Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4nibF_Vzwnau4m7V-r7ZE3JGLzc.roa
File: 4nibF_Vzwnau4m7V-r7ZE3JGLzc.roa (raw, json)
Hash identifier: 2X6ONgI+kgfC5vR+ro0QvwftogPek1JeGPdgsph89Ek=
Subject key identifier: E2:78:9B:17:F5:73:C2:76:AE:E2:6E:D5:FA:BE:D9:13:72:46:2F:37
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1857
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4nibF_Vzwnau4m7V-r7ZE3JGLzc.roa
Signing time: Sun 07 Feb 2021 12:28:28 +0000
ROA not before: Sun 07 Feb 2021 12:28:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6231 (0x1857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:28:28 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E2789B17F573C276AEE26ED5FABED91372462F37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ae:fd:39:99:84:40:20:88:d1:06:d0:7e:c4:
f2:8f:53:d3:8b:40:b5:6f:69:f9:50:46:3f:70:15:
61:ca:40:91:fd:3d:55:f0:8f:1d:fb:5d:3a:25:27:
bf:46:f6:76:d7:2e:35:48:33:1f:1d:8a:ab:4e:06:
0d:c7:2d:c6:29:7a:f0:98:3d:a8:36:96:af:65:0a:
9d:33:c0:d9:48:97:52:a1:d2:21:93:6a:f9:6f:8c:
9c:f5:5d:7c:82:65:25:84:a0:fa:25:6e:9d:ec:7a:
34:ce:9c:92:ae:ca:70:c2:19:59:5a:ea:27:da:7b:
51:8a:6b:87:65:24:62:c3:30:c4:00:3d:27:67:da:
8e:16:4d:f1:63:16:0d:ee:bd:dc:c3:60:1e:53:8e:
70:9d:91:0c:5f:9b:1f:c7:84:f3:5c:74:a3:cd:7b:
bc:b0:47:1b:f2:8e:1b:bf:42:f8:5d:e6:85:15:2b:
7b:f1:92:3c:e3:88:3e:76:d8:db:39:52:f2:e5:8f:
a9:ae:90:89:4d:ca:53:f4:89:c1:04:55:95:e2:86:
b3:e4:fc:81:97:39:fb:ae:66:56:9b:36:3c:b6:ce:
0b:bc:05:a1:03:2b:12:85:16:75:f3:c5:78:9e:8c:
bb:15:04:81:bd:c2:61:ee:c1:a6:6e:23:f2:39:d8:
9d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:78:9B:17:F5:73:C2:76:AE:E2:6E:D5:FA:BE:D9:13:72:46:2F:37
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4nibF_Vzwnau4m7V-r7ZE3JGLzc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.56.0/22
Signature Algorithm: sha256WithRSAEncryption
71:28:a2:cd:c9:f3:3a:94:d7:17:00:3b:c4:18:22:db:c6:88:
45:eb:65:98:f5:56:eb:5f:72:36:f2:57:41:d2:f9:16:f6:6d:
ae:32:a6:43:b0:26:44:50:60:47:2a:86:e1:32:12:b6:01:29:
91:97:8e:b1:96:a1:f9:8a:5b:6e:12:7b:2d:91:1c:f6:9e:4d:
30:10:70:93:50:bd:0b:84:ae:8f:61:d5:9d:e6:c6:c2:ce:5f:
5d:19:2a:6e:7a:1d:15:92:6b:24:67:e0:ca:db:4c:ce:c9:b1:
4b:77:c9:fd:ba:93:cb:5c:43:3d:f3:06:df:0c:51:0f:f9:72:
55:9c:19:61:f5:72:8d:4e:a3:a2:32:fe:1a:02:d2:16:b2:98:
8a:f3:64:be:98:64:5e:64:03:b7:f9:0a:74:70:b4:d0:9b:46:
f6:09:69:05:9a:a4:7d:b4:1d:04:0d:85:d4:05:d5:e7:d4:94:
f0:66:99:35:7f:5b:eb:41:21:43:99:c1:b6:0e:ce:e2:c2:bd:
b8:36:68:c8:23:20:0a:7b:3c:9c:34:d9:27:ef:38:6d:c6:86:
7f:45:76:d0:b5:70:4d:90:61:f3:37:46:af:cf:ab:4a:de:00:
94:ef:7c:a1:32:39:97:7a:78:bc:ee:f6:59:73:7e:9e:68:f5:
e6:20:30:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:09 2023 by rpki-client on console-ams.rpki-client.org