Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qIKqKnGtSr4at6Yu5l_Vj1w5cVE.roa
File: qIKqKnGtSr4at6Yu5l_Vj1w5cVE.roa (raw, json)
Hash identifier: Nlg6CYVrAJ/kCLF7MvxsR28Qy/V6h7yZ+D5CPyj6eiM=
Subject key identifier: A8:82:AA:2A:71:AD:4A:BE:1A:B7:A6:2E:E6:5F:D5:8F:5C:39:71:51
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1DB2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qIKqKnGtSr4at6Yu5l_Vj1w5cVE.roa
Signing time: Tue 02 Nov 2021 06:33:27 +0000
ROA not before: Tue 02 Nov 2021 06:33:27 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.174.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7602 (0x1db2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 2 06:33:27 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A882AA2A71AD4ABE1AB7A62EE65FD58F5C397151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:81:cc:39:f7:ea:e7:fb:80:a5:81:fd:69:
05:5d:f2:68:a6:0f:a0:31:bb:5e:c8:2a:a7:3e:21:
f4:85:1e:db:f4:68:c5:72:54:fa:3b:55:5a:6a:4b:
4a:21:f1:dd:d5:55:d1:57:2b:b3:01:3c:f1:6b:75:
5c:0f:82:8e:e2:1a:2c:62:e5:4a:91:25:23:59:99:
20:9c:a9:49:10:54:4c:f2:c3:08:da:c0:f9:25:78:
cb:70:ce:ac:49:e5:fa:a3:89:d5:93:79:24:2b:6c:
b6:65:f3:14:24:15:48:0b:e9:0d:75:3a:92:e9:60:
2c:7e:2d:e5:1f:70:0c:62:80:40:04:16:3b:46:b2:
5e:a2:ab:7d:67:c4:23:36:0a:7b:91:af:25:a2:15:
17:67:d1:2d:30:49:57:04:b2:2a:ee:7e:50:3c:51:
d2:33:a3:94:cc:41:fd:2e:9b:5b:23:b4:5c:10:32:
2a:0d:11:af:de:94:92:fd:c4:b1:fc:e7:32:d8:67:
81:d0:1c:4e:39:7d:96:e0:52:d1:d7:3f:a5:5c:5d:
cd:c5:ca:0c:0c:29:03:fc:c6:0f:18:b7:5b:60:83:
b4:b2:23:ef:3c:52:ba:b4:54:0a:a7:60:7e:55:58:
98:30:70:b3:9d:f0:82:5c:0c:ca:31:e3:e6:14:76:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:82:AA:2A:71:AD:4A:BE:1A:B7:A6:2E:E6:5F:D5:8F:5C:39:71:51
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qIKqKnGtSr4at6Yu5l_Vj1w5cVE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.174.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:8a:fe:6b:f8:0d:c1:bf:8b:84:75:2f:40:6b:2d:09:10:18:
5d:00:f5:4b:bc:c7:bd:2e:de:56:23:8f:57:a5:9c:48:b6:9a:
87:85:81:ff:2b:90:3d:02:d4:17:e4:19:26:8f:a5:80:5d:fa:
77:b4:80:5f:04:e6:83:17:bb:5d:f8:16:dd:e7:1c:43:ae:f4:
27:78:21:c6:15:96:cc:c2:57:e3:08:47:e2:ab:d2:9d:61:7f:
58:d0:dd:7d:6c:52:96:a9:e2:dd:d7:e2:0e:df:2f:02:8b:7c:
c4:fd:25:06:6c:d9:9d:eb:39:08:6c:2d:7b:cd:3a:ea:66:bb:
6f:b4:cd:e4:1b:4f:21:ef:7c:3f:2a:da:40:ab:74:f6:40:1f:
51:89:c5:88:40:f0:dd:7d:63:8b:2a:e1:1b:90:ed:d1:c9:23:
ff:b1:f4:22:82:f0:f8:36:59:86:e1:77:26:c9:99:27:eb:20:
2c:f8:6c:b8:5e:c9:5c:0e:23:c8:01:af:0b:97:7e:87:0f:e2:
de:a0:67:cf:2a:cc:44:af:de:a4:c4:1e:15:92:1e:67:31:b7:
03:fb:e5:e8:7f:00:9b:7e:3a:24:da:7c:6f:98:c5:9f:54:e4:
fd:ea:20:26:a6:56:c0:02:2d:d5:e8:0c:6d:7e:12:f1:a3:0b:
b1:0d:13:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:40 2023 by rpki-client on console-fra.rpki-client.org