Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5r1gICKkflk2gikATYKSruTsAa4.roa
File: 5r1gICKkflk2gikATYKSruTsAa4.roa (raw, json)
Hash identifier: 7XSss5lXT7+rSNgs3TDwCoYZ8XR+2GHmMGav8+VOSBE=
Subject key identifier: E6:BD:60:20:22:A4:7E:59:36:82:29:00:4D:82:92:AE:E4:EC:01:AE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DF1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5r1gICKkflk2gikATYKSruTsAa4.roa
Signing time: Tue 29 Sep 2020 09:55:09 +0000
ROA not before: Tue 29 Sep 2020 09:55:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3569 (0xdf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:09 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E6BD602022A47E59368229004D8292AEE4EC01AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:af:6a:57:fb:40:3d:0d:2e:62:0c:15:7c:
47:d6:60:b3:92:0e:ba:7b:82:7a:3e:6c:f2:1c:4d:
fe:b1:31:27:eb:a4:44:9a:49:1c:32:d5:f6:fa:f7:
e3:53:5e:27:61:a4:2a:af:6c:20:a2:21:e1:67:5a:
1a:c2:77:67:a3:4e:16:91:5b:ae:9d:e8:0f:3e:48:
2a:92:05:e9:0b:ef:8f:67:26:0b:d3:c1:95:37:78:
10:0a:e2:15:d7:95:ac:b4:35:e4:35:bc:36:93:22:
0b:90:a8:10:2a:a2:64:a8:06:1f:98:3d:62:8c:20:
cb:8c:87:3e:8c:7f:1a:90:ff:31:75:4e:cd:62:81:
c0:6b:06:59:7d:8e:25:98:bf:a6:3d:4a:52:bd:a1:
ea:90:2c:1c:e0:bf:2c:cf:82:16:b2:9e:e8:91:2b:
87:a4:e6:4c:2f:88:2e:d5:cf:eb:e0:8a:45:72:dd:
bf:71:0e:64:57:df:ac:6e:9a:2b:55:63:3c:1e:03:
0c:d7:b7:35:6c:f2:94:56:2a:d4:e6:8f:fa:fe:70:
f1:5c:b0:96:0b:77:18:75:94:b8:70:bd:28:6a:86:
54:96:06:5a:07:2f:7b:d1:3a:c6:16:90:c2:a7:10:
4c:d9:6b:75:ab:f3:f9:f0:98:c1:be:36:eb:67:06:
2d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BD:60:20:22:A4:7E:59:36:82:29:00:4D:82:92:AE:E4:EC:01:AE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5r1gICKkflk2gikATYKSruTsAa4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.102.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a7:d3:f3:85:8f:8e:5d:ed:d9:f6:40:c5:f7:9c:ce:a9:5c:
8e:b0:ba:22:d7:10:f3:c1:f7:44:50:9c:65:0c:92:76:e2:30:
ba:6e:d8:f5:f7:3e:3b:87:9c:fb:7e:e0:8a:3f:ca:c2:f0:b1:
4c:03:b1:02:f8:15:42:d1:65:a2:c0:61:20:ab:2e:4b:78:d6:
c6:16:12:1c:c7:8e:9e:f8:e3:7d:7c:b4:a3:5a:b7:45:26:2c:
e1:3e:74:d6:3e:2f:a9:9d:a2:3c:95:ae:08:20:b7:4d:af:75:
af:a1:f2:12:7b:4f:77:e7:e3:d5:16:46:5d:aa:e4:c3:d5:31:
cb:75:a3:ba:a7:3e:28:33:8e:3b:56:64:8c:20:44:e6:6d:1e:
38:f2:f7:31:11:a6:dd:0e:2b:b2:78:2e:53:b8:fc:fd:af:7e:
47:3c:e9:5c:38:60:f1:83:a5:ef:60:f1:44:13:d9:02:ba:a1:
d9:31:03:49:08:29:17:a0:d2:c8:12:4c:a9:d2:b7:25:a0:77:
57:db:84:1a:1f:18:bd:44:08:d1:8f:42:bd:b5:b2:85:4b:e9:
fe:f5:51:1d:f1:d0:78:af:b3:76:c6:9a:06:86:c9:4c:26:5a:
3a:a7:ae:60:72:a6:c8:71:7e:ed:be:0b:b8:a7:11:97:19:42:
4a:4b:ce:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org