Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qRJc15GUWrApDauFGdfDVQldBCg.roa
File: qRJc15GUWrApDauFGdfDVQldBCg.roa (raw, json)
Hash identifier: nbfRgy04vnyP9jtQTEGebp0pE3lISPaX1IctUDUtFFk=
Subject key identifier: A9:12:5C:D7:91:94:5A:B0:29:0D:AB:85:19:D7:C3:55:09:5D:04:28
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C8E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qRJc15GUWrApDauFGdfDVQldBCg.roa
Signing time: Wed 29 Sep 2021 02:47:55 +0000
ROA not before: Wed 29 Sep 2021 02:47:55 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.204.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7310 (0x1c8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:55 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A9125CD791945AB0290DAB8519D7C355095D0428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:77:1d:03:d1:d8:4a:41:ee:1f:7a:d8:7a:
e3:92:b0:52:b8:bb:e2:61:7e:2a:d5:6b:b5:a6:cb:
12:d0:16:3a:2d:96:21:b2:d9:0b:b9:59:fe:8b:27:
14:4f:37:55:8a:3d:d2:ed:d3:84:89:0d:17:12:76:
07:4f:6b:a6:29:4a:56:9d:4c:02:11:ca:6f:a0:20:
1e:a3:3a:4d:0a:d4:1a:3c:dc:74:58:b9:e9:1e:ef:
55:85:c6:5f:d1:b2:f0:5e:21:89:fe:70:bb:2a:e6:
52:b1:2e:0e:e0:14:f7:c1:5b:19:2b:2f:e9:16:8e:
22:64:71:57:d4:15:05:6d:13:65:0a:41:99:fd:e5:
53:d3:fc:48:8a:e1:05:b1:eb:01:d1:af:2a:11:4b:
05:af:36:c9:2b:59:60:4d:bf:a7:57:60:e0:61:75:
40:76:1e:d2:0a:97:cc:3d:17:a6:8b:90:8b:aa:8d:
22:a0:66:1d:a0:a7:71:a5:be:0f:b5:11:f1:98:14:
21:24:d2:47:68:e2:8b:76:bb:d7:55:14:92:b0:44:
f9:90:b0:cd:71:cd:52:15:40:70:29:9a:59:ca:4a:
d5:73:ff:23:ca:d6:1f:2f:b1:ea:73:8d:b3:24:0f:
2d:6b:85:5d:d5:34:ce:89:3f:ce:1d:74:27:20:c1:
4c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:12:5C:D7:91:94:5A:B0:29:0D:AB:85:19:D7:C3:55:09:5D:04:28
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qRJc15GUWrApDauFGdfDVQldBCg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.0/26
Signature Algorithm: sha256WithRSAEncryption
a3:d2:eb:2b:d3:c4:c4:f2:5a:93:37:bb:1c:39:82:9c:71:de:
51:9e:92:3a:9c:df:13:d1:85:a2:59:e6:e7:72:0c:e5:fa:f9:
17:04:95:c9:ad:82:e7:64:1f:f2:c6:54:82:42:c1:0c:3e:ff:
0c:48:49:45:92:f7:ea:f6:0c:2c:12:6c:28:8e:da:f4:bf:64:
82:74:fa:2a:09:ba:98:bb:ff:9d:37:ed:7f:f8:85:92:75:ba:
1d:04:df:f8:03:96:9d:40:6d:d0:19:b8:72:ba:67:a2:a6:04:
8a:03:43:d5:d3:60:d7:8b:92:61:82:0b:32:a1:b6:ac:03:6b:
81:41:9b:21:a9:8b:dc:ab:fc:87:52:c4:d4:d2:44:b3:00:b2:
77:c9:b5:53:ea:62:01:cf:41:21:01:5c:fc:83:4c:27:f2:71:
49:9f:85:b3:f2:64:48:37:1d:1a:bf:a6:2e:ac:1b:af:b0:2e:
84:b7:8b:e8:98:3b:16:af:1d:bb:df:59:e1:c6:1f:7a:90:52:
80:c4:18:28:e4:4b:d6:83:04:39:41:09:f3:29:e8:74:87:6e:
77:c8:20:6e:20:40:76:3b:72:4c:02:4b:1b:3b:c0:2c:8d:01:
8a:b8:f1:4d:1f:4b:0f:64:04:c3:50:aa:6d:f4:43:78:8a:79:
03:fe:3e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:40 2024 by rpki-client on console-ams.rpki-client.org