Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QLsvAPGRvhLvFqrQ0HcW6jqEwo8.roa
File: QLsvAPGRvhLvFqrQ0HcW6jqEwo8.roa (raw, json)
Hash identifier: DkySBBxeZpLwbn5Jo/Lw8dqtQIQsZSRLPGff+MjWkAU=
Subject key identifier: 40:BB:2F:00:F1:91:BE:12:EF:16:AA:D0:D0:77:16:EA:3A:84:C2:8F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2352
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QLsvAPGRvhLvFqrQ0HcW6jqEwo8.roa
Signing time: Fri 25 Nov 2022 04:43:26 +0000
ROA not before: Fri 25 Nov 2022 04:43:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9042 (0x2352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:43:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=40BB2F00F191BE12EF16AAD0D07716EA3A84C28F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ea:47:88:bf:14:61:a3:c9:d8:ef:35:e7:be:
24:8c:4d:a1:95:a3:10:d9:d1:21:26:d0:56:b9:7c:
03:75:b4:79:2a:d4:d3:67:62:47:39:c0:23:2c:1a:
68:89:7c:25:2a:09:98:17:e2:41:95:37:13:00:06:
ea:ff:41:6d:7a:0b:06:5a:7c:9f:26:5a:ff:be:9a:
44:af:25:df:2d:0c:87:8b:b4:48:27:29:7b:10:a2:
0c:9d:5f:57:86:53:dc:11:b2:60:bc:eb:fb:ad:0b:
3b:60:2b:2d:13:67:eb:56:a2:72:3e:55:c3:39:a3:
d8:c2:3d:8f:91:dd:a2:14:b5:b1:5e:83:63:63:64:
d5:57:14:dc:bb:ae:06:92:8b:75:4f:d8:ec:66:1e:
96:49:c2:53:bf:9c:80:2c:e4:43:81:fc:d5:5a:7f:
34:df:a0:d5:ee:82:3a:99:16:b4:04:09:65:5c:cc:
fa:a3:2d:85:2b:ba:19:4e:b6:11:c8:7a:26:46:b5:
87:b2:cb:ae:bf:28:07:c7:c0:a6:79:ed:5c:1e:5e:
70:e6:8d:9d:0b:98:a0:97:c3:9d:f7:13:90:aa:5e:
de:75:d5:f2:46:10:e2:e5:99:1d:c9:66:55:39:b4:
93:ad:a5:40:05:d3:7a:42:b5:82:4b:ce:5d:c2:01:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BB:2F:00:F1:91:BE:12:EF:16:AA:D0:D0:77:16:EA:3A:84:C2:8F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QLsvAPGRvhLvFqrQ0HcW6jqEwo8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.40.0/22
Signature Algorithm: sha256WithRSAEncryption
76:ff:5b:26:7b:cf:e3:61:e6:b9:27:d0:74:9e:c5:e5:75:ca:
30:71:b7:f7:98:a5:54:c1:32:54:8d:d4:96:c7:a2:b2:d5:1d:
ec:9a:94:a2:bc:ff:9f:55:81:b9:b9:6e:84:b5:ce:c4:f7:f3:
c1:2e:9d:16:15:80:1b:6b:61:48:7c:73:9f:95:94:8e:11:80:
c2:60:c2:d9:54:bb:37:91:ea:a1:94:37:09:7e:df:2b:8c:99:
2b:ba:f3:40:ee:2c:e7:a7:07:2b:a0:32:b8:a0:05:7a:66:2c:
79:8c:65:7b:82:f1:a3:b6:22:e8:0e:f5:71:b5:02:08:47:5a:
03:d7:b9:2b:ac:d6:e9:39:8c:47:09:1e:e6:c7:15:48:f6:46:
80:0f:0e:ca:6b:5c:3a:75:52:d4:b1:dd:5a:06:43:a4:32:c5:
21:6a:61:c9:91:be:10:d6:5b:36:7a:b7:1b:9c:9d:96:ae:29:
f3:85:f9:ba:2a:97:b4:91:dd:c8:32:14:0e:fc:67:e7:55:d6:
69:35:37:28:23:d4:4b:31:6e:b9:f6:f0:fd:7b:9c:05:0b:5c:
ad:46:50:e4:89:4c:9d:d6:d9:73:52:42:7b:84:ad:6a:bc:cc:
40:1d:a3:63:a5:73:01:bc:00:81:9c:31:b3:e9:a5:da:a6:dd:
85:11:46:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org