Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-9jaLg-lJUja7jia5XWqUfrFrvQ.roa
File: -9jaLg-lJUja7jia5XWqUfrFrvQ.roa (raw, json)
Hash identifier: ZyImse7gg9Qp3Ribr0WTQ84JVKpwwkvcsxJ9b4+biEE=
Subject key identifier: FB:D8:DA:2E:0F:A5:25:48:DA:EE:38:9A:E5:75:AA:51:FA:C5:AE:F4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C19
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-9jaLg-lJUja7jia5XWqUfrFrvQ.roa
Signing time: Wed 29 Sep 2021 02:47:21 +0000
ROA not before: Wed 29 Sep 2021 02:47:21 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.232.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7193 (0x1c19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:21 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=FBD8DA2E0FA52548DAEE389AE575AA51FAC5AEF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:6e:e8:d7:14:d5:f6:cd:3f:3d:94:05:c8:
0d:96:2f:98:b7:8e:69:07:49:99:aa:57:64:d7:33:
8a:37:6f:3d:83:02:9c:38:f2:6f:d2:a9:a9:e7:b2:
e2:bc:86:d1:7f:cf:57:4a:0f:9f:9e:aa:05:a5:5c:
90:72:62:fb:3d:df:45:ba:89:aa:9e:b6:8e:af:ef:
ae:8d:a7:d2:bf:2b:e3:54:61:82:b8:77:71:4e:fc:
3a:81:fa:47:9d:ff:78:79:9d:3b:c7:9c:2e:a4:14:
a9:9a:f7:fe:4c:1a:a6:ba:70:69:ab:b4:dc:b8:02:
89:8a:31:3f:db:ac:f1:5d:78:10:78:47:cb:8d:90:
4f:4d:36:ab:10:6d:3a:3a:ac:67:e2:01:84:e0:88:
9a:8d:fe:cf:92:72:26:15:be:a6:0c:34:58:52:61:
a9:db:cd:8b:cf:0d:f3:05:a9:ba:2b:76:54:c9:0e:
29:ff:0e:a5:39:67:64:55:7c:26:0a:13:0c:25:79:
c7:64:4a:53:52:55:ac:f2:ec:06:da:61:a6:a5:1b:
34:ca:9e:f7:57:5d:34:4b:ac:ee:95:e6:b0:94:67:
79:27:2f:87:35:b0:f6:d7:55:25:c5:19:b0:64:4d:
5c:52:48:f7:51:05:c9:78:41:bf:71:cb:2f:a7:c6:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D8:DA:2E:0F:A5:25:48:DA:EE:38:9A:E5:75:AA:51:FA:C5:AE:F4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-9jaLg-lJUja7jia5XWqUfrFrvQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.16.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:5b:25:0e:9d:df:46:01:e7:44:48:82:a2:c3:07:2a:1c:14:
6f:97:ad:2d:ee:59:35:99:30:c4:8a:4d:51:41:16:6d:09:81:
e6:65:45:c2:14:1a:c6:60:42:45:13:58:8f:b6:2b:33:cd:b1:
cc:0d:64:7b:7a:35:8c:d7:0b:6a:68:ad:63:60:2b:1d:e2:7e:
ae:95:b6:7d:ec:d9:13:cb:37:a2:07:76:7e:54:92:d3:a9:af:
7e:96:99:10:ef:0e:cb:7b:11:cb:29:d4:f5:ec:5b:d8:4a:77:
e9:a3:49:3d:2a:e4:52:c7:69:e9:30:29:36:a7:57:0b:fd:cd:
27:9b:8d:8c:aa:e0:c7:7e:1b:94:6d:5b:83:d5:67:18:86:94:
c2:37:5c:05:85:75:bd:6b:88:35:4e:18:b2:99:a5:1a:70:21:
07:10:9d:f1:8a:95:ca:52:d4:d4:30:9f:bf:4f:61:23:95:90:
df:7d:ac:17:7c:8d:e3:2c:ae:fe:70:de:34:b1:f0:e9:28:f1:
a8:01:82:56:9d:5a:aa:76:9a:26:4e:69:73:86:c4:9b:a8:28:
62:67:36:02:93:e0:ec:c7:b9:dc:fb:cf:86:02:23:67:58:a6:
10:7d:8d:c7:78:c9:01:de:d7:47:87:b3:d8:a1:6b:81:3b:60:
4a:4e:38:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org