Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6QXAn_CGCgUBvb9X0tKYEFNiOc4.roa
File: 6QXAn_CGCgUBvb9X0tKYEFNiOc4.roa (raw, json)
Hash identifier: 84ziDmlhgmqeBo943AP2zT12nOo8raymPsdITkspO/0=
Subject key identifier: E9:05:C0:9F:F0:86:0A:05:01:BD:BF:57:D2:D2:98:10:53:62:39:CE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1723
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6QXAn_CGCgUBvb9X0tKYEFNiOc4.roa
Signing time: Sun 07 Feb 2021 12:16:56 +0000
ROA not before: Sun 07 Feb 2021 12:16:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5923 (0x1723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:16:56 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E905C09FF0860A0501BDBF57D2D29810536239CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:d8:55:5c:df:1c:5a:6c:a0:6c:50:77:27:
82:d8:0f:41:0a:b0:9b:5b:b0:0b:da:04:1b:d2:22:
9b:25:28:59:e9:bc:08:63:43:91:99:9f:a2:c1:85:
97:06:19:5b:92:2b:a4:c4:aa:8a:d5:16:36:56:17:
4e:2b:b6:b5:b4:2c:e7:6f:39:aa:50:e6:48:b6:f7:
b2:13:57:ce:cd:43:3f:6b:30:8a:3b:06:85:db:05:
53:3d:5e:20:06:fd:cf:07:c1:97:75:a7:b5:87:eb:
f4:65:d8:83:c7:6e:b9:2d:5e:9a:cc:14:80:b2:ed:
7d:71:15:4b:56:eb:80:15:27:52:b9:7b:5b:5d:01:
9c:f4:39:07:e8:6e:3f:ea:d3:3b:e4:00:ed:21:c5:
8c:e8:e1:63:df:e7:22:f3:59:08:1e:1f:fb:11:94:
5d:a3:a4:a2:b6:63:00:eb:97:e7:87:ce:79:fc:05:
5c:2b:55:c7:c2:34:a6:3c:ea:82:19:ee:fd:3b:af:
ae:97:ff:a7:f2:56:c1:31:f7:d9:b2:bd:74:cf:af:
a0:55:9d:eb:50:93:7a:8f:ad:b9:ce:3d:3e:05:ea:
7e:7f:f2:48:f2:18:4e:b0:5f:df:66:7e:1f:2c:25:
c3:59:f8:6c:f4:11:52:e8:05:6c:1d:b8:bf:0d:3d:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:05:C0:9F:F0:86:0A:05:01:BD:BF:57:D2:D2:98:10:53:62:39:CE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6QXAn_CGCgUBvb9X0tKYEFNiOc4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.12.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:8d:2c:8f:be:d7:05:ac:0e:1e:66:c8:72:20:b0:1c:b0:33:
f1:ed:78:68:73:f9:2d:3a:cb:b0:85:2b:4a:d9:4d:65:47:97:
18:ab:65:24:e6:d7:c5:a6:a9:e1:14:dc:bb:c8:c3:4d:48:c9:
f9:c3:48:ed:7b:54:6a:90:0e:59:ff:f0:77:7a:83:00:74:28:
c6:02:c1:da:af:a5:82:ab:56:78:06:8e:63:1d:71:64:b1:45:
01:9c:18:fc:85:82:54:67:4d:57:75:c6:df:37:c6:9a:cd:64:
91:47:ef:4d:b9:01:95:63:14:65:65:48:f1:cb:85:80:d0:23:
0a:90:81:82:6e:53:52:3a:a7:a2:c2:c5:fd:3c:03:ec:c9:f1:
e1:95:63:0e:ba:69:bf:4a:bd:77:e6:63:db:3b:e5:e3:5d:5f:
2b:9e:62:7d:0d:9d:35:b4:e5:0a:b1:d5:1a:35:33:fe:f9:ea:
78:57:44:bc:5a:6e:37:16:b9:fc:32:52:07:9e:70:75:84:ac:
3c:9a:1c:bc:8e:ff:6e:10:07:5f:ca:32:33:6c:69:aa:56:85:
d7:4f:78:02:7f:67:a7:49:ce:dc:08:3e:7f:12:3f:99:d2:98:
de:1a:57:37:9d:66:5b:1d:ae:db:f2:75:25:46:69:93:f1:02:
24:a7:3a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org