Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7uVtpbuGbpdlVBN2ASXjAu7WvSA.roa
File: 7uVtpbuGbpdlVBN2ASXjAu7WvSA.roa (raw, json)
Hash identifier: xDCLAqD8HOSAriT+Tr3jCvcer9lzwGQYLDhoLtmE2og=
Subject key identifier: EE:E5:6D:A5:BB:86:6E:97:65:54:13:76:01:25:E3:02:EE:D6:BD:20
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0ECA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7uVtpbuGbpdlVBN2ASXjAu7WvSA.roa
Signing time: Tue 29 Sep 2020 09:56:08 +0000
ROA not before: Tue 29 Sep 2020 09:56:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3786 (0xeca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:08 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EEE56DA5BB866E97655413760125E302EED6BD20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:ef:7d:b3:e4:7f:25:be:ae:7d:63:94:70:
f3:57:51:54:e8:6f:37:a4:f9:2f:b2:93:3c:a4:5c:
66:1b:b2:9e:7b:c4:da:fa:a6:63:d3:76:1c:a0:9f:
b8:88:ea:23:01:d9:25:6c:22:60:a6:6f:05:7d:4c:
74:82:4a:36:23:0b:83:d0:93:e5:d7:49:f4:88:6a:
da:92:92:3a:ea:6c:4d:24:ba:0d:1c:e4:09:3f:43:
1a:32:29:10:ae:03:a2:79:7b:90:5b:76:38:9c:a2:
3f:38:9d:7f:65:c2:83:1e:e5:79:9f:6f:e4:d5:f0:
bd:36:85:a9:ee:d4:56:23:2b:6d:d1:ef:28:ee:89:
50:4e:2d:97:fd:3f:bc:18:5c:ce:59:b2:d5:23:9d:
d2:c2:2a:cb:2a:18:b2:c7:5c:88:91:e9:b0:70:30:
30:53:4a:d3:ca:eb:75:cf:cf:64:a1:16:7f:60:03:
4c:38:87:5e:a7:4d:b0:0b:83:46:f3:26:f8:ab:68:
b5:37:4a:38:3a:f7:ce:63:13:29:ea:54:30:7d:d6:
a5:84:65:44:ee:ec:be:c6:59:84:53:12:5d:e1:a6:
4c:0f:f7:c7:0a:1d:7e:aa:0b:6c:85:3c:bf:27:4a:
d2:e9:96:18:17:07:ee:c0:5d:05:8e:df:94:4a:99:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E5:6D:A5:BB:86:6E:97:65:54:13:76:01:25:E3:02:EE:D6:BD:20
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7uVtpbuGbpdlVBN2ASXjAu7WvSA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.56.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:20:60:41:36:1d:43:fe:6f:21:72:f2:27:6e:f0:e2:37:0b:
2c:ea:4a:c7:99:3b:e5:bd:72:55:1a:6e:f5:38:43:0e:32:74:
76:14:46:2a:3e:85:90:c7:86:3c:38:78:68:5e:c4:aa:0e:60:
53:f4:31:f6:d8:d9:f4:b6:e0:52:52:1f:eb:ca:48:5f:97:e0:
cb:e5:ad:98:2c:e9:d4:28:f7:70:fc:3e:5c:bc:82:66:a7:89:
41:1f:b0:3e:9a:41:e2:bb:18:3d:0b:55:bb:a6:9c:cf:1e:1e:
d7:62:02:59:61:1c:6b:6e:4f:8a:2e:d7:97:2a:d3:b6:a0:ba:
76:37:e3:48:f3:ac:35:26:2b:d7:a0:3e:01:ad:c8:3e:c8:ef:
f0:10:64:08:5e:1e:b5:c1:8a:7f:ab:0a:a6:cd:5e:c1:5f:99:
85:b4:12:8d:f8:7d:db:b5:2b:12:a6:0b:aa:a0:2e:c4:33:fa:
0c:1b:0c:47:80:55:60:5f:33:54:e5:c9:c9:ce:c4:47:25:f6:
b2:5a:28:3a:20:09:b3:1b:22:1c:4c:e7:6e:4c:40:af:03:07:
93:29:d7:4a:b3:c9:5d:13:51:31:14:f2:51:b4:0d:3d:fb:d7:
15:77:cf:bc:9d:5f:4b:5f:3c:70:b5:9f:28:2f:3e:30:00:16:
51:21:35:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org