Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-hHfH0kBiLteQXUlPuZ7XiVFQhA.roa
File: -hHfH0kBiLteQXUlPuZ7XiVFQhA.roa (raw, json)
Hash identifier: 7wPX+i++8+KHnuAFN2XLJV4Do46kwcE+4KddQanqAaM=
Subject key identifier: FA:11:DF:1F:49:01:88:BB:5E:41:75:25:3E:E6:7B:5E:25:45:42:10
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C2B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-hHfH0kBiLteQXUlPuZ7XiVFQhA.roa
Signing time: Wed 29 Sep 2021 02:47:26 +0000
ROA not before: Wed 29 Sep 2021 02:47:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7211 (0x1c2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=FA11DF1F490188BB5E4175253EE67B5E25454210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:c4:50:c8:00:80:35:5d:29:48:8e:68:7b:
a4:47:8e:86:df:66:98:38:dd:45:1b:16:01:db:b2:
55:c9:e2:51:8f:27:ad:9f:4e:0d:90:be:35:60:10:
cd:50:54:48:22:00:4f:7f:7b:6e:c5:f3:35:dd:d3:
98:87:13:9f:1f:82:bd:4e:54:57:91:7a:5e:c9:dd:
37:c1:3c:8a:10:32:1c:ae:b3:31:c3:aa:4f:18:0a:
f6:eb:03:3a:40:2a:d0:c4:c8:92:2e:01:a1:24:66:
b2:4c:94:c2:e3:7e:75:be:b8:9a:94:67:8b:96:0e:
65:11:a0:23:48:79:7f:b4:0c:85:b1:21:ae:d8:b2:
98:d6:83:09:c6:b3:ec:9c:f0:a4:14:cc:f2:7d:7b:
ea:f0:08:f9:3e:76:c1:9c:74:27:78:42:8e:53:7a:
7d:cc:62:ff:49:16:d9:78:69:85:71:35:8c:96:f9:
8b:41:55:fc:26:e5:22:f0:f2:2a:ea:ce:5d:86:c5:
da:0a:ba:2b:17:4e:ab:d2:f8:69:43:91:f9:16:69:
17:1f:e3:7a:ca:a8:20:da:0a:67:d2:ea:e0:7d:13:
e3:d7:ea:0c:b0:67:21:fb:00:33:11:6a:c4:be:2c:
30:32:56:c6:95:da:69:89:b7:86:b1:e2:2c:96:5e:
ed:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:11:DF:1F:49:01:88:BB:5E:41:75:25:3E:E6:7B:5E:25:45:42:10
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-hHfH0kBiLteQXUlPuZ7XiVFQhA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.210.0/24
Signature Algorithm: sha256WithRSAEncryption
91:80:b7:58:d4:11:27:dd:10:81:13:29:c9:14:d7:dc:1b:98:
1e:66:82:62:1e:b7:f7:a7:7e:db:59:e2:62:77:54:82:5c:c1:
5d:b1:04:7d:f3:dd:4e:ff:33:60:f9:2d:34:bd:04:20:38:9b:
3f:4d:e5:f6:db:a8:b8:ca:80:3a:3c:43:51:c5:42:aa:49:5c:
10:64:37:d2:d8:d2:f7:9c:93:2b:f2:10:f8:de:ed:c9:9e:3b:
9c:6d:f4:45:c2:e3:93:82:6d:f1:4d:0e:07:cb:a6:a8:d7:60:
c2:26:5f:9c:b0:85:09:3b:1a:f0:f4:cf:3d:1c:8d:01:60:18:
d0:69:23:ec:47:99:ab:b2:82:ad:9a:98:b1:ca:8d:01:ff:c9:
57:80:73:3a:30:39:6a:7a:88:53:d5:5e:71:68:7f:9b:fc:e2:
b4:56:4c:5a:55:a1:ea:61:d6:9d:c8:c8:13:43:82:d0:f2:31:
b6:7e:d9:57:15:c5:ae:06:45:32:3d:6f:ab:88:c0:6e:a6:3b:
ce:92:f8:00:21:d5:15:cd:02:46:3e:67:89:09:e1:92:aa:81:
f1:fe:b8:8f:ba:c9:db:81:e3:88:bd:c5:64:98:e7:1e:93:69:
b8:d6:9b:af:3f:9c:90:c6:99:e3:ff:fa:82:79:c3:6d:67:d2:
75:e7:76:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org