Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QATksrzVim0dpPphvPySEMHQ4Mw.roa
File: QATksrzVim0dpPphvPySEMHQ4Mw.roa (raw, json)
Hash identifier: 25V5XmcIm4N8GPBzUGSr1fGR501eqEHxR0a91kqW5qc=
Subject key identifier: 40:04:E4:B2:BC:D5:8A:6D:1D:A4:FA:61:BC:FC:92:10:C1:D0:E0:CC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QATksrzVim0dpPphvPySEMHQ4Mw.roa
Signing time: Thu 15 Sep 2022 02:52:44 +0000
ROA not before: Thu 15 Sep 2022 02:52:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.238.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4004E4B2BCD58A6D1DA4FA61BCFC9210C1D0E0CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a1:bb:a7:8d:00:8f:21:2b:7f:3b:9d:a6:6e:
72:1b:f4:12:b1:ed:9a:56:d5:92:7e:ff:de:91:eb:
c7:50:73:ca:fd:c6:eb:ab:5f:e2:f6:af:1a:6e:89:
6c:f2:9e:7b:33:45:a0:f7:3a:96:e5:7a:75:32:95:
94:9b:13:75:e3:66:88:b5:0f:a4:1f:35:c9:35:e2:
3d:54:2c:3f:27:51:53:41:13:05:51:9f:28:50:78:
24:33:18:5d:0d:6f:b0:60:de:a2:92:a3:c2:c6:ee:
bc:49:98:d5:10:1e:7a:7f:7e:b8:34:3f:29:9b:ef:
1f:38:e4:83:1c:4e:fb:14:f7:4a:ce:ea:a2:4e:f2:
0f:73:ea:21:f1:ad:34:f0:d1:58:2c:ee:f9:27:96:
af:cd:ce:7e:d5:06:76:8d:7a:ac:bb:bd:f7:0e:9d:
18:47:96:b2:68:70:64:f4:52:8c:e1:2b:39:4a:0e:
1a:f2:58:d2:50:cd:1c:7f:57:87:ae:21:53:a0:1b:
51:d0:63:54:ed:47:34:fc:9b:32:30:1b:3b:28:c1:
16:76:b6:b2:da:61:c8:d2:72:b0:98:82:06:c9:ad:
ac:5b:4a:77:ef:a9:bc:31:b3:34:1d:40:bf:f8:51:
97:25:20:1d:0a:80:6c:3a:65:f8:c8:51:35:c0:cf:
f2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:04:E4:B2:BC:D5:8A:6D:1D:A4:FA:61:BC:FC:92:10:C1:D0:E0:CC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QATksrzVim0dpPphvPySEMHQ4Mw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.238.0/25
Signature Algorithm: sha256WithRSAEncryption
ae:c1:ec:5e:d0:79:a8:b8:5c:86:18:51:76:ee:b0:91:41:ed:
76:90:12:42:3a:53:04:91:21:5c:a1:8d:2d:76:44:db:62:d9:
36:ce:62:fa:54:c0:5a:a8:47:f5:93:35:e0:39:f3:d8:f7:f2:
37:68:12:b3:38:e5:2b:02:fc:88:c8:d9:62:6c:c8:d1:3f:b1:
c9:b2:41:a1:40:37:2a:d1:ec:ce:38:23:61:f4:c4:ea:34:a8:
70:51:c4:f4:c8:86:25:05:a2:11:44:be:13:d8:ca:b8:1c:d7:
82:e1:13:e2:dc:ee:1e:c3:8d:28:bc:8e:b3:c8:12:64:23:5b:
f1:72:71:95:f3:7a:dd:66:26:5e:28:bc:d4:d3:cd:ed:fd:ba:
e8:c7:a5:67:03:c8:0d:aa:61:04:df:e2:3e:0c:74:f0:19:75:
80:37:06:dd:71:d7:59:8c:9f:44:ad:05:a4:aa:ee:12:ff:45:
b7:b3:67:10:02:50:a5:82:c7:eb:7c:7f:97:88:85:96:3a:e6:
f1:ea:b0:00:2e:74:ef:5a:e8:79:9a:d2:82:0b:d3:25:ce:80:
f9:40:60:55:d8:66:06:2f:c2:82:f1:ad:86:20:61:96:71:eb:
5d:b4:42:47:8b:cb:68:6f:b9:74:27:cf:ad:f4:6b:4c:21:e3:
73:8a:ec:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org