Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UQPr2OEeut18f5_3LYaef6FVJ7E.roa
File: UQPr2OEeut18f5_3LYaef6FVJ7E.roa (raw, json)
Hash identifier: u4aOZMm6PGwwKPvYmLKF9oMNQgm6QCUIW4RX/QI9YVA=
Subject key identifier: 51:03:EB:D8:E1:1E:BA:DD:7C:7F:9F:F7:2D:86:9E:7F:A1:55:27:B1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D45
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UQPr2OEeut18f5_3LYaef6FVJ7E.roa
Signing time: Tue 29 Sep 2020 09:54:23 +0000
ROA not before: Tue 29 Sep 2020 09:54:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3397 (0xd45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:23 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5103EBD8E11EBADD7C7F9FF72D869E7FA15527B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:55:94:d3:bf:80:ce:18:9e:34:72:ba:11:c9:
00:3c:0d:74:d2:52:ec:d7:00:3e:ed:13:35:a0:99:
f1:e0:c1:a6:9b:8f:4e:56:c3:22:e8:8d:7a:4e:bc:
13:f0:28:63:66:21:2e:13:57:7c:1c:85:5b:d0:04:
17:e0:bd:8a:3f:17:89:38:9f:fc:6f:f5:1c:4c:dd:
8d:11:ff:60:e1:a8:cb:85:04:e5:f0:a0:d5:ce:8b:
b8:d1:f3:1a:a3:fb:21:ff:1b:84:06:07:39:63:93:
8d:59:bf:91:d1:73:fe:87:58:03:67:33:68:5f:af:
d2:01:71:d7:c9:a2:22:f6:1a:65:1a:96:eb:c7:ce:
79:8d:f8:b2:a7:c9:f7:93:55:71:43:be:ef:3a:31:
3d:bc:35:5d:04:af:db:05:cb:da:7d:95:03:29:1a:
c9:85:9f:64:9b:00:d9:ce:45:20:41:1f:9d:9b:cc:
f3:e4:6b:1b:ab:19:6a:bf:d3:b9:f7:53:16:a4:71:
6b:40:34:e0:ca:22:7e:fa:0a:aa:ef:ee:99:d2:ff:
79:20:7e:c7:8b:35:52:5c:90:87:02:3d:f9:85:88:
ad:09:f9:96:50:be:6c:3c:61:65:c3:12:3a:44:6a:
4f:6d:71:b8:71:c5:68:46:2f:e0:f5:a1:0c:42:0e:
91:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:03:EB:D8:E1:1E:BA:DD:7C:7F:9F:F7:2D:86:9E:7F:A1:55:27:B1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UQPr2OEeut18f5_3LYaef6FVJ7E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:2b:ae:2c:29:54:c7:11:43:ba:c4:bb:2e:95:54:34:4c:3e:
3b:dc:ee:63:13:ec:ee:ec:23:e2:5d:e5:aa:ab:70:22:17:1a:
c1:dc:78:c8:5a:e9:26:6f:5f:48:c0:d2:8e:5e:33:41:b4:22:
90:52:80:f1:73:f2:4b:d5:64:c6:29:44:04:e1:81:ec:ab:b7:
05:9a:b8:0a:d0:ff:11:42:7e:9f:72:58:f4:66:59:d6:ed:93:
22:a0:67:d5:ee:05:46:d7:bc:af:ff:d0:68:50:c0:62:ef:3c:
03:09:cc:a3:fb:46:8b:9b:bb:46:df:19:11:c6:97:12:74:26:
0b:75:65:c1:74:af:8b:36:ca:a0:f9:d8:0d:4d:c2:88:4f:08:
73:e0:9a:70:07:62:43:64:c0:7d:da:7e:a9:24:cc:15:10:b2:
ec:6b:c1:c2:bf:cc:ca:00:8a:f9:28:63:d2:91:96:03:c7:50:
2a:bf:39:b6:47:7c:30:4f:e1:be:8e:af:73:52:98:8b:69:b5:
3e:4e:5c:e9:d3:e0:08:00:25:0c:84:de:20:28:6e:e8:c2:82:
32:ae:bc:dc:49:f7:ff:78:13:ea:75:98:62:f4:b9:06:38:5b:
40:0a:7f:f1:e3:90:97:42:f5:0f:b4:85:4a:7f:a1:c0:65:a7:
e0:f2:19:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org