Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QXykDf0zzh3-8W2hLnV6nMxrCY8.roa
File: QXykDf0zzh3-8W2hLnV6nMxrCY8.roa (raw, json)
Hash identifier: ahLqqe7Qd9S5zFqzXlrezatVEoyMf4NsENQ8XPIRaOU=
Subject key identifier: 41:7C:A4:0D:FD:33:CE:1D:FE:F1:6D:A1:2E:75:7A:9C:CC:6B:09:8F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QXykDf0zzh3-8W2hLnV6nMxrCY8.roa
Signing time: Thu 15 Sep 2022 02:45:53 +0000
ROA not before: Thu 15 Sep 2022 02:45:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=417CA40DFD33CE1DFEF16DA12E757A9CCC6B098F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:21:5c:8b:1a:e0:c5:a3:24:ee:61:8e:09:
20:c7:3d:6c:d9:38:67:b2:e1:30:26:b1:bc:0f:00:
61:44:0d:48:e2:c1:38:91:b7:71:5e:e3:41:b0:be:
6d:a1:e4:65:07:07:27:20:7a:78:1f:36:04:31:0a:
7a:0e:94:7f:5e:86:9e:cf:5f:3c:39:4f:5f:2f:38:
cd:88:35:27:3d:21:dc:2a:1a:0a:22:ba:a6:91:e3:
54:24:32:de:89:bb:f3:f0:0e:62:f5:8a:5a:47:bd:
8a:f6:ba:fc:96:e2:0c:22:19:89:ee:ca:45:45:41:
65:9d:6f:fa:59:f1:1e:3e:fe:a1:3a:12:4c:4c:b2:
f9:bb:b9:21:6c:37:ae:ba:92:a2:37:51:93:c2:95:
23:5c:66:58:3f:f2:0c:c5:dd:ca:64:d1:f4:de:12:
f6:76:4a:7d:b5:08:2a:5c:57:7c:ea:ef:9c:38:d6:
da:c7:d5:94:37:ac:03:bc:43:06:c6:0b:b3:7e:d0:
4b:dc:be:19:ad:42:fb:b2:3c:15:4f:1e:d8:95:74:
70:a1:45:e8:0f:03:71:2e:c1:b5:b5:0e:ef:fe:f3:
c9:6d:c7:29:94:0d:1d:1c:82:91:86:93:20:d9:24:
ee:1a:0b:97:ad:06:df:7d:4a:b8:6b:e0:1a:2f:94:
4f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7C:A4:0D:FD:33:CE:1D:FE:F1:6D:A1:2E:75:7A:9C:CC:6B:09:8F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QXykDf0zzh3-8W2hLnV6nMxrCY8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.160.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:5a:8a:44:c1:94:fe:e1:7e:75:b2:1e:b1:d1:e8:ee:c3:77:
40:66:84:20:52:9a:45:80:d4:df:ec:2e:41:3d:bb:fb:fc:36:
16:54:1a:2f:e3:19:5a:32:e5:e8:47:a6:79:f0:93:e0:38:6f:
f1:59:f2:97:a6:3c:91:12:eb:98:87:06:78:72:9c:e1:4c:77:
d0:85:6a:85:7a:f6:ad:c5:5b:9a:c3:8b:e4:73:13:0e:da:6d:
15:df:b7:91:1d:96:59:bc:77:8b:f0:cd:df:ce:46:44:d2:bf:
8d:c6:80:ae:d0:e2:92:a9:2d:1b:e0:9b:55:86:f2:d7:4e:4a:
06:4e:d7:c6:f5:a8:1a:bf:27:11:5a:0b:e2:49:3a:01:2c:2d:
d4:6f:23:eb:f1:94:ec:0f:e3:91:fd:da:bc:dd:75:af:7d:09:
14:77:19:89:9e:86:04:49:ec:6a:cc:dc:9e:42:2b:9a:4d:c6:
a4:5a:80:15:8c:fa:78:aa:f1:a9:47:45:72:cd:41:70:8b:85:
d9:a6:65:6f:fe:42:cc:28:3a:3e:f3:fe:b5:47:39:11:58:60:
f6:61:30:c2:25:7f:25:e1:c1:27:30:dc:a7:a9:96:fc:6e:02:
bf:03:e4:12:dd:e5:37:f3:c4:6e:e0:8d:ff:5e:24:7a:fb:b7:
b5:a7:e0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org