Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q-HHku-6PY7rHHapLpzd621oikU.roa
File: Q-HHku-6PY7rHHapLpzd621oikU.roa (raw, json)
Hash identifier: dCVLlsKApFVq7H1uexpp1d7nkeU2LpPl3WEMps6ASR0=
Subject key identifier: 43:E1:C7:92:EF:BA:3D:8E:EB:1C:76:A9:2E:9C:DD:EB:6D:68:8A:45
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q-HHku-6PY7rHHapLpzd621oikU.roa
Signing time: Thu 15 Sep 2022 02:53:44 +0000
ROA not before: Thu 15 Sep 2022 02:53:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=43E1C792EFBA3D8EEB1C76A92E9CDDEB6D688A45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:50:45:1a:62:6d:89:b4:a4:31:03:24:70:
b1:e1:96:fa:fb:65:33:d8:80:2d:c0:b9:44:58:fa:
70:4e:df:9d:0a:4c:51:3c:cb:0e:50:a2:79:9f:6c:
9a:79:f0:bd:60:f0:ce:fa:ba:b0:59:78:50:36:7e:
03:36:9e:5f:f5:21:c7:95:b3:a5:d7:aa:e9:31:4a:
af:60:cf:db:37:42:ff:fc:33:c7:ff:e8:ba:77:6d:
63:d5:85:63:3c:a1:c5:e7:6b:f4:0b:75:b1:12:18:
fb:90:4b:64:0f:c8:7b:47:7e:6b:6b:2f:17:27:b0:
49:4e:a1:1c:91:69:83:bb:6c:cb:6f:50:3f:2f:6c:
e0:a1:db:fd:a8:7b:ac:2c:61:b1:09:a8:07:dd:4b:
69:98:72:e1:a5:c2:67:d6:9c:87:6c:c9:c4:f5:11:
7d:48:57:d4:c4:5a:49:6c:af:98:09:ea:d1:9d:17:
78:91:44:81:82:9c:cd:10:14:be:a5:32:1f:26:69:
2f:6d:66:c0:3c:98:07:96:5a:d9:9d:65:7b:2d:4f:
8a:d2:5a:eb:d3:8b:ce:f7:77:ab:1f:e1:cc:10:2f:
38:ca:f1:c3:c8:e5:cd:75:49:6a:1c:23:8c:fb:75:
b7:6a:8f:c3:3e:d6:67:6f:ef:ee:66:d4:ce:cb:cd:
fa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E1:C7:92:EF:BA:3D:8E:EB:1C:76:A9:2E:9C:DD:EB:6D:68:8A:45
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q-HHku-6PY7rHHapLpzd621oikU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:de:20:4f:0b:de:23:d2:0e:3e:d9:e6:d9:64:14:5d:fb:15:
43:b4:7f:2b:ef:5a:38:3c:3b:9d:0d:25:a1:a0:1f:f2:af:ae:
14:8f:90:78:7e:fb:d8:a3:32:7e:19:bd:59:a2:f0:1e:9f:06:
56:87:ef:db:08:8e:cd:4d:6e:51:84:99:79:e6:1f:0b:1c:3d:
d4:97:96:8e:da:8d:6d:e6:08:cb:24:fd:ac:fd:1a:f9:63:15:
bc:c7:2a:66:09:2d:d3:fe:fc:3f:c8:d4:db:b5:d3:ce:92:6a:
1f:4a:ec:d6:43:76:d4:2d:fb:6e:9b:d1:43:75:fb:fb:b0:92:
bb:6c:f8:f5:79:a0:92:92:f7:6f:ce:5d:10:4f:8b:cd:65:bb:
aa:98:3e:9e:6f:33:25:16:4c:7f:46:4f:84:df:b2:54:1d:65:
d2:9f:03:02:be:91:ea:15:53:8a:ec:77:12:ff:06:f6:d0:40:
df:cf:4b:9e:69:66:97:79:1d:2b:a2:06:58:10:85:63:62:80:
07:14:ab:0a:a0:d7:b5:44:53:59:dc:67:61:67:2e:bd:79:55:
ac:a2:ff:8e:71:ff:c6:a4:8b:9e:b1:4b:21:a8:4a:da:d3:8f:
20:4c:e6:8b:4a:cb:e8:a2:3c:16:a1:0e:0c:a3:dc:aa:ba:ce:
87:77:5c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org