Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qxqS78iyHO_JLqWSnQb40pe-Adc.roa
File: qxqS78iyHO_JLqWSnQb40pe-Adc.roa (raw, json)
Hash identifier: /3jNJV0cry4R71G9HMejauB4ilvCLpCgn6bJVecJdlw=
Subject key identifier: AB:1A:92:EF:C8:B2:1C:EF:C9:2E:A5:92:9D:06:F8:D2:97:BE:01:D7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C7F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qxqS78iyHO_JLqWSnQb40pe-Adc.roa
Signing time: Wed 29 Sep 2021 02:47:50 +0000
ROA not before: Wed 29 Sep 2021 02:47:50 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.232.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7295 (0x1c7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:50 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=AB1A92EFC8B21CEFC92EA5929D06F8D297BE01D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:64:53:ef:f0:70:79:53:da:e2:e3:18:3c:
7f:11:bc:42:b1:22:25:32:2c:77:59:a2:47:97:cd:
71:cf:bc:96:5d:55:7d:df:a4:29:0b:d9:ac:85:56:
ae:07:20:8f:50:31:ac:f6:0d:dc:91:36:7e:16:c4:
94:a6:42:b6:6b:13:e0:db:83:77:d2:55:63:0e:d8:
90:b8:d7:89:4c:01:9a:96:b7:2c:7f:12:9a:6a:c0:
9e:6e:15:3c:0e:f5:d7:d7:c3:17:a5:b4:19:15:92:
88:1d:70:29:99:5c:51:ca:c5:9f:eb:ec:67:f4:19:
83:49:da:10:aa:f9:d0:f0:45:1f:c9:e7:af:7a:c5:
44:d8:25:39:72:3d:f8:8d:8c:59:74:30:6a:a3:94:
e5:22:3d:56:88:58:dc:7f:16:2b:9b:5f:0c:e7:d2:
47:e3:18:f2:6a:cf:72:bf:e3:56:fa:05:b4:83:30:
76:2d:0d:a6:d0:26:32:95:f1:e2:6b:44:13:bb:88:
09:69:cb:8e:ea:76:b1:3a:0b:87:45:aa:5a:cd:1c:
02:7b:1d:cd:58:65:3a:a7:b9:e8:fa:42:6e:84:54:
cd:c0:2b:22:88:ab:26:f2:a1:ca:06:b9:b5:f9:41:
6e:4d:b4:57:da:3f:9a:b9:d8:5a:f5:1a:59:34:cf:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1A:92:EF:C8:B2:1C:EF:C9:2E:A5:92:9D:06:F8:D2:97:BE:01:D7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qxqS78iyHO_JLqWSnQb40pe-Adc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.128.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:97:87:a7:b4:31:db:da:21:51:98:fa:7e:f5:89:1d:1c:8c:
8d:6f:5f:bc:49:b9:6c:91:4b:6d:3f:be:0a:e6:d1:a3:e9:d5:
5b:a1:85:e8:d9:04:72:72:0d:a1:2a:ca:b3:44:13:61:5b:9d:
b0:20:1b:ce:ac:52:25:1f:7b:88:fd:19:9b:8c:a1:ec:9a:ab:
8d:82:f0:93:2f:09:c6:f3:b2:15:72:50:f6:ae:bd:27:20:d9:
fa:96:9e:6e:16:f2:df:d0:c7:a3:a1:d9:02:f1:13:4c:e4:ae:
b3:87:b0:65:10:31:23:46:68:76:78:5f:2a:f4:ba:98:e9:8b:
94:56:32:00:92:38:6b:22:8c:59:3e:d0:85:b5:01:ec:ca:7f:
37:ce:08:f3:67:97:aa:e9:aa:0c:2e:dd:84:09:a1:82:88:06:
97:ba:50:21:8c:68:aa:8f:0b:20:1b:ba:4d:ff:56:61:57:af:
9f:ae:e9:61:9f:2e:0a:3a:db:6b:59:0e:2b:58:25:e4:fd:4e:
33:c9:cc:ba:c6:ad:ae:68:0f:59:55:a1:c9:e4:af:fa:ef:c5:
4a:ce:fd:b2:3d:7b:0d:44:b5:23:4d:14:ad:e3:8a:d7:8f:41:
7b:02:eb:d7:fe:38:17:39:ff:b7:db:d4:6c:7a:a2:70:bd:48:
1e:b3:25:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:40 2023 by rpki-client on console-fra.rpki-client.org