Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xDiwedfIUG730_Ef65P1oi0zmks.roa
File: xDiwedfIUG730_Ef65P1oi0zmks.roa (raw, json)
Hash identifier: aJuqHB7GL9gfKMaapQT2SDuM5w2idHZfUmY7ta+fVnk=
Subject key identifier: C4:38:B0:79:D7:C8:50:6E:F7:D3:F1:1F:EB:93:F5:A2:2D:33:9A:4B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EAD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xDiwedfIUG730_Ef65P1oi0zmks.roa
Signing time: Tue 29 Sep 2020 09:56:01 +0000
ROA not before: Tue 29 Sep 2020 09:56:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.204.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3757 (0xead)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:01 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C438B079D7C8506EF7D3F11FEB93F5A22D339A4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:9b:a5:ad:77:06:c0:46:78:a0:c0:76:c0:
78:ce:87:1b:2c:dc:73:41:55:a0:de:c3:43:5c:7b:
13:c6:89:fc:53:99:29:87:08:a9:64:34:95:30:12:
a1:f9:c0:d0:58:4b:5d:ce:20:b6:ed:52:11:1f:af:
e5:60:52:90:b2:bf:3d:03:e4:a1:5c:95:9c:a1:12:
67:18:94:24:14:30:27:97:54:d9:39:f6:4c:6d:91:
ab:31:18:02:16:8d:44:fc:e4:3a:09:60:d5:a4:36:
ea:96:dd:b5:7e:a3:13:09:1e:dc:4c:60:71:dd:d9:
b2:92:92:5d:09:87:78:f5:8d:91:ba:c3:0a:e5:09:
17:6c:7e:41:97:50:02:08:cd:c7:d2:3f:93:99:92:
85:13:fd:0f:2d:64:01:d5:80:3b:5c:b3:c1:5c:7c:
48:3b:b5:ec:5f:5a:21:62:5c:0c:34:ec:14:34:64:
b0:61:8e:83:07:c3:3e:6a:9d:44:c0:35:53:c4:ab:
dd:ab:c6:c4:1e:80:14:22:4e:bd:7a:e6:98:76:6c:
de:09:e2:32:ad:f8:38:d6:5c:9a:47:ae:62:d7:44:
1a:4c:45:22:ff:c5:22:1b:a3:6e:8e:46:2f:2c:35:
46:e5:7f:e7:79:8b:e8:d5:ef:84:e2:76:ca:eb:bb:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:38:B0:79:D7:C8:50:6E:F7:D3:F1:1F:EB:93:F5:A2:2D:33:9A:4B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xDiwedfIUG730_Ef65P1oi0zmks.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.0/26
Signature Algorithm: sha256WithRSAEncryption
5f:ea:b0:30:f2:69:ef:25:cb:3b:c0:98:ca:91:91:57:0a:0e:
f5:6f:1c:85:3f:fe:ec:0b:00:9a:2a:3a:ac:51:3b:1d:8d:47:
d3:42:5d:bd:b6:6a:1f:d8:13:d5:a4:21:11:4a:f2:1f:b2:5a:
6c:e7:27:a5:14:9f:3d:31:4d:b5:e0:39:a5:4a:9a:07:87:e8:
1e:3f:26:7b:aa:a3:1c:fa:aa:17:a0:a3:07:f0:b3:b4:30:2c:
bd:10:84:58:c6:9a:95:39:e9:86:c5:4a:00:71:15:2c:4b:30:
bc:3f:c8:13:a1:34:e8:b5:a1:09:da:68:7a:95:d8:d7:24:0f:
6e:32:9a:fb:b1:c9:df:b5:71:87:7a:a8:75:56:3a:f6:40:70:
5e:e5:34:8c:38:36:b1:00:b3:ae:4b:9f:59:0f:ff:10:47:01:
c7:4f:25:fc:65:83:2c:b8:b4:7b:55:10:1a:24:7f:e9:c3:4a:
da:ee:d4:ff:5a:3c:34:16:7c:63:c8:3b:d8:cb:5f:49:73:a8:
e2:a8:70:82:96:33:96:de:86:10:75:42:1d:d1:f2:6c:55:37:
c2:c1:35:61:de:cf:79:0a:84:85:e5:93:ca:dd:04:75:7b:61:
59:a6:bc:a8:2a:50:5c:87:d2:87:e5:32:fe:c7:6e:74:5f:4a:
99:3b:e3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org