Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5_qqRv9BxwSYnZ-Q8J_9umzNmNs.roa
File: 5_qqRv9BxwSYnZ-Q8J_9umzNmNs.roa (raw, json)
Hash identifier: 3JWxyhHcp5nf/ZJGpra5+Xbi8WCwHUHil9pHdfYgPmU=
Subject key identifier: E7:FA:AA:46:FF:41:C7:04:98:9D:9F:90:F0:9F:FD:BA:6C:CD:98:DB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 183B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5_qqRv9BxwSYnZ-Q8J_9umzNmNs.roa
Signing time: Sun 07 Feb 2021 12:27:27 +0000
ROA not before: Sun 07 Feb 2021 12:27:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6203 (0x183b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:27:27 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E7FAAA46FF41C704989D9F90F09FFDBA6CCD98DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:30:9f:dd:72:72:bd:33:7a:e1:f9:dc:1f:
d8:f8:6c:dc:3b:a5:cf:c4:29:8a:eb:d4:1c:f2:cb:
9b:fa:53:1a:4c:6c:ed:56:a2:61:43:d6:58:7b:d9:
f1:45:9a:3d:9c:37:4b:f4:27:4c:cc:1c:44:f1:9a:
89:4a:01:e9:7c:7f:0f:8b:4e:fb:b7:0e:8b:fb:31:
67:52:d8:4c:70:55:99:65:d5:a5:4c:b8:31:08:ff:
4d:75:d5:28:07:91:75:a4:a7:c8:54:f2:34:e2:75:
06:e4:dc:f6:61:c5:fb:69:d2:8d:ba:f2:87:49:8d:
8c:40:92:50:7a:5c:4a:fe:d1:19:35:fa:fd:41:95:
e9:00:64:b2:d8:29:1f:a5:6e:db:cc:13:7b:c3:ca:
a8:15:7a:34:bf:d4:5a:36:03:f6:10:75:6b:28:c9:
14:d6:37:0c:67:03:c7:b7:25:32:cc:a4:3d:a6:4b:
9a:f4:36:e3:2c:5d:51:c1:90:b3:c4:8c:c9:8f:33:
aa:e7:66:45:5c:17:2e:af:92:2f:56:12:a1:44:cc:
d5:84:a1:1d:39:2b:e0:26:ba:79:46:53:2f:6b:ad:
97:9a:56:c2:21:9b:b0:11:1a:37:c3:7f:22:9c:b2:
fa:8c:f4:d6:c7:2a:5c:40:2b:4d:16:24:08:20:78:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FA:AA:46:FF:41:C7:04:98:9D:9F:90:F0:9F:FD:BA:6C:CD:98:DB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5_qqRv9BxwSYnZ-Q8J_9umzNmNs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.232.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:1d:60:49:29:11:8e:f0:8b:37:9b:b1:f3:c8:db:c9:51:bb:
47:27:e7:b5:76:e7:46:94:b5:67:7d:df:09:ac:df:d8:3d:18:
f5:43:f4:b4:eb:56:99:3e:87:b1:52:52:50:ac:5c:e0:e5:07:
37:91:99:c4:ac:68:ac:f8:a0:8f:ea:9e:2a:58:01:50:e3:4a:
b6:2e:92:1d:21:59:0d:ba:55:5b:c5:00:18:0b:ae:e3:93:51:
c1:b8:4d:b0:a5:b4:42:61:b9:29:a6:df:83:c7:96:67:f7:b5:
b0:3c:1a:58:f6:5d:66:ae:90:cf:34:cc:76:8a:50:67:1e:b3:
27:46:f7:94:e7:fb:7a:d1:d5:90:34:1d:bb:de:8b:9d:d3:91:
41:43:a2:80:ce:10:d8:a9:81:b0:fc:67:45:c8:bb:e4:48:97:
e0:6f:a6:52:da:b4:a2:d7:0e:10:82:a7:3a:69:c8:f0:6e:63:
40:28:7c:c4:26:f8:37:1d:10:17:52:c5:a7:1d:07:29:a5:d8:
e7:be:55:5e:20:63:eb:68:5c:d8:af:b5:d6:05:f5:e4:99:35:
64:10:64:33:80:e6:16:f9:bc:f6:ab:db:e8:10:f4:5e:a6:48:
46:66:b2:71:0c:48:e4:71:d5:11:eb:b1:5c:a4:fc:68:9b:8a:
73:ed:0d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org