Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qigE_jEjRSjd6KUl_kATsEEko5U.roa
File: qigE_jEjRSjd6KUl_kATsEEko5U.roa (raw, json)
Hash identifier: GAGKhOMVbC3sDpBUxfFHr6MglFgq08mdKGZHy1Sky50=
Subject key identifier: AA:28:04:FE:31:23:45:28:DD:E8:A5:25:FE:40:13:B0:41:24:A3:95
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qigE_jEjRSjd6KUl_kATsEEko5U.roa
Signing time: Thu 15 Sep 2022 02:45:13 +0000
ROA not before: Thu 15 Sep 2022 02:45:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.24.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AA2804FE31234528DDE8A525FE4013B04124A395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:72:f6:ae:ae:11:67:22:f0:bc:c9:03:15:
5a:af:1e:84:21:00:7d:f9:36:3c:73:13:99:44:58:
3a:26:ce:16:4f:ec:78:a9:34:e7:2c:e6:0e:14:33:
77:eb:d8:45:71:ac:10:5f:55:10:b4:b3:e9:13:14:
a7:e3:18:e1:18:63:90:a7:f2:74:50:12:1f:ae:70:
1a:a9:35:70:10:75:a4:25:15:17:3c:07:df:78:00:
ce:33:e5:f8:fb:90:b2:64:43:fd:ad:38:e5:ae:2f:
17:41:a5:b9:9d:88:90:b5:0a:63:95:5c:2b:df:cd:
53:60:08:d1:1e:46:29:29:2c:6e:d7:df:33:e7:34:
d5:f4:47:26:2e:40:7c:c9:96:f4:b7:cb:ed:5a:49:
ea:e1:a9:14:1b:28:e8:70:bb:cd:0d:d9:2b:43:19:
37:2d:7b:d5:07:b2:5d:ae:1d:7e:43:55:dc:51:af:
04:9f:a1:7b:35:91:2c:58:54:c6:22:09:5a:99:2e:
7a:74:82:6a:f1:8b:4d:5d:76:89:9e:f6:a7:b2:1a:
c0:f6:fe:a5:35:df:8a:5b:c8:80:71:4f:be:d2:f3:
6d:29:67:3c:f8:26:af:48:70:28:f2:6c:4c:55:8d:
7b:dd:a3:b2:ab:ba:e8:af:a0:1d:af:c6:31:c2:64:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:28:04:FE:31:23:45:28:DD:E8:A5:25:FE:40:13:B0:41:24:A3:95
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qigE_jEjRSjd6KUl_kATsEEko5U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.24.0/21
Signature Algorithm: sha256WithRSAEncryption
78:84:09:94:56:1b:18:b0:ef:e8:d2:4c:b2:75:40:63:97:8b:
05:68:d2:23:db:65:7a:10:63:e5:6a:93:69:03:1f:39:aa:36:
23:ce:89:c8:7f:1b:e3:0c:87:e1:97:39:39:c5:ab:00:66:a5:
c4:17:b6:ea:92:93:fc:6b:32:77:5f:4c:7b:ba:14:4b:90:ee:
3b:e8:13:5f:de:c8:2d:e6:66:60:05:ab:6e:3c:7f:a0:15:1d:
cb:a5:c8:2a:6f:06:4f:60:bb:e8:e1:14:3a:63:2b:a8:94:ed:
52:d4:1f:98:1c:a3:25:7b:25:e8:2f:8e:71:a7:2d:66:02:11:
f4:d2:bb:b8:46:18:68:ff:01:68:cd:4f:ab:e6:45:64:8f:b2:
6d:b8:c5:59:87:68:0b:04:73:92:81:8d:42:85:b6:fd:6e:ca:
20:65:75:70:2d:77:1f:64:71:e4:d5:39:24:7c:ef:b2:48:a4:
89:97:5d:dc:67:9b:ee:3d:37:19:e5:f2:62:9b:eb:b6:b6:71:
e9:6c:6e:2d:19:1c:56:ad:f3:ea:41:42:63:82:5e:2c:29:c6:
04:00:0a:7a:47:3a:8d:84:0d:06:72:1f:83:15:78:10:87:98:
b6:19:27:29:8f:b8:0e:5d:6d:08:bc:4a:da:f6:53:f5:89:45:
ec:5a:3f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org