Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WQTm-VU5yPGm28kDsGNcPWdAYOQ.roa
File: WQTm-VU5yPGm28kDsGNcPWdAYOQ.roa (raw, json)
Hash identifier: KP4CX9sAZUaYQL992yeabvyTZozuyz7iCXxC4zG6EEc=
Subject key identifier: 59:04:E6:F9:55:39:C8:F1:A6:DB:C9:03:B0:63:5C:3D:67:40:60:E4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B36
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WQTm-VU5yPGm28kDsGNcPWdAYOQ.roa
Signing time: Wed 29 Sep 2021 02:46:18 +0000
ROA not before: Wed 29 Sep 2021 02:46:18 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6966 (0x1b36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:18 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5904E6F95539C8F1A6DBC903B0635C3D674060E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:5e:35:72:b1:96:86:35:99:df:a9:2c:c9:
14:25:37:b2:03:bd:60:01:1d:15:6a:c1:28:df:ce:
74:8b:a2:b3:42:89:4c:d5:cf:b5:9e:8d:93:e6:5d:
be:a7:ed:32:3c:30:ae:1e:c2:d8:34:c5:86:67:f5:
40:08:e3:2d:a1:54:f5:18:ef:55:f3:f1:44:a4:41:
d2:5d:9b:39:5a:ea:ba:22:1e:28:8d:f0:28:8d:ec:
a0:5e:3b:15:b2:af:99:d2:b6:6c:f3:ad:50:8d:44:
38:26:52:e6:09:76:dc:f0:f6:66:d7:b3:f7:cc:a9:
fd:f6:f3:88:d2:ad:96:ed:2d:c9:a7:fb:5a:44:2e:
a8:c5:2c:ed:97:aa:dd:5c:46:ff:06:bc:5c:a2:c3:
08:d8:7f:b3:4a:8c:6e:82:83:f2:77:dd:8f:57:34:
a3:bb:77:e7:70:4f:d2:a1:c2:75:e7:8a:7f:e2:5a:
f9:75:e9:1c:26:1b:6c:1c:75:55:83:ab:ed:c4:f0:
69:32:2c:7d:28:41:06:4c:29:40:c2:52:ef:86:3a:
29:78:81:fc:01:b4:7c:4b:ff:68:ae:55:11:d2:2e:
b5:8b:90:08:02:77:1b:31:62:25:58:35:65:ce:b5:
78:04:a3:96:57:7c:6e:4f:6a:70:34:ee:23:93:91:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:04:E6:F9:55:39:C8:F1:A6:DB:C9:03:B0:63:5C:3D:67:40:60:E4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WQTm-VU5yPGm28kDsGNcPWdAYOQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.88.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:a8:9a:83:ec:90:bd:1a:03:57:ab:38:70:c4:97:66:15:7e:
55:b2:62:9c:53:8a:2a:30:ac:d3:ac:40:0f:ef:e6:5f:83:41:
c2:eb:b6:b6:9b:94:b1:5e:52:4c:89:a2:db:3d:fa:53:8e:a7:
d7:22:77:26:10:78:61:83:f3:53:64:b1:f0:d1:21:75:23:ff:
ed:9b:51:72:0c:97:13:cb:7c:ae:a4:d3:dd:3e:02:09:27:35:
c1:4b:06:83:2a:05:d3:d0:7f:83:65:57:5a:03:63:f7:a5:17:
3a:6c:6c:2c:16:88:06:a7:77:3a:b0:c2:d2:c2:a0:db:94:73:
23:62:6d:d1:88:e2:d5:b1:25:1d:0f:92:82:01:6a:a9:8f:c4:
44:19:6e:82:10:a3:94:1a:5e:79:9e:3c:ca:63:fa:61:3d:96:
1f:e2:4a:6a:58:0b:c8:49:d5:17:5d:cb:b3:62:df:b1:ba:48:
01:f7:d3:9c:cd:ab:2f:4e:15:7b:61:5f:1c:9a:d3:34:1b:fc:
6f:61:12:cf:a5:5a:e8:94:db:7a:27:38:f4:5d:ee:6e:1e:40:
f9:2f:56:f4:7e:07:2f:ee:f6:fe:6f:b8:31:5f:19:5b:6f:e3:
35:61:c9:bc:71:c8:83:af:49:73:ee:b9:f6:f8:ec:3b:8e:43:
eb:27:33:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org