Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qq5RTxlUp2BZj4ypdcGw6UWMscA.roa
File: Qq5RTxlUp2BZj4ypdcGw6UWMscA.roa (raw, json)
Hash identifier: YqxB7G7plroIhoxQjg0/qlY8DM1TknN/eBbxa1Ctgio=
Subject key identifier: 42:AE:51:4F:19:54:A7:60:59:8F:8C:A9:75:C1:B0:E9:45:8C:B1:C0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1863
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qq5RTxlUp2BZj4ypdcGw6UWMscA.roa
Signing time: Sun 07 Feb 2021 12:28:54 +0000
ROA not before: Sun 07 Feb 2021 12:28:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6243 (0x1863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:28:54 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=42AE514F1954A760598F8CA975C1B0E9458CB1C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:79:f1:07:c0:ef:1a:15:8a:5c:6d:a1:a1:
fa:13:ed:71:db:ff:03:40:c6:49:17:1e:34:b7:22:
01:94:c9:2e:5a:ec:d7:9e:2d:6a:8d:d8:8f:b9:5f:
31:d3:0e:c0:cd:47:f5:8d:63:0f:aa:08:51:7d:3f:
c5:04:74:ef:07:f5:e3:f7:bd:3e:ce:d5:19:8c:e2:
69:c5:a1:02:81:52:7d:35:13:d1:ef:3a:a0:af:c9:
7c:44:0b:04:da:fd:69:b7:5c:a4:4e:57:a8:6f:19:
4e:b4:46:82:5b:c7:ff:e5:8e:85:87:6a:5d:51:8e:
b4:7c:0d:d9:ad:7b:ae:5f:45:b5:9d:69:64:7e:34:
ee:df:fd:3e:80:a1:82:e2:f6:b1:49:fb:95:8e:84:
ea:71:22:a6:1a:80:03:96:5f:33:e2:11:fe:f5:38:
ac:e8:3a:03:22:28:e9:f4:be:e7:50:48:4d:33:0c:
0f:44:7d:7b:5b:92:47:91:b1:b5:8f:10:26:80:50:
ec:20:13:be:c9:04:6f:ed:b7:15:1a:7b:79:d8:0e:
fe:c4:4b:7a:f2:bb:61:1c:8d:7c:e3:4b:ef:08:20:
c7:ed:76:e7:55:ca:79:b0:f1:f9:d3:8b:ee:f8:b8:
11:47:cd:99:97:3e:92:de:4c:6f:d7:be:32:2c:b4:
43:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AE:51:4F:19:54:A7:60:59:8F:8C:A9:75:C1:B0:E9:45:8C:B1:C0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qq5RTxlUp2BZj4ypdcGw6UWMscA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.128.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:43:92:ca:ab:a2:09:8f:4f:a7:a8:94:99:09:da:e5:43:94:
a4:34:54:ea:62:0e:1d:e1:81:f6:ec:c0:11:72:a9:c9:c2:45:
7a:40:75:cd:a9:dc:18:dd:9b:ad:04:0e:27:fb:e1:34:e3:ce:
bb:0b:bb:56:31:8e:72:32:00:7a:9a:00:05:b2:cf:d1:88:5b:
46:f6:ef:b6:4e:34:05:10:7a:d5:e1:00:53:77:96:b1:b2:71:
77:2d:3f:43:ea:5f:63:d8:f1:c1:1f:a4:66:40:6e:16:88:c2:
42:0a:18:6d:37:f4:40:1b:52:6c:e8:84:56:c8:38:37:b0:a6:
9c:5d:82:d9:f7:c8:04:6f:20:c2:71:68:77:3d:d8:fd:49:94:
36:c3:36:ef:73:d3:22:2f:9a:6b:30:53:bc:98:65:ac:a6:f9:
46:98:59:61:87:de:5a:09:f7:b6:31:d4:f8:3a:7b:49:26:24:
be:cf:7c:9d:07:35:20:cf:81:2c:31:0f:c9:38:c4:51:1d:ba:
14:20:71:55:11:e3:82:f5:e8:de:9d:7c:c8:b1:bf:fe:35:a5:
be:f9:48:d4:3c:5d:e7:45:10:90:fa:47:ba:dc:96:cf:e9:f4:
43:aa:4a:0f:68:27:59:3c:28:ba:d8:6a:25:72:15:d6:5f:84:
0b:d8:89:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org