Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQiC-vJ6tEOHovYgWoc4bRXWcg4.roa
File: RQiC-vJ6tEOHovYgWoc4bRXWcg4.roa (raw, json)
Hash identifier: OFWVSJ63lECxqfQ9jJANpFQl1Z8XEgK1lm7H1UXFWhs=
Subject key identifier: 45:08:82:FA:F2:7A:B4:43:87:A2:F6:20:5A:87:38:6D:15:D6:72:0E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29D9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQiC-vJ6tEOHovYgWoc4bRXWcg4.roa
Signing time: Fri 01 Sep 2023 10:07:10 +0000
ROA not before: Fri 01 Sep 2023 10:07:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10713 (0x29d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=450882FAF27AB44387A2F6205A87386D15D6720E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:9e:5b:4c:56:9d:4b:68:23:c7:64:a0:cc:
2e:79:2f:5c:f1:28:1f:16:eb:36:ee:be:32:5d:f1:
5f:0b:40:a5:0a:08:a7:5c:60:1c:36:d0:6f:2e:c0:
0f:96:2d:e6:98:41:7b:dd:47:7f:91:60:e3:21:59:
51:f1:3b:72:3c:fb:8a:f8:cc:f3:08:ab:90:ac:7f:
8a:0e:d5:a7:46:5b:34:7c:88:b5:40:bb:48:90:e0:
c3:38:e7:0d:5f:86:4d:e8:61:74:bd:a4:e9:fd:09:
96:b0:54:4f:cb:b8:7c:29:79:54:a6:95:8d:61:6b:
ba:1b:18:ff:68:73:00:64:67:4e:85:c2:f3:fc:d9:
77:8c:cb:76:6f:09:86:ae:85:a6:b3:8d:08:06:74:
6a:5c:d5:03:3c:5f:f6:78:28:fc:d7:58:c8:d1:e2:
82:6e:8d:4b:c3:1b:ed:e2:bb:f6:1d:d0:d9:8a:46:
4f:47:54:84:53:9d:0f:66:01:b5:9d:94:62:c9:65:
4e:02:78:ec:7d:39:7c:9d:34:63:cb:fe:b9:c4:21:
63:6d:3a:7b:ce:d7:9d:40:5c:34:de:71:5d:62:bb:
13:6a:53:b5:2e:4c:10:91:08:3f:2c:78:fb:d1:3b:
99:45:b1:68:6e:10:22:b3:39:dc:1e:77:ad:bd:2c:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:08:82:FA:F2:7A:B4:43:87:A2:F6:20:5A:87:38:6D:15:D6:72:0E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQiC-vJ6tEOHovYgWoc4bRXWcg4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.232.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:84:39:16:43:d3:2e:c7:cd:f4:87:42:92:14:9b:2e:07:4e:
b8:ec:c1:2b:a8:48:ea:d4:ba:f0:42:4e:64:b3:7b:09:e9:20:
04:0a:c7:27:cf:ff:36:47:bc:65:cf:94:4f:8a:b6:6d:c8:c3:
8c:72:7f:75:6d:98:40:17:09:4a:f4:32:13:3f:7b:dc:e8:d0:
4d:95:a0:87:f6:16:e0:97:0f:0c:12:52:1d:97:35:c4:33:d4:
fc:df:29:34:49:b8:3e:25:da:c4:c6:f4:93:10:f1:9d:82:b1:
43:a6:52:07:d6:02:4b:8f:e3:81:d7:59:c7:74:88:ed:ed:13:
2b:80:5c:5f:5b:75:22:18:0a:48:cd:18:af:78:55:ca:04:dc:
9d:0a:cd:c2:53:ab:90:6a:44:43:a2:26:b0:c1:c6:fd:d9:b3:
84:14:9d:ec:a3:3e:d1:16:a4:2c:0a:6a:23:dd:ed:50:9f:59:
0f:b3:30:3e:c7:91:af:36:f6:69:f1:e3:ce:17:07:09:be:7e:
06:d5:51:2f:c5:0b:78:97:6e:d3:ca:25:47:a2:4f:01:b0:7d:
a3:28:e7:4a:9e:7b:3e:50:69:25:4e:56:9b:95:10:50:70:f8:
86:9a:59:5f:a3:ad:55:2a:f1:29:96:b2:91:69:38:41:8c:04:
01:34:f4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:23 2025 by rpki-client