Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KAQpnnhBYvroXI9jTnZeTjzZ2iI.roa
File: KAQpnnhBYvroXI9jTnZeTjzZ2iI.roa (raw, json)
Hash identifier: QZZBDwh89hVFv+moXzyn8M39aCIqeH/9rOYD02r1GBM=
Subject key identifier: 28:04:29:9E:78:41:62:FA:E8:5C:8F:63:4E:76:5E:4E:3C:D9:DA:22
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D39
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KAQpnnhBYvroXI9jTnZeTjzZ2iI.roa
Signing time: Wed 29 Sep 2021 02:48:46 +0000
ROA not before: Wed 29 Sep 2021 02:48:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.194.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7481 (0x1d39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:46 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2804299E784162FAE85C8F634E765E4E3CD9DA22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:3e:1e:e2:b3:8f:18:ba:e3:2f:ee:66:db:
78:d2:54:63:06:0d:dd:0d:ea:60:e2:44:37:d8:2f:
33:fb:ac:2a:54:32:90:19:31:c5:0d:49:52:95:c2:
b5:04:13:9a:d6:b8:a4:cb:a1:16:b0:78:37:4c:ce:
fc:4a:b8:b1:c0:b4:36:45:d8:1f:51:e0:fc:4b:b3:
f7:82:a3:97:c0:79:c8:e3:73:33:10:31:89:04:05:
64:96:30:33:86:72:c8:a4:bf:9a:b1:c3:c8:8c:85:
7d:a3:02:9b:75:dc:7c:f0:7c:7c:0c:de:f1:ad:0e:
fe:6a:28:94:1d:e8:d0:4f:78:07:c5:51:32:74:8a:
42:d1:5a:53:62:c3:3e:4a:e9:19:f9:20:59:1e:2d:
09:8e:0b:ae:eb:8c:7f:7f:b2:17:38:20:f4:5f:b8:
84:a0:2e:b0:42:e5:12:d6:19:f6:2c:8c:6a:77:d0:
8e:48:93:ad:be:72:fb:e5:66:98:a7:94:4e:f7:f9:
10:18:aa:32:65:36:f0:a4:4f:7a:12:2e:42:79:1c:
6d:b2:71:5d:1d:31:c6:07:c5:17:94:04:57:cf:65:
23:3b:3e:f3:12:70:37:62:3d:a2:3a:6f:d4:d2:0d:
ea:4e:28:79:d3:f5:f5:e4:86:d6:30:67:50:a9:73:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:04:29:9E:78:41:62:FA:E8:5C:8F:63:4E:76:5E:4E:3C:D9:DA:22
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KAQpnnhBYvroXI9jTnZeTjzZ2iI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.128.0/19
Signature Algorithm: sha256WithRSAEncryption
65:7e:fc:09:76:71:82:54:2b:95:8a:ff:c9:a8:4e:e9:ed:07:
3d:9d:62:21:bb:cb:ce:ff:1d:98:7e:f2:66:c3:16:bd:35:85:
4c:ac:56:d2:62:e8:19:70:1d:6c:46:33:9a:e5:c6:a4:dd:0b:
52:3f:51:d5:f0:1d:41:fb:99:5e:6a:a2:62:63:7c:9f:e6:95:
b6:41:21:f9:f2:14:b0:3f:00:04:15:81:ab:7e:e1:55:1c:5f:
c6:4b:ac:bf:cd:b9:ac:32:12:13:4e:3d:61:18:ca:75:c4:8d:
3d:4a:2b:97:ae:aa:de:fc:f1:0e:b7:c4:30:92:03:f8:55:1d:
ff:11:ba:0d:0a:bd:6e:56:3c:e4:ce:92:e4:6b:ca:e6:45:03:
41:e9:3d:07:0e:34:32:c5:59:1d:f0:5e:d6:d9:2c:b1:71:db:
69:4b:eb:a9:9b:f0:2e:dc:8c:3a:2c:1c:55:ea:2e:2d:40:ce:
36:85:6f:8c:1e:0a:ec:ec:55:a8:dc:fc:e2:dc:a2:62:90:82:
16:89:70:f2:93:21:fe:33:b4:a2:31:bd:57:60:54:20:1d:2b:
34:71:2b:e5:e4:45:8e:8b:c8:cf:5f:0a:5c:12:3d:8b:d6:37:
21:fc:4c:26:f9:18:81:1b:28:e0:5f:d9:4c:60:b8:e6:48:10:
2b:a3:3c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org