Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qq5Rm2B5sI2ZKD4_6B3OIreVmgI.roa
File: Qq5Rm2B5sI2ZKD4_6B3OIreVmgI.roa (raw, json)
Hash identifier: iHK2su+VTjGJ630N57wuM4d7SyoLb7NuYZni6AjytDA=
Subject key identifier: 42:AE:51:9B:60:79:B0:8D:99:28:3E:3F:E8:1D:CE:22:B7:95:9A:02
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2275
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qq5Rm2B5sI2ZKD4_6B3OIreVmgI.roa
Signing time: Fri 25 Nov 2022 04:41:11 +0000
ROA not before: Fri 25 Nov 2022 04:41:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8821 (0x2275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=42AE519B6079B08D99283E3FE81DCE22B7959A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:f1:b8:42:21:f1:e6:2e:0d:13:41:ca:31:
f4:fe:ba:ef:60:10:02:9b:91:e5:9a:c8:f1:06:06:
f3:b0:1b:cd:7a:d8:fb:60:3d:48:30:19:a2:74:e5:
ec:e1:ff:23:93:8b:02:88:63:63:b1:b3:01:d8:c4:
9d:ba:da:0d:89:cd:4b:7c:50:35:ae:fb:69:da:fd:
8c:c2:12:95:e5:32:63:37:21:3a:23:98:7b:61:5e:
dc:f3:25:81:84:f4:fd:ef:8a:c7:53:38:c3:58:8c:
a6:ee:a7:7e:a4:b3:cf:c5:2a:d0:99:9a:b1:72:3a:
1b:01:8b:8a:e5:fc:50:3b:a5:44:61:e3:6f:55:6b:
d7:67:99:b0:c8:13:70:f9:79:c1:a0:28:b0:ff:ae:
d8:5a:61:71:de:5a:a0:b5:2e:d9:5a:f5:1a:fa:d3:
1a:d3:9f:de:44:4c:a5:92:4c:ac:84:e3:2d:16:ff:
33:4d:02:44:e0:30:7f:a0:ff:b3:dc:2a:86:fb:66:
8c:52:f4:62:42:66:c2:29:6b:6b:f5:d9:a5:62:c6:
dd:5d:15:a0:68:c2:85:1e:8a:e7:98:e0:71:98:e1:
c7:0d:39:c4:82:20:04:2d:1b:52:79:50:32:c8:d2:
97:1d:5b:e7:c6:ae:72:72:e6:08:e5:bd:a6:5b:7a:
9d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AE:51:9B:60:79:B0:8D:99:28:3E:3F:E8:1D:CE:22:B7:95:9A:02
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qq5Rm2B5sI2ZKD4_6B3OIreVmgI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.224.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:1f:ee:ec:2b:7d:99:58:19:ba:61:7e:b8:6c:66:2c:ae:33:
5c:74:cd:e5:4a:1a:98:a5:9c:cc:1a:eb:21:ef:7a:6a:e6:92:
eb:66:0d:07:da:4a:7b:56:24:c9:6d:24:c0:57:60:cf:b6:9e:
43:27:6d:d5:dc:d2:de:39:78:66:73:51:ce:63:da:f2:f5:9a:
2c:b2:dd:99:9b:3e:66:df:1e:ff:13:da:92:4f:fe:9a:f9:cb:
b6:ce:2d:28:32:b2:f2:ca:e6:cf:c3:90:28:d5:a2:42:46:33:
02:bb:6a:a1:cd:d9:80:5c:72:2a:9f:49:06:3f:4f:a1:b5:c7:
2e:62:df:1e:5c:b6:fa:bf:9c:8a:82:91:c2:43:b2:73:bf:e2:
6c:46:94:1f:28:8d:a4:5e:e6:4f:8e:d6:fe:0c:29:71:29:07:
b3:c3:23:23:43:56:c5:52:a7:2b:ca:2a:04:7b:f6:67:b2:78:
fb:fa:04:11:d7:51:d9:1d:7b:69:ba:75:ed:09:f7:33:d8:33:
58:e7:64:12:a0:59:b6:99:6f:8f:e9:20:65:23:c9:a5:5f:f0:
83:9f:7f:89:2c:18:8f:56:e5:e0:9f:25:9a:93:39:d0:30:f7:
55:0b:a8:7c:41:bb:64:3a:b4:55:14:57:7a:31:10:ca:a7:60:
91:ab:72:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org