Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xqxz-PUMs21iLp6gXI_2mSXmmoU.roa
File: xqxz-PUMs21iLp6gXI_2mSXmmoU.roa (raw, json)
Hash identifier: 2S2jlVHSSheY12KTh1LCNiURHTaa3kM6cfZsnMWQq0M=
Subject key identifier: C6:AC:73:F8:F5:0C:B3:6D:62:2E:9E:A0:5C:8F:F6:99:25:E6:9A:85
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BD2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xqxz-PUMs21iLp6gXI_2mSXmmoU.roa
Signing time: Wed 29 Sep 2021 02:47:02 +0000
ROA not before: Wed 29 Sep 2021 02:47:02 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7122 (0x1bd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:02 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C6AC73F8F50CB36D622E9EA05C8FF69925E69A85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:0f:4d:11:25:cc:2e:03:1f:c3:63:31:7c:
14:73:f5:e3:f3:77:ea:7e:f9:14:2e:27:3e:d1:e3:
b7:be:1d:27:89:7b:4f:52:8d:e8:e6:01:ff:97:2a:
e3:a1:76:2f:11:4f:8f:f8:7f:ec:f6:cb:43:83:a9:
53:79:32:cd:be:52:3c:b4:0e:1e:57:61:eb:40:e3:
98:83:f7:c5:2d:15:a6:7a:ce:fb:d2:04:75:de:8a:
4b:81:6f:86:0d:84:2d:1f:87:bf:b0:d0:65:98:52:
14:75:5d:fe:27:cf:13:a3:2c:ff:1e:0f:f9:50:a8:
50:97:9d:b5:61:f8:30:68:41:c4:4c:e1:4f:29:93:
64:03:a8:d8:f3:02:3e:15:48:ed:23:5b:f9:18:56:
c2:d6:51:10:51:9b:31:c9:d3:94:68:d6:55:98:6a:
a6:26:d1:10:c8:77:89:ca:bd:ef:ed:4c:97:a9:0e:
53:27:6d:25:de:e2:9b:47:da:d9:cd:11:96:b7:91:
ab:4c:41:eb:c8:47:3d:45:37:91:ab:94:8f:5f:cc:
2e:1d:a1:31:a8:e6:52:1a:02:e3:a9:35:90:df:94:
37:0f:6d:b5:4b:aa:bc:d1:fe:ef:f3:78:2e:8b:45:
99:4f:30:73:04:ce:2c:15:e0:c4:84:60:91:1d:1a:
c3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AC:73:F8:F5:0C:B3:6D:62:2E:9E:A0:5C:8F:F6:99:25:E6:9A:85
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xqxz-PUMs21iLp6gXI_2mSXmmoU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.24.0/21
Signature Algorithm: sha256WithRSAEncryption
82:2a:60:2f:a8:cf:23:2f:5b:c3:c9:75:c4:19:e3:55:1d:ca:
d1:dd:83:bb:92:f4:a5:fe:3c:d4:68:59:4d:8a:67:64:9d:57:
f4:41:40:bd:b1:01:4f:28:91:59:9d:c9:59:60:fb:e3:e9:a2:
17:e1:0a:f8:f6:4c:c9:6c:de:6c:2e:4f:d4:3a:c2:d5:d5:c5:
a7:2d:e4:5f:0b:d4:63:4b:29:b7:22:bf:8a:a5:66:a2:c6:3c:
4c:48:fb:4d:ae:7e:83:54:75:3c:3f:85:a9:b8:be:ee:5a:1f:
f3:6c:b3:28:63:25:42:f0:7b:90:a1:18:f6:f5:5b:a5:3a:3d:
36:0a:79:72:c2:cc:a9:9d:11:e3:ee:65:2b:35:e6:c2:00:a0:
d1:5f:1d:81:a5:8b:9c:0f:59:ae:3f:3b:2c:d9:1e:0c:a3:77:
05:21:9d:01:3b:99:d1:40:90:0d:c0:5f:73:de:86:f8:61:dd:
db:de:ca:14:af:f5:f7:ed:56:d5:0b:ac:df:bc:0b:b0:30:4a:
30:69:2c:f3:1f:44:bf:36:bf:db:87:e6:98:7a:04:48:ee:fd:
03:6d:8d:1e:42:c8:5a:e1:20:c7:0d:ee:f8:92:34:8b:a3:73:
6f:ae:16:e5:3d:19:82:6c:e6:94:cc:80:2d:6a:51:07:a8:df:
89:d4:be:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org