Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qdtqrz_BAKtNQcAN9r5WgeAVPyw.roa
File: qdtqrz_BAKtNQcAN9r5WgeAVPyw.roa (raw, json)
Hash identifier: lwbLx6BONQc2EvVTmHC3I1isPjA9SvvxOKHqWkEqZW0=
Subject key identifier: A9:DB:6A:AF:3F:C1:00:AB:4D:41:C0:0D:F6:BE:56:81:E0:15:3F:2C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qdtqrz_BAKtNQcAN9r5WgeAVPyw.roa
Signing time: Thu 15 Sep 2022 02:53:28 +0000
ROA not before: Thu 15 Sep 2022 02:53:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.194.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A9DB6AAF3FC100AB4D41C00DF6BE5681E0153F2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:40:d2:14:c2:26:b8:dc:99:3c:2a:57:99:ce:
33:e6:6b:6b:40:6b:2d:df:9b:ce:ec:8e:ab:f7:e1:
d9:4f:4b:60:2b:81:dc:d3:c8:38:d8:36:98:fe:d0:
16:bf:3e:64:0f:c1:43:09:5b:e0:41:96:da:71:39:
43:56:6f:e8:56:ba:d0:64:6d:5e:55:24:90:a1:49:
aa:b4:ef:08:91:d3:92:f9:e4:d3:95:56:c4:f8:92:
74:cd:57:7a:d3:54:09:a3:f9:1a:57:0b:e5:e7:98:
3e:9d:4c:67:d5:70:cf:fd:ff:e0:0e:a6:6b:61:40:
bd:3b:2a:f3:de:da:55:c6:2c:74:a5:a1:1a:c4:d7:
c2:7a:c8:15:ea:2f:73:de:3a:38:4f:05:a5:ef:32:
e3:6e:23:44:8b:e7:50:9e:d7:17:a7:a4:7f:81:02:
2a:9d:5e:54:14:15:9b:7f:c1:12:ee:99:1c:5b:1c:
c3:4c:8e:fd:3e:8b:88:7d:cd:30:b0:ff:42:00:37:
37:9e:1c:4c:81:41:c8:89:da:48:29:e2:af:38:31:
05:db:ff:a2:75:bf:f3:61:0f:8d:58:a5:74:0d:ec:
ee:e8:6b:e0:bf:dd:12:ef:27:28:b0:43:f1:fe:46:
7b:8f:e5:be:b4:a7:d4:0c:d0:3d:39:6c:e7:d6:96:
04:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DB:6A:AF:3F:C1:00:AB:4D:41:C0:0D:F6:BE:56:81:E0:15:3F:2C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qdtqrz_BAKtNQcAN9r5WgeAVPyw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a2:8c:49:64:e9:aa:a8:ad:ca:ca:d5:c6:30:1b:5d:95:57:07:
67:b2:45:37:9c:f8:41:f1:e5:13:22:0a:4d:d4:75:fa:5d:b0:
fb:60:62:16:83:4c:66:8e:1d:28:01:13:dc:25:7a:8f:36:6d:
06:3d:1a:87:2c:e7:a7:e0:a6:b4:5a:8d:76:cf:1f:44:91:a3:
ab:5c:72:ce:ca:8b:ec:51:c9:97:c9:7a:98:c4:b3:81:f0:f8:
86:0c:fb:6a:c0:52:de:93:a4:8c:44:13:d7:6e:c6:c6:df:63:
20:e0:93:76:40:1c:58:7a:f1:24:f4:50:10:f5:52:ac:9e:f5:
fd:7d:56:fd:f8:0a:d0:c0:2f:9f:e9:51:1f:07:85:78:52:8a:
f5:b6:65:83:c9:e4:36:a5:cd:fe:a0:32:6f:da:00:94:52:75:
cb:97:e1:8d:e6:1a:1b:a2:e9:71:3f:3a:e8:b8:f4:cf:28:e3:
33:44:5e:d7:bb:98:4e:27:74:da:25:19:8f:ef:24:3f:bb:69:
40:5c:3b:b9:da:f6:86:98:78:a1:ba:b3:a9:c6:33:50:62:54:
8f:45:10:ea:d1:8e:20:a3:17:f5:5b:0f:cb:d5:a1:fc:db:d1:
3b:ea:20:6f:e6:7e:e0:f9:48:2a:a5:00:26:dd:22:f6:cc:2f:
1a:12:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org