2d:2f:83:b7:ea:29:c5:8f:4c:a7:41:79:
60:7d:fa:f0:fb:23:9e:43:08:c0:13:9e:6f:7d:3d:
9d:d1:e2:05:4c:78:6b:33:65:e2:f6:1c:73:5c:75:
b0:7a:b1:3b:e7:3a:b7:01:63:b0:e0:1b:5d:56:69:
7f:2e:0b:f0:4d:65:78:35:ab:a3:3e:c3:6d:89:6b:
10:97:6b:4e:3d:5b:90:fc:b4:f8:a4:1c:40:f6:9c:
a0:f8:9e:76:61:42:b6:0d:db:4c:27:d2:09:46:77:
73:2c:a9:c0:ff:ef:4a:35:2b:e7:e3:15:61:3d:78:
ae:e9:6a:d9:e7:aa:f7:28:71:9c:8d:77:69:61:7b:
9b:d4:59:70:8c:b4:41:cb:18:6c:b4:fe:2e:e5:e0:
e3:09:99:41:e3:10:17:53:da:c1:dd:20:30:dd:68:
ee:dc:44:c2:05:58:33:c5:89:78:d2:a4:be:0f:b6:
34:16:ef:7c:38:d5:8c:21:b5:18:d7:9a:cb:4c:72:
89:56:9d:c9:9c:a8:01:c4:f0:4a:38:d2:a9:36:51:
d5:1b:e7:f5:0f:7f:5f:6a:c6:2a:cf:8f:08:b1:63:
7f:f1:10:cc:dc:77:a8:ea:52:a6:9c:45:d8:80:0a:
b6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:35:FB:E8:D9:7F:CE:9D:0F:9F:37:F0:56:B2:72:7F:69:D7:89:CD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uTX76Nl_zp0PnzfwVrJyf2nXic0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.56.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:23:00:b6:ac:ae:b8:ba:76:65:99:c2:3a:a5:29:19:69:cb:
a9:0e:fc:a2:12:cd:0c:39:cc:5d:fb:ba:30:32:81:e2:c3:8a:
7c:c6:ea:e8:3f:13:fe:51:06:04:b1:a1:86:ed:e3:42:a8:57:
7a:b2:85:28:59:98:ab:07:ce:9e:aa:b9:bb:ad:78:9b:1b:e5:
28:a5:fa:91:7d:0d:57:6d:75:ad:c5:9b:5c:e7:fa:78:37:9d:
02:28:75:bf:2f:94:ff:b8:bd:34:0b:71:03:52:1a:54:d1:fa:
d8:4c:87:90:c8:6f:23:d7:b4:db:61:af:69:cc:40:64:23:c7:
07:ac:a5:b9:88:44:18:cf:ff:f6:48:fa:ba:02:c7:ff:50:d2:
34:ce:dc:41:a3:49:cd:57:d3:50:82:3d:24:ec:49:c9:38:53:
d1:fc:dd:79:4b:a3:bf:ea:ff:54:53:63:d0:bb:71:89:a4:c3:
1b:ef:e2:17:69:96:80:aa:c9:c7:60:e9:7c:c7:b0:48:0b:4b:
db:6a:9f:3f:9b:bb:96:4a:a1:db:ea:18:50:03:e9:2a:45:56:
3b:50:2e:2b:b1:4b:69:d6:ee:5e:62:e9:76:18:64:c1:ba:46:
2b:22:64:ab:b2:24:03:68:07:15:79:51:34:9b:90:ae:3b:68:
d2:33:77:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org