Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qgknLU2Z6gsnkGHR7PAFYKBu6L0.roa
File: qgknLU2Z6gsnkGHR7PAFYKBu6L0.roa (raw, json)
Hash identifier: m98oSXfRUbmqFyDyywBMo7hu1raG8XNP+OdB039PfH0=
Subject key identifier: AA:09:27:2D:4D:99:EA:0B:27:90:61:D1:EC:F0:05:60:A0:6E:E8:BD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qgknLU2Z6gsnkGHR7PAFYKBu6L0.roa
Signing time: Thu 15 Sep 2022 02:53:06 +0000
ROA not before: Thu 15 Sep 2022 02:53:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AA09272D4D99EA0B279061D1ECF00560A06EE8BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:15:20:f0:46:8c:7d:7e:5e:e0:9b:ce:09:
46:68:5a:12:d3:f2:57:f5:8d:25:51:5b:f3:28:96:
eb:da:e8:20:d1:08:f2:7c:87:09:1d:37:37:45:17:
69:aa:cb:7e:d1:c9:cd:58:cd:1b:1b:24:58:3f:ab:
bf:c0:9c:b4:17:1d:5d:19:14:95:fa:ea:6f:2e:62:
3d:32:43:25:db:75:15:de:ee:fd:84:9a:71:ea:40:
80:83:9d:32:89:a6:a5:b7:98:0e:b4:31:fc:27:77:
3e:8a:38:59:e6:27:65:c0:24:e8:46:d7:8e:22:c9:
9c:93:cf:26:ad:1e:c9:e9:b9:87:34:08:7d:92:ef:
e2:3d:c0:6e:29:ec:43:6a:83:b0:84:6b:cd:84:41:
ff:95:6e:00:ab:8a:17:60:43:37:9f:6e:47:25:87:
30:86:35:bd:a5:b9:1a:da:80:d9:38:4b:8f:f4:c6:
c9:47:fc:aa:9c:e5:6a:c3:f1:d0:36:94:5f:df:7a:
0e:16:26:28:43:d1:c4:b2:38:23:7a:5e:1c:f6:f6:
26:3d:ca:01:6d:09:e2:06:92:20:f0:7d:40:14:fc:
9d:d3:ab:14:b3:33:90:71:70:f5:22:4c:92:a1:80:
df:e9:f4:87:a6:47:67:69:1d:5c:56:0e:0a:d0:44:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:09:27:2D:4D:99:EA:0B:27:90:61:D1:EC:F0:05:60:A0:6E:E8:BD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qgknLU2Z6gsnkGHR7PAFYKBu6L0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.96.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:3d:59:55:68:74:46:d3:8b:87:bb:55:e8:9b:2d:a1:c6:ba:
e9:62:dd:af:7b:83:39:d3:98:d3:0c:9b:dc:1d:47:78:c3:80:
19:9a:b2:38:1b:2e:29:16:80:e5:9d:b7:ee:4e:74:e7:82:9b:
b3:7f:50:16:e2:bc:9b:39:0b:17:6e:aa:21:f4:91:b3:d4:d9:
78:24:f2:61:c8:c9:11:d1:06:4b:76:1d:53:a9:99:bb:a7:6d:
c0:d0:13:6e:04:e6:27:53:44:07:35:3d:c5:27:78:52:05:3f:
de:ae:b6:7e:1a:24:09:ba:e7:7b:ba:9c:a2:86:d9:9f:60:25:
0a:d7:63:25:23:64:1f:4d:72:c2:19:e7:9b:c1:57:35:d4:d9:
01:22:e6:2f:77:43:47:79:14:4a:5a:a7:b7:cc:7b:44:30:0f:
b2:f7:c8:ec:06:f6:67:cb:c0:73:73:47:8a:0e:d5:8b:0c:1c:
33:b4:ef:5a:f1:d1:82:90:12:89:cd:c1:1e:1d:e7:2c:a2:31:
bd:db:f8:3a:f3:22:0b:73:43:a7:48:63:16:0d:7d:2a:68:37:
85:60:7b:c6:d3:11:a3:bc:6c:37:7f:e7:94:c5:99:7e:f6:9b:
17:2f:1b:75:ce:da:29:70:6c:85:18:80:90:f7:71:75:54:c4:
68:fa:04:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:40 2024 by rpki-client on console-ams.rpki-client.org