Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QhV7GhTpKVM0FXC5J71OX1UxPUA.roa
File: QhV7GhTpKVM0FXC5J71OX1UxPUA.roa (raw, json)
Hash identifier: 0GaAr+LjSq2amLXfRHfRUJ5pj8iTro6tq17Snh1pjvw=
Subject key identifier: 42:15:7B:1A:14:E9:29:53:34:15:70:B9:27:BD:4E:5F:55:31:3D:40
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F3A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QhV7GhTpKVM0FXC5J71OX1UxPUA.roa
Signing time: Tue 29 Sep 2020 09:56:40 +0000
ROA not before: Tue 29 Sep 2020 09:56:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 103.224.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3898 (0xf3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:40 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=42157B1A14E92953341570B927BD4E5F55313D40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c9:e3:1c:a5:15:f1:b9:d0:92:5e:f8:bb:a1:
60:31:aa:da:c8:52:5c:41:49:e1:c7:44:a9:7b:c6:
1f:65:06:98:36:2b:d3:e2:2a:c2:6a:73:a2:68:4d:
d3:52:c0:2f:b9:1d:a8:7f:e7:f4:47:e4:02:35:32:
3f:51:43:84:39:49:f2:0c:9e:58:b8:11:50:89:cc:
62:98:81:18:bf:db:e9:5e:de:e7:94:e6:09:bf:65:
be:75:c2:00:2d:0a:2b:18:47:89:3c:f3:d9:7e:33:
16:af:31:d4:84:81:be:5c:30:a7:42:5c:19:8e:c7:
81:4a:ce:82:27:6d:e5:4c:90:47:36:f6:48:9b:9e:
a1:76:2c:d4:f0:fc:1e:51:f5:4a:02:ee:8e:d5:49:
c9:76:15:c7:e7:b8:53:28:4e:21:95:c6:c6:7e:da:
2a:53:8e:2a:31:5f:8b:ea:61:f4:af:b8:56:74:0d:
ae:3b:3e:1b:b5:0d:85:b0:8a:30:8c:8e:8e:d2:9b:
14:2e:84:09:70:f2:4e:27:58:5a:75:4b:43:4c:06:
1f:de:91:4a:69:cd:b1:d1:cf:49:b0:26:be:b1:c3:
f0:e3:bc:15:c6:94:88:45:33:a1:10:3d:02:e6:e7:
2c:c0:ef:ba:cb:98:e1:80:01:b5:44:c7:e4:eb:26:
33:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:15:7B:1A:14:E9:29:53:34:15:70:B9:27:BD:4E:5F:55:31:3D:40
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QhV7GhTpKVM0FXC5J71OX1UxPUA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.195.0/24
Signature Algorithm: sha256WithRSAEncryption
90:5f:5a:c3:bf:45:55:22:d5:57:58:cf:3a:b6:a4:d9:a4:32:
21:47:e6:e3:4e:4c:58:7e:18:56:d2:8c:24:ee:33:42:0a:40:
86:41:b0:21:1a:71:f2:fe:8e:f4:e6:b3:4c:d3:c2:f9:c8:12:
b8:b2:a4:8f:7b:ce:62:55:1d:4b:82:0a:cf:bc:12:a0:c7:1b:
73:bc:80:dd:4a:84:85:9b:4f:c8:dd:9b:53:d4:3b:66:fa:fd:
d4:10:78:9e:58:b6:e0:25:54:b2:ae:9e:5e:f0:96:db:9d:31:
f1:86:af:17:c4:da:de:d4:35:30:65:4d:ee:0b:9c:bc:bf:4e:
a8:94:64:8f:1e:6f:df:d3:11:57:f8:39:40:cc:6d:f5:59:b8:
24:1d:c0:97:7e:c6:4c:e3:16:3f:bb:1c:7e:95:5d:30:6c:52:
07:bd:cd:44:e7:ca:a7:e6:6a:0a:94:ef:21:bc:71:60:f0:9d:
4c:57:6c:63:77:0f:b7:2c:a3:4a:38:c3:0a:37:51:9e:68:63:
98:75:f7:26:5e:fc:0d:0c:85:3f:bc:78:b5:21:68:1b:03:e8:
78:81:a6:62:97:ba:06:6c:01:98:f1:a6:86:03:05:48:15:b5:
90:ef:d9:99:36:63:31:e1:10:04:61:24:85:bd:91:68:93:56:
e3:82:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org