Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cQ01E8jjKZ9SW07Vma4iNmBXQXs.roa
File: cQ01E8jjKZ9SW07Vma4iNmBXQXs.roa (raw, json)
Hash identifier: mY6cOAckI4DsOKWx+PE+gxCgMJ8bx2Wcfr4Zi8NXnoE=
Subject key identifier: 71:0D:35:13:C8:E3:29:9F:52:5B:4E:D5:99:AE:22:36:60:57:41:7B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cQ01E8jjKZ9SW07Vma4iNmBXQXs.roa
Signing time: Thu 15 Sep 2022 02:54:08 +0000
ROA not before: Thu 15 Sep 2022 02:54:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:54:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=710D3513C8E3299F525B4ED599AE22366057417B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:72:16:3d:01:a6:69:c4:29:35:ad:f0:02:
dd:2d:6e:db:ce:da:cf:b1:b8:29:98:48:46:fe:f7:
80:d1:24:e3:dd:86:37:18:85:d8:69:63:c0:cc:9b:
19:5e:74:65:65:01:1b:71:ee:7a:07:68:84:5a:18:
7d:13:0b:ac:c9:10:bf:4a:7b:41:35:d3:ce:61:dc:
fa:f7:d1:b4:7d:b5:67:27:45:b9:44:ef:74:78:5a:
54:da:a9:12:d8:00:71:ae:2a:47:70:02:c9:52:52:
71:c3:b4:36:27:ac:4e:03:45:91:47:25:35:3e:77:
7d:9e:0b:01:34:b0:a9:47:c5:1f:7e:c0:18:7e:d8:
a2:5f:11:30:d9:8e:4e:f8:5e:65:87:ad:58:fb:49:
07:ef:1b:7f:16:9b:ef:98:20:e4:89:5e:7b:ec:5a:
34:56:98:ba:14:a6:16:2d:5a:3c:84:13:cb:cd:f2:
73:e4:58:ca:3a:53:9c:f3:f5:11:85:ab:d1:66:41:
b1:92:ae:50:c4:d7:dc:eb:b6:6e:10:4f:42:4f:46:
e8:bc:d5:4c:8e:ec:4a:bf:5e:61:fa:06:24:36:45:
1b:90:b7:34:30:31:e5:76:9e:1e:b0:3f:6c:59:6d:
f8:44:1f:32:1b:c7:67:e1:b4:33:6e:72:f4:4e:56:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0D:35:13:C8:E3:29:9F:52:5B:4E:D5:99:AE:22:36:60:57:41:7B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cQ01E8jjKZ9SW07Vma4iNmBXQXs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.224.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:ac:fa:ef:7a:b6:67:c9:76:a9:58:3e:e2:71:89:9e:ae:2b:
61:cf:bd:b4:8d:0f:76:0d:1d:11:38:11:29:23:ef:a6:16:e4:
92:6c:e0:dc:ab:ec:41:6c:03:b4:60:3e:7e:0f:d9:17:8a:ef:
3b:f5:80:7e:2c:b3:50:67:fe:8e:6a:ed:f4:5f:52:21:70:7f:
9a:ad:42:14:33:58:1b:2a:22:44:ca:a6:d2:2b:fb:ae:40:45:
61:97:3f:71:8e:c8:a1:44:3b:65:d1:ee:79:97:67:8a:b6:fa:
4f:e5:28:e0:01:96:89:92:c8:c8:92:a9:13:f4:70:67:25:f4:
0b:ec:bf:8c:df:a0:66:be:7c:37:d2:35:fb:96:c6:43:49:3e:
64:da:52:68:cf:63:c7:5c:9f:54:80:aa:79:77:87:c5:fb:b0:
c0:c1:6b:87:72:33:6a:db:32:72:f3:87:17:8b:af:f2:8b:9d:
89:36:04:fc:f7:24:f4:a4:f5:9b:30:35:58:62:5b:62:60:0e:
04:2b:e0:b9:01:b9:69:c2:e1:fd:33:81:ea:99:0d:17:c8:e3:
15:6a:ed:57:28:e1:2c:c1:e7:72:9e:31:33:cc:74:c3:74:66:
ea:06:df:26:33:30:29:9c:4c:22:ba:26:18:ca:39:a2:ca:77:
68:5d:95:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org