Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fQU2_LHcvrUBAFRscpxeI-QOID8.roa
File: fQU2_LHcvrUBAFRscpxeI-QOID8.roa (raw, json)
Hash identifier: J+JyVDogC5aB4DyGNrlzGi2gInLSNXk7WkcUqFwI134=
Subject key identifier: 7D:05:36:FC:B1:DC:BE:B5:01:00:54:6C:72:9C:5E:23:E4:0E:20:3F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CDA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fQU2_LHcvrUBAFRscpxeI-QOID8.roa
Signing time: Wed 29 Sep 2021 02:48:18 +0000
ROA not before: Wed 29 Sep 2021 02:48:18 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7386 (0x1cda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:18 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7D0536FCB1DCBEB50100546C729C5E23E40E203F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:da:f2:25:fb:f4:45:44:02:8c:64:47:67:
c8:ef:ab:35:31:a9:b9:0a:25:36:cb:23:5c:88:58:
c1:b7:2a:6a:44:6f:87:e0:8f:cc:18:be:20:81:ca:
c6:f6:27:1d:51:10:32:a4:6a:60:a0:3d:b3:39:ad:
a0:02:6f:8b:57:7e:17:a7:c9:5f:2e:be:cc:12:28:
bb:78:ae:16:18:c1:9f:af:f3:aa:ae:e6:e7:fe:16:
42:f3:4b:97:dd:7e:d3:e5:0d:78:8a:de:7a:57:ae:
74:03:87:09:df:a1:e6:b7:57:29:d2:ed:53:65:02:
94:f1:9f:d4:68:22:ac:be:9e:ff:98:4c:1c:58:f1:
96:d7:02:64:ba:0a:33:1b:ac:2a:56:6d:83:f0:ec:
60:2e:2d:72:78:18:24:8f:cb:1d:b9:a7:ce:94:05:
ff:48:c5:e3:b4:23:4e:be:2d:3e:2b:26:e8:56:e8:
e1:60:dc:22:f6:a8:0e:ad:c1:02:ca:e0:e3:57:19:
f3:94:78:b2:47:00:ef:94:ed:36:31:42:10:ea:0b:
b4:67:9f:16:08:16:f6:cd:f3:0f:35:d0:25:a8:c5:
4f:43:71:a2:83:fc:93:56:70:1f:ab:a6:27:0d:8a:
85:4a:b4:d8:8d:00:42:54:17:99:cd:49:f0:5c:5b:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:05:36:FC:B1:DC:BE:B5:01:00:54:6C:72:9C:5E:23:E4:0E:20:3F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fQU2_LHcvrUBAFRscpxeI-QOID8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.136.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:46:57:bf:a7:ff:30:51:87:0f:4f:c2:a4:df:8c:fb:4d:5b:
21:b8:ce:fc:bf:96:a6:83:c8:a9:47:01:4e:38:a6:28:3f:73:
64:f3:56:14:90:87:43:75:1d:30:01:6e:32:e9:00:23:77:5e:
4b:7f:14:29:00:8b:20:ea:57:19:0e:dd:66:cf:43:6e:05:51:
ac:a5:93:5e:24:67:03:6e:13:66:20:86:56:e6:d6:de:19:44:
81:fa:3c:87:94:90:ec:df:f2:a6:f1:27:83:f4:f5:cf:93:e4:
82:73:63:b0:be:7e:ac:af:56:9b:1c:74:56:c0:9d:b4:a2:77:
fc:a2:91:9d:9d:3e:a0:42:59:ba:0b:34:05:60:6f:71:4e:49:
7e:47:e2:65:8b:40:12:b5:2c:c3:0c:bc:9f:35:aa:0f:ff:da:
5b:f4:f7:c7:ec:a3:7d:0f:d6:89:20:c8:94:96:e1:92:47:91:
e1:25:46:57:69:09:3f:70:46:97:a5:99:73:3d:2b:f1:51:50:
7e:d7:57:d8:25:8f:c0:53:30:55:36:6a:95:7d:c4:8a:f0:cd:
76:49:c4:bb:d9:82:92:73:97:a5:04:63:5a:be:7c:e6:ff:5d:
d2:9d:f6:a1:89:b0:48:d9:9c:39:55:8e:6d:e9:fc:72:02:82:
c4:49:c9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:37 2023 by rpki-client on console-fra.rpki-client.org