Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QeeuL-ANkGWbDu0BY9OsyK1uaUo.roa
File: QeeuL-ANkGWbDu0BY9OsyK1uaUo.roa (raw, json)
Hash identifier: JwG2OmEvfTfwTycXPWL47zfjSdBRWOk7WCmrF7xEAOI=
Subject key identifier: 41:E7:AE:2F:E0:0D:90:65:9B:0E:ED:01:63:D3:AC:C8:AD:6E:69:4A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 223F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QeeuL-ANkGWbDu0BY9OsyK1uaUo.roa
Signing time: Fri 25 Nov 2022 04:40:56 +0000
ROA not before: Fri 25 Nov 2022 04:40:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8767 (0x223f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=41E7AE2FE00D90659B0EED0163D3ACC8AD6E694A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:78:42:3d:16:8e:0b:8a:c3:33:4a:8e:87:0f:
4d:62:a6:5a:27:88:96:eb:f3:dc:42:8d:c0:da:bc:
e7:61:d9:7c:33:f1:f1:e2:2b:e5:d1:c0:fc:c9:a4:
df:4a:15:0e:d4:1c:6e:86:43:88:2a:77:25:5f:66:
49:72:3e:b5:65:4b:d4:0a:cd:66:8c:04:3b:1d:f1:
58:5d:01:dc:f5:b3:98:e1:a1:c5:d7:cd:4e:67:e8:
74:74:80:12:34:30:3c:63:4f:3c:c6:55:c8:c0:14:
88:1f:30:68:20:fd:61:3f:9a:dd:19:d1:fa:a7:a9:
77:8a:a2:60:06:b1:90:64:f3:11:1e:1b:65:ab:a3:
e4:af:80:e2:fe:eb:f2:33:a3:8c:bf:b7:74:ea:67:
3c:0a:6a:4c:c1:05:41:84:f2:d8:29:0f:57:53:35:
6e:28:2c:70:ad:85:24:72:c4:25:b6:00:9b:42:2a:
2b:61:25:7f:d9:f2:af:69:2e:f5:2d:a9:63:91:35:
23:08:ea:8b:1f:17:72:5f:f1:9a:dc:f8:48:15:1c:
45:57:8c:d0:8d:fe:05:0c:fd:fe:a4:2c:c4:2d:7c:
b7:00:1b:ba:67:c9:8e:9f:2a:ff:ae:24:e2:fc:c9:
51:04:82:9e:72:3c:9b:7b:db:c6:db:e4:b4:cb:5d:
6b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E7:AE:2F:E0:0D:90:65:9B:0E:ED:01:63:D3:AC:C8:AD:6E:69:4A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QeeuL-ANkGWbDu0BY9OsyK1uaUo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
60:a3:87:51:af:16:02:6c:63:65:aa:83:c1:99:6d:a1:bb:95:
31:ec:f0:69:17:46:93:33:c2:44:37:29:50:c2:e6:9d:a4:e5:
05:20:90:48:cd:58:d8:3b:bf:65:13:1a:63:c7:b3:c5:3c:4b:
ae:47:36:15:9a:fd:e6:6a:8d:11:b8:10:5e:5f:af:a1:70:d2:
f5:ec:8f:83:d2:c5:e0:36:e6:0d:df:53:f8:09:fe:61:77:0f:
6a:0e:8f:07:a0:b1:01:37:0e:62:a2:aa:cb:9a:e5:ca:48:75:
82:97:af:32:54:8f:cc:b9:d7:2d:ed:44:73:de:80:88:12:b1:
b2:79:69:7b:61:af:e0:4e:d4:c1:d8:6b:51:e1:11:0e:02:63:
3c:38:c9:98:72:71:49:c5:1a:79:c7:49:c8:35:8a:27:42:01:
e0:25:ac:68:34:68:19:0b:18:10:08:8e:33:d8:c1:23:50:c2:
1c:07:25:05:c2:ce:76:61:49:fa:46:e1:07:19:7e:05:81:7e:
7e:a6:7b:6b:33:4e:f1:50:03:aa:91:c5:a7:51:be:93:bf:50:
ea:3b:6c:62:e2:0e:de:c7:1f:86:03:22:6a:24:e7:78:5b:47:
00:76:63:9f:98:0f:b5:0c:6d:14:81:84:33:c6:a9:03:29:2b:
74:5d:1c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org