Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mQyCk-wL1_1nqubP4ZtYb4TR_9g.roa
File: mQyCk-wL1_1nqubP4ZtYb4TR_9g.roa (raw, json)
Hash identifier: tSWNY6/kZyUfj+B8iJb+Abg22kUO2SIn3/1vjSOv0tU=
Subject key identifier: 99:0C:82:93:EC:0B:D7:FD:67:AA:E6:CF:E1:9B:58:6F:84:D1:FF:D8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15AF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mQyCk-wL1_1nqubP4ZtYb4TR_9g.roa
Signing time: Sun 07 Feb 2021 12:05:57 +0000
ROA not before: Sun 07 Feb 2021 12:05:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5551 (0x15af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:05:57 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=990C8293EC0BD7FD67AAE6CFE19B586F84D1FFD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:5a:8b:a1:c4:23:0b:8b:a5:be:56:ce:32:
cb:b8:40:95:68:f9:a4:13:28:32:e4:68:31:84:26:
d8:58:b1:ef:f8:dc:9a:6f:83:9b:fd:6e:ef:99:72:
8e:87:e3:f7:11:07:d4:a3:cb:47:e3:5c:51:87:1e:
79:d7:3f:38:00:36:0f:84:15:3d:13:99:40:52:a8:
01:7a:f5:8f:66:39:c2:35:f1:b8:dc:cc:e0:ec:ba:
f3:32:cb:6d:69:d2:6f:af:44:4c:51:b3:58:ac:41:
9c:97:a0:fc:8c:4b:82:5b:2b:26:8d:b1:25:1a:33:
7b:01:8a:87:f5:30:e3:28:8d:d9:4f:f2:41:f3:1f:
f3:2f:c4:64:10:42:04:67:0b:9f:41:b8:c0:4d:1b:
99:ee:35:3c:37:70:eb:aa:bd:a5:53:69:26:9a:51:
51:01:de:3e:32:78:2d:e8:89:97:eb:f4:e7:60:c2:
5b:bc:ba:b0:ff:07:a9:21:4e:3b:05:51:a8:a8:64:
23:3b:a1:cf:50:38:22:a8:55:27:bb:92:93:1e:45:
0b:70:fa:9d:10:b4:2e:7f:b7:92:95:92:3b:3e:4f:
5c:ac:72:d5:39:8a:42:83:46:3b:43:89:ac:08:86:
62:19:d5:1e:f7:f7:ea:f2:cc:ef:cd:98:2c:87:d1:
47:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0C:82:93:EC:0B:D7:FD:67:AA:E6:CF:E1:9B:58:6F:84:D1:FF:D8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mQyCk-wL1_1nqubP4ZtYb4TR_9g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.104.0/22
Signature Algorithm: sha256WithRSAEncryption
af:2e:45:16:10:22:7b:20:3c:93:27:c2:96:4c:85:9b:19:ed:
0f:75:ec:ba:9c:d0:da:4e:85:b7:8e:09:ff:52:b7:c8:7c:54:
2b:1d:0a:47:c7:05:e0:6c:4f:36:51:fe:d0:ec:6f:3e:82:41:
ba:09:36:f2:21:19:4e:90:73:15:c4:4a:4e:5f:2b:4a:16:08:
03:f9:bd:bd:5a:f9:5b:7e:03:d8:d5:46:c7:82:77:43:e5:bb:
ab:48:13:22:6a:8f:67:e7:ca:96:e9:64:ad:f5:70:bb:75:d8:
32:a6:65:6d:c0:e3:d9:2a:79:eb:30:e1:87:7f:75:e6:4a:d0:
46:18:37:75:e3:63:7f:12:f2:0d:14:78:fb:6f:94:77:84:58:
ac:a1:82:a4:90:36:dc:94:88:5e:24:da:46:9f:55:4d:5f:8b:
7c:4c:ad:0e:63:a3:b6:a4:7e:b4:07:89:c6:ad:d8:ec:5e:7f:
26:97:47:6e:c5:d2:42:53:32:aa:43:e9:39:e7:01:3b:98:e0:
ed:13:d2:ea:a3:4f:c9:8d:3c:0d:5c:f4:9d:85:eb:59:36:79:
e1:da:9b:0c:58:66:24:0a:ee:30:c7:f9:10:ed:98:db:d4:36:
4a:d5:79:96:68:06:93:98:8e:ca:fa:c1:fa:36:7f:3f:99:17:
21:96:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:39 2023 by rpki-client on console-fra.rpki-client.org