Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q557NehQT71bwnyweGWa1sQgi2Y.roa
File: Q557NehQT71bwnyweGWa1sQgi2Y.roa (raw, json)
Hash identifier: 5oft2f3SLsJ3tDmAXwEADs0O5ctCiahhVmQkC9S7uxo=
Subject key identifier: 43:9E:7B:35:E8:50:4F:BD:5B:C2:7C:B0:78:65:9A:D6:C4:20:8B:66
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1777
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q557NehQT71bwnyweGWa1sQgi2Y.roa
Signing time: Sun 07 Feb 2021 12:19:28 +0000
ROA not before: Sun 07 Feb 2021 12:19:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6007 (0x1777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:19:28 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=439E7B35E8504FBD5BC27CB078659AD6C4208B66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:70:1d:69:1e:01:03:49:07:4d:bb:86:3a:
d8:f7:ab:8a:a1:f0:c5:00:a8:03:0c:57:aa:da:a4:
0e:c0:af:17:eb:c4:45:91:b3:fc:59:c5:53:42:32:
8d:18:62:ec:af:69:3d:2e:1a:a6:0a:43:47:31:ce:
a4:5a:8b:7e:3f:00:80:51:68:d4:49:08:d0:78:8b:
3c:9f:9a:4b:29:a5:e5:c4:3d:db:5d:1e:c6:3f:3f:
2f:cb:33:55:0b:a5:84:12:04:3f:1a:6e:f5:2b:27:
d4:1b:51:51:8c:9d:b1:6e:e5:c7:be:76:ae:f7:f3:
e5:86:8a:42:6a:62:b3:7e:48:1e:51:c4:29:e6:53:
b6:e2:05:dc:5a:b9:0a:28:89:09:ea:39:46:f3:70:
ec:21:b3:a3:57:ba:68:13:0d:79:14:cf:4f:2f:9f:
bd:d9:0e:cf:0d:6a:4f:ea:3d:99:b3:ee:f0:88:f5:
71:08:c8:29:84:e1:68:ae:02:03:b4:ce:57:41:ab:
2a:cf:c1:be:45:a9:6d:23:f2:24:8c:5c:6d:cf:c5:
b3:84:66:b1:da:2b:9c:1e:d4:33:40:a8:e8:e2:7a:
a2:85:a0:d3:57:50:bb:cd:1e:4c:b7:ca:a3:55:1b:
32:09:ee:14:fa:c8:a9:66:16:51:bc:fc:0d:ea:1f:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9E:7B:35:E8:50:4F:BD:5B:C2:7C:B0:78:65:9A:D6:C4:20:8B:66
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q557NehQT71bwnyweGWa1sQgi2Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.112.0/21
Signature Algorithm: sha256WithRSAEncryption
93:72:17:0d:fb:e1:7b:c2:e3:50:5d:30:1d:39:20:6a:b9:b3:
ac:d1:cf:6c:a5:b3:da:b3:0c:2c:f8:79:07:be:17:ae:18:05:
6a:73:4d:cc:0e:51:2f:8d:5c:73:c3:09:83:f3:21:bb:38:ce:
60:4c:6f:65:74:d2:cd:8b:f5:62:7e:e2:23:9e:a9:9b:dd:d7:
28:40:6f:ba:11:4f:04:e2:09:2d:e6:07:cf:56:2a:5c:63:46:
f2:a8:be:76:d2:6a:2d:1c:cd:38:60:98:0d:25:04:7f:c6:45:
36:2e:db:2a:26:07:3c:41:01:9c:9c:bc:37:47:9b:4a:32:68:
bb:8b:42:ad:f3:93:6e:29:44:7b:c7:93:a3:d0:e6:9e:22:a5:
52:83:c2:e6:65:20:20:85:c5:28:3f:57:b4:82:c1:0d:4c:03:
0e:cb:32:ce:9f:ac:9d:50:c5:5e:7d:4f:56:3c:f4:4f:08:3b:
85:b4:35:97:28:9a:36:7c:0f:7b:66:39:5f:9d:a9:26:c5:54:
20:80:ef:c6:09:68:3f:71:d9:d3:14:6a:1b:5b:71:87:d8:3f:
76:fa:b6:86:14:73:69:91:ee:4e:05:7c:0c:47:9b:58:03:c6:
ae:fc:87:9b:43:0a:8b:e5:6c:c4:71:dc:23:6f:38:6b:eb:76:
bc:b1:09:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org