Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QG5LAku_Y0mPW_L1U03Q-WNJt7I.roa
File: QG5LAku_Y0mPW_L1U03Q-WNJt7I.roa (raw, json)
Hash identifier: 5rCJfo1rIfKA5Hz+/xTwSfq//LJec7s9qusjR9NKhac=
Subject key identifier: 40:6E:4B:02:4B:BF:63:49:8F:5B:F2:F5:53:4D:D0:F9:63:49:B7:B2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1ADC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QG5LAku_Y0mPW_L1U03Q-WNJt7I.roa
Signing time: Wed 29 Sep 2021 02:45:50 +0000
ROA not before: Wed 29 Sep 2021 02:45:50 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6876 (0x1adc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:50 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=406E4B024BBF63498F5BF2F5534DD0F96349B7B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:17:d5:8a:5b:e9:0b:0b:a1:84:04:85:9f:
78:79:9a:7e:a1:00:43:6b:cf:bd:c5:61:72:d7:14:
f3:ea:3f:c1:0a:ca:18:4c:e2:8d:dc:5d:e4:cb:1c:
b6:01:ba:e5:73:2a:cc:c3:8d:d0:eb:7e:20:53:99:
ce:76:2a:2a:6d:dc:7a:3b:27:8f:c0:b6:12:4a:0a:
af:49:9e:25:e8:47:71:cf:49:c7:96:de:15:12:92:
6d:0a:d7:2b:bf:b3:44:17:b9:46:70:29:aa:1d:c6:
c6:81:91:49:4a:1e:09:99:c5:7a:0f:74:48:4c:d5:
3c:5f:fb:60:60:9e:61:4d:76:a8:94:1b:25:73:a3:
33:75:0c:8c:9c:00:0b:91:0e:e2:69:55:b8:44:44:
9a:56:d7:52:05:0c:f2:f8:2f:2a:f4:7b:3a:6c:01:
21:f6:18:a9:b6:f3:2e:c4:d8:c5:65:d9:81:a8:89:
33:cc:84:ec:8c:6d:78:39:59:cc:c8:10:33:3d:f2:
f2:d3:40:28:81:07:07:b7:c9:42:d4:96:78:e5:ff:
0f:53:c8:15:06:08:be:4d:e4:1d:83:63:52:ce:3a:
57:48:ac:bc:ee:73:9d:55:c0:9b:dd:56:a0:91:fc:
1b:bd:57:f3:d2:88:35:5c:b1:bb:87:0f:9b:16:26:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6E:4B:02:4B:BF:63:49:8F:5B:F2:F5:53:4D:D0:F9:63:49:B7:B2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QG5LAku_Y0mPW_L1U03Q-WNJt7I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.148.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:3b:85:3e:3c:2d:4c:ef:aa:33:0d:01:5f:be:6e:d0:25:51:
b7:3b:d2:1e:57:68:49:7d:f1:60:3e:29:23:a0:12:73:58:f0:
ed:31:7f:08:16:18:81:d2:4c:50:bf:3a:6f:43:d9:19:1e:08:
ac:92:e0:2e:2d:0a:9b:16:91:b4:53:bb:92:11:0d:2b:3c:3f:
4d:35:7c:80:fe:40:17:cd:37:62:90:cb:11:07:53:24:94:3d:
6e:8b:de:b3:78:5b:9e:6d:13:7f:44:30:8e:ea:06:d1:50:eb:
2e:2a:d1:eb:eb:2a:b8:1a:40:bc:6d:f5:0c:29:85:c0:6c:39:
2e:31:a5:d9:fe:99:8e:ec:44:a8:9d:60:d2:0d:2a:9f:c3:f1:
86:b8:20:19:62:ed:fb:e7:f4:21:c8:55:cb:eb:6d:c2:6c:1d:
1f:ec:bd:9f:73:7f:db:80:f0:69:e8:83:b9:92:91:ff:26:c4:
61:85:4d:b9:37:41:c8:92:10:86:ab:44:37:32:7f:56:79:7d:
86:4c:84:39:69:02:10:92:13:7c:32:d2:db:ba:2e:6c:04:26:
54:ba:4a:96:f9:45:9c:51:de:56:b7:e6:37:76:ed:9d:8e:54:
bd:2d:f7:ce:d2:42:31:16:91:91:84:af:64:36:80:f7:9f:4b:
ec:ea:a1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:30 2024 by rpki-client on console-ams.rpki-client.org