Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6_yYhKqoZDcMqg4wB8EZDrQ_7L8.roa
File: 6_yYhKqoZDcMqg4wB8EZDrQ_7L8.roa (raw, json)
Hash identifier: +cOARM+5Tjull++LUhnJHtpisRoh8/3j5QxYnkLiivE=
Subject key identifier: EB:FC:98:84:AA:A8:64:37:0C:AA:0E:30:07:C1:19:0E:B4:3F:EC:BF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CBF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6_yYhKqoZDcMqg4wB8EZDrQ_7L8.roa
Signing time: Wed 29 Sep 2021 02:48:09 +0000
ROA not before: Wed 29 Sep 2021 02:48:09 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.232.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7359 (0x1cbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:09 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=EBFC9884AAA864370CAA0E3007C1190EB43FECBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:09:5e:0a:2e:8d:ba:d8:8a:c0:7f:fe:8e:
b0:19:14:bb:06:14:7c:2f:18:7a:59:c8:72:4a:60:
32:c0:65:2a:ea:f3:7b:73:fa:1d:57:b7:b9:3c:5f:
45:31:7f:19:0c:fc:7a:cb:ad:3b:48:39:52:c6:d6:
d6:70:c1:39:8b:a4:c3:14:9d:f6:c6:b2:22:f2:c4:
cc:5b:78:c5:56:12:0a:62:25:b5:7e:b9:06:f0:ea:
6a:27:9b:dc:4f:66:a5:64:84:9e:53:62:31:0b:1d:
32:27:33:42:12:7b:76:03:5c:4d:69:58:9f:f0:c2:
d9:c5:c8:98:0a:bf:d1:23:6e:56:b3:81:81:f2:1d:
95:e0:28:1e:d0:84:08:38:f5:5b:24:34:93:14:e6:
05:c8:31:1f:d5:c4:0b:f7:a3:7c:fc:45:e6:0a:d6:
cb:72:3b:cd:51:55:76:5f:04:78:fe:63:20:dc:4c:
84:06:8c:14:a7:3d:01:0d:27:a2:0c:d5:b8:69:6a:
f8:c5:de:cc:71:61:b1:79:7d:9b:2d:5d:2a:e6:3b:
45:b9:72:02:0d:4c:e9:59:9c:cc:d3:71:c8:e2:be:
75:6b:b9:90:36:bf:6e:f7:a5:3b:60:98:9b:ee:fa:
45:7e:41:fd:f0:52:d9:a0:56:bd:70:0b:51:b2:a8:
6c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FC:98:84:AA:A8:64:37:0C:AA:0E:30:07:C1:19:0E:B4:3F:EC:BF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6_yYhKqoZDcMqg4wB8EZDrQ_7L8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.192.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:8f:78:09:38:75:72:23:6f:76:4c:e9:db:52:09:95:94:bb:
f8:e0:50:af:33:f3:ad:cc:47:ce:50:04:6a:63:1c:3f:3c:55:
85:71:95:25:c6:10:62:e5:be:6f:d2:09:b7:89:fd:44:fc:7c:
1e:67:91:e6:02:37:a9:0b:5a:22:a5:df:92:20:b6:2e:45:35:
9f:7c:07:fa:c7:62:fe:79:96:9b:56:35:c1:a6:5c:b4:c6:f2:
58:ea:cc:28:87:50:27:60:f3:ec:bc:29:55:83:ae:d7:ac:39:
70:93:f3:49:f2:16:86:d9:28:5b:d7:26:c1:50:2a:92:a2:65:
d0:5a:cc:8b:d7:8a:af:b0:a6:50:53:4e:fa:7e:dc:89:bf:12:
22:9b:bc:54:1f:eb:7b:b0:6e:c5:e6:d5:be:9c:11:ef:21:cf:
cb:5d:48:af:64:d6:60:b0:1d:7a:fc:c1:d7:c9:1b:bc:36:d5:
47:59:d1:08:e1:1f:c1:af:89:5d:4d:01:ce:e5:20:b0:7d:3a:
cc:c6:e1:56:c1:a1:05:44:95:f9:b9:be:1d:fa:6c:e3:0b:2f:
d5:7a:1f:dd:f5:da:ac:b1:45:e4:76:82:8b:88:b5:4b:78:15:
79:2c:63:c2:2e:98:e4:f4:40:dd:ea:57:f2:72:4d:9d:23:27:
44:70:49:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org