Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Qwsfw30TynqfVx6cGWphLaPvc8.roa
File: 2Qwsfw30TynqfVx6cGWphLaPvc8.roa (raw, json)
Hash identifier: BhhbBYdKtatTJqtZC8ltI+KgActhq4eGR/V69G0VdCk=
Subject key identifier: D9:0C:2C:7F:0D:F4:4F:29:EA:7D:5C:7A:70:65:A9:84:B6:8F:BD:CF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A68
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Qwsfw30TynqfVx6cGWphLaPvc8.roa
Signing time: Wed 29 Sep 2021 02:45:18 +0000
ROA not before: Wed 29 Sep 2021 02:45:18 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 118.232.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6760 (0x1a68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:18 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D90C2C7F0DF44F29EA7D5C7A7065A984B68FBDCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:32:d7:64:95:3c:7f:93:59:af:11:65:bd:
62:79:5e:53:d2:05:e2:ae:ed:0a:03:e1:b8:e4:d4:
1d:be:e6:a9:43:2c:ee:9b:b8:56:05:9a:04:75:7d:
ad:2c:e9:50:9e:cc:f4:f6:7b:3e:47:9d:ff:80:fe:
52:21:13:35:94:dc:01:53:15:b4:59:18:ce:ff:9f:
36:89:94:67:35:64:a4:de:22:d9:01:ab:0d:bf:4e:
08:ad:e9:71:58:02:28:35:8e:40:33:30:f3:06:0a:
39:e7:81:ba:5d:39:89:0f:d5:f9:5a:ea:e1:7b:f5:
b8:d8:ea:0f:78:c4:f4:f9:b5:8a:fd:5e:99:f5:fc:
02:56:3c:cf:90:97:fe:4d:e9:c9:6a:b1:50:ef:c0:
a5:47:5c:fc:ff:0e:ae:61:eb:92:7b:8f:55:3c:7c:
fe:88:dc:d0:e6:b2:3c:2b:15:34:35:ec:d6:60:be:
ff:4b:67:20:16:e2:f0:84:c8:e4:ef:48:f2:f2:d8:
ed:0a:c3:5f:32:45:ef:98:f4:86:15:9d:2c:fa:ac:
b1:3a:f6:51:40:09:8b:76:f3:09:c9:44:b8:14:55:
3c:c0:86:b6:b9:ba:da:aa:45:94:e9:f2:70:a9:71:
af:30:17:5d:76:1c:08:1e:8d:97:7e:ad:1e:ce:20:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0C:2C:7F:0D:F4:4F:29:EA:7D:5C:7A:70:65:A9:84:B6:8F:BD:CF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Qwsfw30TynqfVx6cGWphLaPvc8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.0.0/19
Signature Algorithm: sha256WithRSAEncryption
68:50:88:d7:ac:cc:5d:69:0d:8c:71:0f:bc:e4:5c:10:2f:ec:
95:74:b1:3c:09:ce:12:a6:02:e0:fc:03:2d:70:2d:82:3f:6b:
00:ee:a6:8c:47:1f:7c:3c:39:9f:06:c8:90:72:2c:83:a8:cb:
aa:12:59:87:e4:2c:a4:85:e5:2b:48:96:33:32:cc:53:c7:ff:
4c:5c:d1:9d:24:e8:9a:e1:86:0e:9f:12:21:bb:7b:ad:09:03:
1f:18:08:94:c0:b6:7f:62:2d:b9:93:12:a0:d9:ba:7a:48:36:
3f:cd:53:2b:d7:e8:35:18:cf:7a:49:0f:5f:10:06:9c:ce:5e:
a3:cc:e8:6f:68:4e:4e:43:b2:60:92:55:94:68:79:57:b9:68:
7f:2e:dc:18:d4:d1:e4:38:a3:42:df:9e:40:45:09:67:cc:c8:
bc:34:a5:2b:3c:80:02:74:b5:e0:d6:3a:73:04:c7:1f:87:b1:
c1:c4:c1:15:8f:c6:1b:dd:04:8f:75:20:5a:c3:ac:3a:ed:b8:
3a:dc:d4:e5:8b:af:e9:30:39:79:1a:19:e7:ff:45:66:70:7f:
34:8a:d8:71:53:cb:f5:39:0a:e1:10:80:60:a4:25:a2:49:8b:
3a:59:9b:f6:3b:e7:ba:fe:0a:a2:3f:88:7f:1f:0a:77:d7:2a:
3d:59:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org