Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qubSM-YuV4KuDDJ9gEsrlNFNmZM.roa
File: qubSM-YuV4KuDDJ9gEsrlNFNmZM.roa (raw, json)
Hash identifier: ZU1Rb56qIt+yqHiHdgXf1H1RXfZd7Wj0RrjFO2pfTPo=
Subject key identifier: AA:E6:D2:33:E6:2E:57:82:AE:0C:32:7D:80:4B:2B:94:D1:4D:99:93
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qubSM-YuV4KuDDJ9gEsrlNFNmZM.roa
Signing time: Thu 15 Sep 2022 02:45:48 +0000
ROA not before: Thu 15 Sep 2022 02:45:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AAE6D233E62E5782AE0C327D804B2B94D14D9993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:63:1b:01:85:7f:45:7b:ec:21:a9:c0:e3:
ad:70:e8:00:e5:99:9f:f9:93:16:0f:fe:c2:20:b3:
4f:2b:e2:b8:de:e7:8b:1b:f9:9c:70:ea:94:22:dd:
48:dd:f0:63:94:b3:53:6a:2b:d3:90:1e:f5:1a:7e:
06:28:8d:be:34:b0:6e:bb:07:dd:a9:cf:97:60:59:
54:46:ff:b2:f8:5e:c9:cc:f9:6d:4a:b8:5d:75:a9:
c7:9a:31:f0:b3:64:fa:98:b6:fa:59:40:b8:d6:5f:
b6:8f:c5:aa:b9:08:28:9c:e1:65:a7:6c:2b:b7:f6:
e0:21:56:da:3e:dc:71:d7:4a:87:f4:d9:57:0f:f2:
d6:30:96:30:70:00:1f:e8:10:ba:b0:45:02:21:4f:
c2:cb:9f:52:7e:37:43:61:01:41:40:08:3b:82:a2:
77:f1:a6:d1:a3:34:11:d5:1a:c0:8a:40:c7:c5:bd:
0c:f2:17:d6:54:8e:c4:2a:4f:40:2d:92:14:4b:89:
04:05:c3:7d:94:8c:96:19:16:f0:95:99:8d:47:e8:
31:69:6e:dc:a8:92:e4:82:37:b9:d4:b4:e4:e8:25:
71:6d:21:e2:8a:63:98:0b:66:5b:17:1b:6e:db:35:
3a:05:b5:58:cc:b8:13:a2:68:f5:84:2e:91:25:60:
09:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E6:D2:33:E6:2E:57:82:AE:0C:32:7D:80:4B:2B:94:D1:4D:99:93
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qubSM-YuV4KuDDJ9gEsrlNFNmZM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:d5:67:19:80:fe:82:91:c7:87:48:c2:cd:d9:60:61:c1:50:
c7:42:43:f6:69:ef:21:4a:bb:31:f9:7a:7c:12:3f:76:57:29:
48:05:db:46:99:a2:62:2f:ec:04:35:83:c8:ec:b2:15:95:27:
1c:d0:d0:f2:05:59:bc:16:c7:6f:fa:31:94:6e:db:bc:99:7c:
b8:8d:f6:9c:62:2a:8e:fe:81:75:69:b0:20:6b:99:ca:f4:70:
f0:11:7d:c4:73:d9:d5:86:1d:22:52:55:41:f1:d4:83:10:6a:
85:06:7b:fc:ff:be:8f:0e:2c:34:5c:2c:de:61:62:93:c1:22:
92:66:f5:fc:ee:93:60:1c:ea:aa:7e:85:26:17:97:31:d0:a0:
4a:1c:3a:2d:cf:f2:aa:53:fc:00:56:20:6e:4c:8a:f3:b8:e4:
5b:1a:cc:90:3c:53:90:fc:8c:0d:bf:79:2e:60:d8:da:73:6a:
3d:9e:bf:16:03:76:ae:6d:f5:ff:7d:2a:f9:82:67:cf:ef:5c:
01:00:5a:2e:ae:f4:50:53:07:9e:d7:b1:e2:ff:36:42:50:e1:
f1:42:30:34:29:fb:67:99:f8:ab:42:34:e3:aa:2c:95:5d:c9:
01:4c:62:ea:e9:08:a4:cd:53:ae:c3:b9:c0:c8:aa:57:00:43:
6e:83:f5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org