Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7hPclc_Im4hgmzQVEymU8WmcSAM.roa
File: 7hPclc_Im4hgmzQVEymU8WmcSAM.roa (raw, json)
Hash identifier: KqVQbIsXDf0RT42yXv+BLG6YT6dq9MUwubRy2o2qoXk=
Subject key identifier: EE:13:DC:95:CF:C8:9B:88:60:9B:34:15:13:29:94:F1:69:9C:48:03
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2141
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7hPclc_Im4hgmzQVEymU8WmcSAM.roa
Signing time: Fri 25 Nov 2022 04:39:42 +0000
ROA not before: Fri 25 Nov 2022 04:39:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8513 (0x2141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EE13DC95CFC89B88609B3415132994F1699C4803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:82:40:bd:1a:13:7d:69:de:1c:bc:60:3a:
d7:34:05:02:ab:7f:a5:8f:88:e8:80:0e:a7:04:f5:
c7:2e:02:97:8c:e3:47:0d:73:6c:fd:d5:5a:31:53:
00:e4:b3:7f:c7:49:2c:6c:42:c3:90:93:53:02:20:
4d:89:8c:dc:4b:9d:47:75:e4:dc:82:7b:b0:8e:cb:
ba:71:44:d9:ca:cb:20:2f:20:cc:73:9a:98:9d:e1:
4a:a8:ee:95:3d:b4:b9:f2:01:df:2e:4a:35:1a:8e:
3b:eb:f4:2c:90:62:81:df:32:d0:ff:d4:19:e6:08:
9b:29:da:2c:ee:90:2e:50:a4:96:c4:c5:75:7a:17:
94:1b:ce:4a:04:77:7e:14:bc:5d:2f:45:e5:7e:63:
d6:ea:1b:32:55:4d:da:74:b4:2f:5f:f9:92:ce:82:
9b:30:5d:3f:2d:c8:fa:6d:ca:33:ad:cd:b2:dc:95:
d6:df:ad:b4:cf:39:94:da:d8:3e:bf:e9:f8:52:f2:
96:3a:6a:80:ae:99:2e:d5:81:c4:a9:56:d6:ac:ad:
6f:2d:25:ad:30:80:02:b0:6a:c6:c6:06:b7:0a:8c:
7a:03:b4:27:cc:52:94:8a:18:3c:d0:e1:fb:cd:1b:
93:ba:f2:e9:f6:c6:bd:44:5e:db:69:48:ec:7b:52:
fa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:13:DC:95:CF:C8:9B:88:60:9B:34:15:13:29:94:F1:69:9C:48:03
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7hPclc_Im4hgmzQVEymU8WmcSAM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.216.0/21
Signature Algorithm: sha256WithRSAEncryption
88:7f:70:cb:e3:d2:c5:59:17:8b:e8:a5:1b:e8:97:62:92:ca:
9b:21:94:8b:c6:3c:7f:8a:35:5f:05:c1:d1:b6:4a:5e:cc:4a:
74:5f:2a:44:05:0b:bd:01:99:20:d2:66:63:52:76:f0:6d:e9:
52:82:a7:8e:9b:33:66:34:88:be:54:1a:2a:cb:c5:48:ef:66:
94:27:0f:15:9b:5b:cc:ac:f8:60:04:4e:f5:b2:24:ff:70:07:
6f:60:9c:a0:09:fc:8a:f1:1b:7a:43:05:eb:18:3f:6a:6d:af:
57:b0:d6:c1:68:e6:70:54:37:60:84:78:6c:60:03:d5:47:2b:
98:2e:1e:6f:64:a5:b1:e0:19:8b:60:b1:43:47:ef:db:0c:f7:
ce:6c:81:4c:b4:5c:bf:50:f9:9f:c6:0a:04:cd:ab:ab:c2:42:
71:02:b2:f4:53:c5:cf:c9:48:c0:7a:b7:8f:0c:bb:c4:8a:fe:
43:f7:3e:d5:3f:85:c5:a2:df:66:10:2f:c0:f8:3f:0e:94:c1:
45:7c:51:71:fc:97:43:26:3e:1a:d8:d6:54:89:6d:71:d6:c2:
b6:28:f0:a5:bd:79:9a:53:8c:45:8d:a2:df:4c:c5:ae:6c:3d:
52:25:4d:06:fc:b9:57:40:92:6c:70:17:81:54:d4:4b:26:c0:
83:2a:f7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org