Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/QpLVPN-aYkmQDigMMC1JsFy7Dig.roa
File: QpLVPN-aYkmQDigMMC1JsFy7Dig.roa (raw, json)
Hash identifier: sho1PZxNJYhU1TQD7zTWrFqiPlD2yPlSLlq/a4WgOSE=
Subject key identifier: 42:92:D5:3C:DF:9A:62:49:90:0E:28:0C:30:2D:49:B0:5C:BB:0E:28
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0A82
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/QpLVPN-aYkmQDigMMC1JsFy7Dig.roa
Signing time: Wed 29 Sep 2021 02:41:18 +0000
ROA not before: Wed 29 Sep 2021 02:41:18 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9916
IP address blocks: 192.83.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2690 (0xa82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 29 02:41:18 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4292D53CDF9A6249900E280C302D49B05CBB0E28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:eb:a8:82:86:26:56:5e:3d:7c:68:c6:2c:04:
85:3b:51:43:17:b0:1b:05:5a:90:af:d5:4d:ee:11:
aa:02:8a:0d:73:02:e6:ed:94:7c:78:23:8d:7d:07:
d4:89:80:78:9c:20:76:b7:70:07:4a:b2:24:1b:04:
d4:3a:55:79:64:dc:6d:9f:5e:06:9e:55:e1:14:44:
ff:36:65:a6:ed:74:f0:93:19:d0:68:0c:eb:98:b6:
3a:4b:8b:f7:f5:60:e1:a1:6e:0a:42:3a:74:d3:4f:
d7:5b:ca:e3:2f:b2:8e:19:4a:1b:ec:61:8f:66:a1:
30:c2:ee:a9:16:e9:f2:15:b8:28:f5:fc:fb:66:75:
90:aa:d7:8d:8c:90:3d:ce:db:98:09:f3:e1:e4:8b:
bc:b0:1c:4e:91:37:29:48:a5:c8:14:10:0e:5f:ff:
7b:af:94:4a:47:e6:19:02:c2:73:b6:24:3a:26:2f:
81:cd:2d:94:ab:ff:57:9f:48:ed:46:31:03:bd:2b:
9f:9b:ad:13:a8:12:06:8f:16:f4:19:66:bc:1b:4e:
6c:df:89:2f:b0:63:20:6b:a8:a1:0b:53:43:1f:70:
9f:1b:16:5c:05:a8:78:59:7e:c8:c1:c7:99:5c:df:
d5:fa:92:36:8e:2b:06:e9:ef:e5:6e:a5:b6:d7:e0:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:92:D5:3C:DF:9A:62:49:90:0E:28:0C:30:2D:49:B0:5C:BB:0E:28
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/QpLVPN-aYkmQDigMMC1JsFy7Dig.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.83.180.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f9:7d:57:2b:a6:c6:f9:e4:10:35:8f:00:5c:62:3a:30:b0:
4e:04:c9:c8:e1:ba:40:f9:89:b1:d2:cb:0b:bc:f8:5b:f5:83:
93:53:7e:33:e0:e9:30:2b:d7:56:dd:ab:24:3d:5e:77:38:b6:
6c:9f:b3:62:93:a9:64:95:ec:8a:84:60:66:4f:3b:9f:a6:76:
da:32:a0:20:4d:68:36:4e:2b:99:4d:ea:4c:51:a7:ff:0a:be:
4d:75:bf:f5:c7:fc:69:1b:74:ec:54:05:9f:0d:9f:8b:70:5f:
73:0b:9f:6d:85:98:f6:6a:49:9b:8e:ac:7a:05:fb:c0:7c:d0:
80:5f:87:80:83:44:50:28:2d:c7:d5:2c:98:63:e5:99:64:13:
9d:9a:db:58:6b:a9:72:61:8a:20:64:12:d2:0a:e7:53:ad:1c:
f5:fa:26:d1:d6:e3:f3:70:69:6d:64:b2:5c:34:2c:3e:57:62:
e7:13:84:68:71:0d:14:fa:1a:50:f6:c4:b4:5c:97:4b:18:1f:
6c:23:b6:76:02:57:bd:33:43:f1:fc:94:ba:3b:41:61:4a:4a:
43:f3:80:ce:43:df:59:65:3b:af:a6:3e:12:40:a3:66:e5:f3:
de:d3:8d:be:99:2f:5e:8f:61:f2:29:01:a9:ff:38:6e:58:23:
21:04:b1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org