Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QQzS06MfoqHcEzeftfivKeXVj9A.roa
File: QQzS06MfoqHcEzeftfivKeXVj9A.roa (raw, json)
Hash identifier: SJbhPOn/XGZ7PV+DcLrBOHFIOUlLvPXcCEU8pGJOnCo=
Subject key identifier: 41:0C:D2:D3:A3:1F:A2:A1:DC:13:37:9F:B5:F8:AF:29:E5:D5:8F:D0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C68
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QQzS06MfoqHcEzeftfivKeXVj9A.roa
Signing time: Wed 29 Sep 2021 02:47:43 +0000
ROA not before: Wed 29 Sep 2021 02:47:43 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7272 (0x1c68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:43 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=410CD2D3A31FA2A1DC13379FB5F8AF29E5D58FD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:48:e5:b8:fd:58:37:53:4b:15:12:98:96:
6b:39:d0:55:4c:7f:82:17:07:c2:7a:fe:84:90:dc:
b7:54:41:53:5c:73:af:49:7e:53:54:fd:ad:a1:47:
d0:4d:f3:ce:e9:fb:f8:16:83:c8:cd:70:7b:b3:9f:
9b:62:62:d7:48:ca:52:25:2e:a3:40:76:f6:af:49:
26:d3:f5:8a:e5:c2:d7:dd:53:9c:5f:b3:05:28:2b:
d0:be:70:a6:3e:6c:b0:1c:60:30:60:fd:9c:ae:80:
62:00:b6:f0:c1:4a:39:4b:d8:8c:3e:bd:10:42:67:
0b:8f:dc:e3:7d:9f:04:f9:71:d6:4a:ce:88:24:14:
73:27:55:f4:b0:8f:cd:15:d0:98:9a:42:c1:e9:86:
b5:a3:e7:06:df:9f:a2:8b:9c:4f:89:92:13:05:74:
8b:6a:5e:d0:e4:82:54:99:d0:cc:6f:fe:d0:7b:07:
47:34:f7:b4:ea:a1:a6:46:7f:b7:be:eb:7f:19:82:
27:d4:00:ca:ac:4a:8e:65:27:44:7c:8d:38:62:9c:
7e:c5:4b:54:6c:91:86:24:32:7c:1c:75:64:d5:b4:
67:01:9b:df:28:0e:5c:96:41:94:43:5a:0e:8a:c0:
dc:55:77:c2:33:d2:42:c2:f1:38:2c:8b:df:a6:21:
ac:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0C:D2:D3:A3:1F:A2:A1:DC:13:37:9F:B5:F8:AF:29:E5:D5:8F:D0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QQzS06MfoqHcEzeftfivKeXVj9A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.80.0/21
Signature Algorithm: sha256WithRSAEncryption
57:77:57:ea:17:3f:7b:2f:a3:be:4d:42:93:54:23:f1:6f:5b:
25:3f:42:4a:51:4e:2d:2a:1f:4c:bd:9c:5b:79:bc:bf:d0:90:
71:3a:70:77:6e:51:a6:ec:2b:cf:83:52:49:ee:d6:da:51:32:
48:ab:c0:6a:0c:42:f3:30:28:c5:20:dd:ec:77:81:f0:5c:a2:
03:f7:0d:ce:13:80:bd:ee:e5:4f:f2:97:14:5d:b7:93:4a:9a:
06:c1:5b:44:48:17:be:f5:f0:5b:18:41:61:34:31:a6:ff:2e:
29:57:fe:c6:55:ec:a8:d1:5b:b1:9f:ae:08:7c:a0:b6:b4:06:
f7:de:36:5f:df:95:91:32:fd:e9:da:b5:43:87:72:f0:e4:59:
e7:4e:47:50:02:3d:ba:c2:c6:20:7e:61:df:5b:c6:91:bb:24:
89:ff:55:cf:e1:8d:cb:28:bf:db:1a:30:f9:ab:be:1b:f9:61:
5a:0e:87:77:23:96:97:03:d3:98:50:21:c1:da:b4:c7:17:3a:
b4:79:28:65:3b:96:ec:b5:3a:b0:23:b4:3d:f2:a2:48:ee:e5:
a5:74:7e:c9:0b:7b:6d:9c:2f:0d:77:cf:e1:dc:1e:5e:e1:7e:
2e:da:58:31:7e:b3:e0:e2:d2:25:bc:bc:b5:e3:b0:3e:e6:07:
1d:67:dc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org