Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1uEQEV85Bj0GGriSQ-6x8Siw4hI.roa
File: 1uEQEV85Bj0GGriSQ-6x8Siw4hI.roa (raw, json)
Hash identifier: LeP2aBnF1jjDWwGRUlD2k5RH0uswroHodU1S8FKkRUI=
Subject key identifier: D6:E1:10:11:5F:39:06:3D:06:1A:B8:92:43:EE:B1:F1:28:B0:E2:12
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1uEQEV85Bj0GGriSQ-6x8Siw4hI.roa
Signing time: Thu 15 Sep 2022 02:52:28 +0000
ROA not before: Thu 15 Sep 2022 02:52:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.56.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D6E110115F39063D061AB89243EEB1F128B0E212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:7f:33:49:be:8e:f6:2f:e5:db:f4:a2:f8:
f5:49:0b:8b:e3:5b:87:73:f6:2f:13:b7:8f:c5:13:
73:b3:30:05:28:0d:03:1b:49:35:f5:d7:51:20:06:
cc:cb:cc:10:39:12:69:06:76:e9:35:f9:cd:99:47:
29:5c:6a:df:aa:4f:98:68:a5:15:6e:16:91:2c:49:
5f:40:96:8e:ad:89:3a:85:de:cd:d4:30:70:55:58:
8c:91:57:e8:32:fe:ba:f7:9c:a6:88:cd:76:72:04:
a5:13:05:4d:fd:76:36:fa:aa:57:26:e1:28:d9:bb:
99:e1:83:8c:f3:8c:72:57:51:4e:a4:7c:c8:d6:53:
41:35:5a:96:b4:3e:c6:ac:06:f9:07:72:51:2d:c6:
03:44:4c:30:a0:8b:eb:d4:c6:44:27:22:23:a2:53:
25:88:91:c8:41:7c:f9:4a:52:46:98:01:fe:25:9d:
28:1a:ad:ec:91:0d:45:5d:14:e9:da:84:00:7b:f5:
ac:e1:ea:14:f4:5b:e5:8c:bd:61:8c:91:09:81:30:
b4:a5:57:cc:a4:5e:ef:80:e5:68:10:9b:ea:27:cb:
e9:0b:7f:98:27:78:5b:2d:a2:77:ad:fb:59:4d:72:
b3:cb:5b:7a:bb:e7:49:24:49:0e:17:3e:09:e6:78:
c4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E1:10:11:5F:39:06:3D:06:1A:B8:92:43:EE:B1:F1:28:B0:E2:12
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1uEQEV85Bj0GGriSQ-6x8Siw4hI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.56.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:43:be:aa:fa:f2:aa:16:fa:77:e0:77:f9:f8:9d:4a:53:3a:
5b:2e:0a:0e:b4:18:80:9e:24:1f:2b:e7:9f:b1:d8:bc:21:e7:
5e:77:ba:d9:45:71:b0:2c:7d:78:b4:0f:cf:89:9b:4d:a3:be:
05:5d:5f:ea:4e:46:03:cf:ef:57:bd:bc:5a:e7:98:7e:42:95:
7c:a1:e7:ef:96:b8:69:00:0b:9e:48:d9:f1:dd:60:76:2e:69:
b0:b9:b7:f1:dd:be:ee:5a:81:46:ce:54:55:cb:fe:b0:cc:6d:
57:eb:c4:45:93:41:ae:ba:ae:e1:05:39:b0:ab:5d:fa:45:70:
66:41:91:74:d0:6e:b3:8d:bd:c5:fa:45:83:f0:c0:f5:e7:34:
df:5e:f3:37:5f:cd:92:fa:95:1f:c7:9b:9f:e3:be:a1:9a:47:
09:a1:db:89:90:2e:eb:53:08:39:0c:3f:67:4b:3a:a5:b4:f1:
c6:66:bd:a1:f2:9b:93:a4:18:1c:b5:d2:a3:c8:db:47:be:00:
31:1a:17:a2:33:f9:50:8e:c5:de:1f:ec:ce:08:92:6e:6c:eb:
70:be:37:a4:b4:fb:c2:21:a0:75:d3:b6:da:1e:9f:56:12:7e:
17:18:8e:c5:17:c3:06:65:00:62:08:47:91:50:31:82:17:58:
a5:60:ee:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org