Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/50uonTwdyjHOQhjjLKR8nqOeFfA.roa
File: 50uonTwdyjHOQhjjLKR8nqOeFfA.roa (raw, json)
Hash identifier: OVgPUtw9UAU2IB1nW0Pt2w8gFLP8/SMrd/pW2ofGDzU=
Subject key identifier: E7:4B:A8:9D:3C:1D:CA:31:CE:42:18:E3:2C:A4:7C:9E:A3:9E:15:F0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DBC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/50uonTwdyjHOQhjjLKR8nqOeFfA.roa
Signing time: Tue 29 Sep 2020 09:54:54 +0000
ROA not before: Tue 29 Sep 2020 09:54:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3516 (0xdbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:54 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E74BA89D3C1DCA31CE4218E32CA47C9EA39E15F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:ea:35:99:f0:49:e8:8e:d4:87:6d:b8:16:
4e:64:11:51:f2:2c:e2:69:88:51:6b:62:5c:1e:bd:
9b:34:10:f4:22:e1:9f:be:79:2f:51:23:a1:b2:dc:
61:71:c0:f6:a2:c5:d3:8b:af:63:d0:72:27:ac:4f:
3a:27:a4:d4:77:ac:1d:a5:11:1d:2b:fa:fa:70:5a:
ba:46:86:34:59:86:12:3d:78:6c:b6:ca:a9:f9:69:
ae:91:c1:dc:a0:76:d3:c3:7d:a6:a4:f5:46:e8:2d:
4f:59:40:fb:70:61:05:ae:52:61:42:2b:3e:f1:02:
b7:5b:2c:b3:06:9f:2c:8e:72:2d:c8:e6:f9:e7:ce:
67:3a:34:59:60:3f:ec:49:11:ce:76:9c:77:bb:92:
15:a6:f9:d8:2b:64:db:c9:25:43:3a:d4:12:0c:86:
69:82:b4:5f:d2:8a:66:7e:4a:6e:2d:ff:5c:3f:58:
a9:dc:cf:cb:ca:12:de:78:04:4e:b3:1c:5c:06:14:
a9:25:13:c5:8a:4c:b2:2a:38:97:06:94:07:b8:88:
d4:77:5a:d1:60:1b:5c:1c:5b:bd:c0:fa:f3:a6:c8:
49:97:ae:eb:d7:00:89:f0:32:3a:dd:aa:97:8f:65:
74:0c:8d:0f:a8:89:ec:18:49:4c:af:92:44:59:e3:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4B:A8:9D:3C:1D:CA:31:CE:42:18:E3:2C:A4:7C:9E:A3:9E:15:F0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/50uonTwdyjHOQhjjLKR8nqOeFfA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.136.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:71:37:2f:55:b2:25:d1:40:b9:6e:d2:0b:0f:66:f0:c3:62:
50:42:c7:a9:6e:14:d4:22:ac:50:6d:31:84:9a:e5:d6:8d:95:
5a:ad:58:12:1f:e5:0c:2b:97:21:61:cc:24:15:b7:a4:76:fd:
2c:cc:9a:b5:af:f4:99:0f:8d:3a:c7:b3:69:34:40:09:fb:cd:
bc:c0:b5:4f:34:1b:6d:00:56:39:aa:d2:87:fa:45:33:5c:16:
aa:ac:4a:74:35:e1:e8:d8:48:23:20:50:66:69:0b:87:7c:df:
a5:dc:1e:ca:20:f8:c5:5b:b5:ad:10:42:7e:92:e9:a8:ff:fe:
7b:54:71:9c:be:6e:73:0a:a8:55:eb:70:61:84:4e:95:6d:2d:
7b:34:79:20:d4:9d:06:fd:90:ad:db:0e:77:61:74:42:1b:df:
76:da:84:69:a7:16:94:0d:b0:43:3c:f1:29:b1:eb:cd:5a:cb:
e2:2b:e3:9b:98:ce:83:2d:61:f8:a0:01:ec:9a:17:d9:43:a5:
6e:0f:bb:e4:67:dc:87:b9:6a:39:9b:a9:59:ff:4c:3e:e6:12:
ea:56:b1:11:90:81:cc:07:63:09:de:b5:de:10:1d:22:73:9b:
5f:02:b5:73:8b:12:26:92:d1:b6:f7:4c:d3:1b:fb:2b:2d:31:
84:b3:67:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org