Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1v8PhruRTFZwCK0cWmof6E_fK8s.roa
File: 1v8PhruRTFZwCK0cWmof6E_fK8s.roa (raw, json)
Hash identifier: u1gtGN7ANohIFCQak3IIU/M4ZnpRnU2zQBe9G37udG0=
Subject key identifier: D6:FF:0F:86:BB:91:4C:56:70:08:AD:1C:5A:6A:1F:E8:4F:DF:2B:CB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1v8PhruRTFZwCK0cWmof6E_fK8s.roa
Signing time: Thu 15 Sep 2022 02:53:19 +0000
ROA not before: Thu 15 Sep 2022 02:53:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.50.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D6FF0F86BB914C567008AD1C5A6A1FE84FDF2BCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:67:95:56:e7:2b:9a:7f:a8:78:b0:09:50:
61:b6:4b:e7:34:16:55:c1:dd:e9:31:d1:1b:2c:be:
4f:f3:78:77:e5:28:6d:86:ef:11:eb:0d:15:c0:9e:
89:3a:c4:38:c8:53:97:20:02:54:75:30:39:f2:d0:
66:ff:12:31:9a:95:82:4d:8b:0b:f3:5c:7b:b7:a1:
7c:af:c2:4a:8f:e8:15:84:8e:56:46:79:08:bc:15:
5a:b0:6c:01:3d:dc:44:09:7e:38:2c:7d:88:f8:07:
57:96:28:6f:45:aa:cc:6f:57:fd:8b:49:50:e2:fc:
56:ad:3c:f8:9b:e6:f2:b1:be:68:ee:26:83:88:d6:
6c:17:e9:f0:20:72:09:cd:88:07:09:6a:3e:f7:03:
8b:34:62:e9:8a:61:1c:90:5e:23:09:5d:ab:7f:22:
c8:7e:1f:47:72:09:63:65:3a:a5:ca:d3:02:f3:77:
7d:92:0d:ad:7f:e2:e1:9e:00:81:b8:e1:f8:eb:9c:
03:aa:0e:57:4b:0d:9a:42:ad:71:34:20:dd:37:64:
e9:ff:26:d6:c1:77:bb:6c:67:5b:2f:8b:6e:ab:b7:
66:03:3d:72:ed:33:f8:da:1d:6c:e4:91:56:30:0f:
58:9d:a7:77:f1:7b:84:30:21:32:e4:a3:8d:e4:9b:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FF:0F:86:BB:91:4C:56:70:08:AD:1C:5A:6A:1F:E8:4F:DF:2B:CB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1v8PhruRTFZwCK0cWmof6E_fK8s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.50.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:7a:fd:0a:24:f8:d7:e6:e3:76:6f:55:58:d3:f2:aa:b4:d1:
ab:17:57:0d:26:e7:9c:14:a2:a4:7e:d0:3c:7f:f8:b8:df:c2:
40:04:5d:44:eb:fe:18:5c:15:f5:24:f6:84:8f:cb:b9:32:b6:
c1:ad:8e:ee:7b:d5:26:45:6d:39:8e:5e:f7:9b:0c:f9:e2:2d:
5e:da:89:e1:e8:f2:45:e0:9d:6e:68:e6:5a:c4:ec:7b:d9:ce:
c1:17:e0:68:e0:52:fe:83:10:3a:95:9a:c1:35:d8:b7:d8:e3:
f1:d7:b8:52:a5:47:03:19:29:8c:36:64:13:68:84:39:04:73:
9d:08:5a:54:16:ce:58:9b:19:35:4a:1b:fa:ca:31:9f:64:7d:
41:b6:9a:69:d2:80:de:0c:18:f5:b3:99:0e:cd:2f:34:de:e0:
6c:24:33:bb:77:44:fb:96:c5:c9:9a:ab:26:64:f9:97:7d:f1:
83:fa:b1:10:56:14:e6:53:04:75:dc:9a:f9:0e:5e:1c:ed:a4:
aa:81:b5:f0:41:3a:67:4a:c1:55:a9:12:d3:ad:8d:63:20:88:
75:87:cc:92:a5:b7:4c:a1:76:9d:ae:f5:1a:3c:98:a3:f3:74:
7d:35:98:fb:a6:f0:a6:29:80:99:3f:d0:57:3c:3f:82:1c:b0:
20:f1:9e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org