Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QNcU6mU0WhzCTWChmyBarItHxpw.roa
File: QNcU6mU0WhzCTWChmyBarItHxpw.roa (raw, json)
Hash identifier: //kBbK1ah4ylBC9OBYhWud1A/Fl9wz8jnjouzFpudBQ=
Subject key identifier: 40:D7:14:EA:65:34:5A:1C:C2:4D:60:A1:9B:20:5A:AC:8B:47:C6:9C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2188
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QNcU6mU0WhzCTWChmyBarItHxpw.roa
Signing time: Fri 25 Nov 2022 04:40:01 +0000
ROA not before: Fri 25 Nov 2022 04:40:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.194.204.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8584 (0x2188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=40D714EA65345A1CC24D60A19B205AAC8B47C69C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:4e:b0:71:f2:db:12:9c:11:29:d4:7d:4a:
c1:2b:8b:b9:ab:29:da:dc:2f:b8:21:c6:a7:2b:73:
f4:7a:83:e9:88:f3:f3:eb:86:a2:03:f8:df:c6:23:
05:d6:1d:c8:7f:07:9c:6a:6b:1e:86:61:29:55:1c:
01:8b:33:24:ba:08:81:90:ee:3f:41:ef:f8:f1:b1:
b1:50:00:64:14:c6:98:4a:63:7a:a7:0d:1e:92:bb:
32:1f:9c:e7:92:4a:57:a5:a1:0c:68:30:bd:8a:40:
ca:cf:11:9c:65:37:85:da:a0:86:68:90:e1:fc:a3:
70:2f:67:0c:92:02:13:48:2e:ed:53:b8:91:60:4d:
89:b0:6b:2a:6c:cc:5e:bf:e1:9e:ee:5e:d3:6f:94:
ae:f7:7b:93:db:3b:b3:e0:33:b3:a2:23:9f:5c:3c:
01:38:ee:72:e6:66:84:0c:57:8a:02:81:82:7a:4a:
e2:cb:21:68:ee:e8:b9:16:f3:77:f0:aa:57:a5:0d:
cf:50:d3:24:32:7a:05:83:92:97:c6:83:ac:bc:bd:
76:5d:0e:6a:f0:13:ea:91:6b:35:b4:ce:c7:36:7b:
3f:1d:84:7f:7f:62:9b:92:f2:f4:73:cd:df:e9:f7:
57:0b:b2:87:fe:c3:ea:13:42:19:21:06:10:e6:f5:
9e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D7:14:EA:65:34:5A:1C:C2:4D:60:A1:9B:20:5A:AC:8B:47:C6:9C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QNcU6mU0WhzCTWChmyBarItHxpw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:8e:2a:f1:db:35:8e:86:b5:b5:33:db:b0:a2:29:b2:23:d6:
e5:0b:d5:98:07:a6:29:29:b3:73:af:6c:77:8a:fd:e0:03:46:
13:63:ab:ca:6f:4e:4c:e1:2e:8b:24:d6:a3:84:84:dc:69:43:
88:a2:06:1e:89:d4:7a:7e:17:f0:4a:25:bb:7b:19:6e:df:34:
cb:bf:79:50:05:b8:65:63:7e:3a:80:7d:cb:51:15:6b:78:85:
e9:dd:4c:dc:de:73:43:97:b4:b4:f6:35:d2:75:66:c3:63:c9:
45:b4:fe:63:0d:61:98:ca:40:6e:e2:bb:40:09:34:2c:aa:c4:
e4:f6:75:80:cc:45:72:60:64:1a:c8:7a:ed:4b:39:5b:c5:59:
50:f5:b0:ca:3c:98:86:62:65:ef:56:0e:8a:e8:a1:6b:d0:10:
e4:35:cf:7b:74:f2:ba:7a:d3:59:e2:fc:ea:6b:84:90:c3:f3:
9c:26:ca:0d:10:f7:9c:62:8e:b0:c6:c9:fe:3b:4f:f7:d6:ca:
6d:61:fd:c1:11:2f:98:bd:46:20:ac:eb:76:bc:71:34:9d:dd:
d1:ab:6c:69:80:29:f9:a2:0f:49:2a:75:67:ec:ff:36:e4:60:
a9:e2:a5:e9:50:96:70:a8:ce:f3:98:1d:68:38:09:d8:8b:01:
f4:8c:ab:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org