Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8t21gYu3aEvFfEoCJUFWRDYUQOw.roa
File: 8t21gYu3aEvFfEoCJUFWRDYUQOw.roa (raw, json)
Hash identifier: 88n3DGdQrBftwkDGqm3LwLNXFDifdM64R59L0dAZGrI=
Subject key identifier: F2:DD:B5:81:8B:B7:68:4B:C5:7C:4A:02:25:41:56:44:36:14:40:EC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 170B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8t21gYu3aEvFfEoCJUFWRDYUQOw.roa
Signing time: Sun 07 Feb 2021 12:16:14 +0000
ROA not before: Sun 07 Feb 2021 12:16:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5899 (0x170b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:16:14 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F2DDB5818BB7684BC57C4A0225415644361440EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:82:8a:04:37:b3:0a:1e:6b:69:a1:ab:9e:
1c:85:0a:7b:f0:3b:3b:4a:61:a1:ba:13:7b:14:df:
20:87:9c:e2:e7:ae:31:df:ca:02:0f:0c:d5:fc:ad:
c7:a9:85:f7:3d:68:61:33:d2:fd:b2:45:a6:09:6d:
e5:22:a6:cf:42:68:0d:99:8b:d0:bc:d6:bf:0c:0a:
eb:a8:e0:7a:d9:c1:f2:99:e7:52:9a:da:d8:fa:1b:
5c:b6:c2:f0:73:6a:27:74:22:26:14:b5:5e:ee:3f:
b9:65:17:7c:65:2f:2d:b0:04:fb:a0:6b:12:14:53:
ec:11:ea:5a:83:b3:d4:a1:ba:0c:ed:4e:7a:29:ef:
ed:b5:1e:0a:f3:58:76:fd:c1:b1:26:de:15:41:23:
29:f3:cc:c3:85:35:3e:dc:53:f0:ad:d9:c1:bf:fc:
3e:64:f5:ec:9b:1c:da:b6:0d:73:f4:32:19:70:ee:
7b:e3:76:a9:a2:0a:72:f6:cd:e9:48:a2:65:88:ad:
70:cb:42:20:a2:8b:6a:7b:ac:27:33:02:30:7f:86:
1b:c6:93:65:b9:fc:0f:af:6d:18:aa:be:2e:71:e5:
36:af:f6:62:02:1a:ad:29:70:6b:f3:75:a4:7e:6d:
e3:86:86:9d:6a:bc:0b:3d:ff:af:8c:b7:a6:8c:c2:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DD:B5:81:8B:B7:68:4B:C5:7C:4A:02:25:41:56:44:36:14:40:EC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8t21gYu3aEvFfEoCJUFWRDYUQOw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.211.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:1d:4a:88:41:0b:3b:71:51:50:51:0f:0a:a0:df:bb:04:59:
15:d5:44:c0:83:80:3c:6e:d1:1e:dc:da:f9:86:12:f5:ba:b6:
0b:10:cb:9a:50:25:32:76:de:ae:c3:8a:1e:2a:f0:31:f7:98:
d7:05:8e:7f:7f:e2:a3:7c:ef:42:19:99:e6:57:02:a3:ce:ef:
48:1b:dd:27:3d:79:e6:99:8a:97:fa:31:7a:34:d9:7c:dd:78:
3a:11:2c:60:6b:8c:a6:3a:ec:ca:b4:f6:30:ff:92:31:9f:73:
18:17:4f:78:ab:f0:23:71:78:a6:c1:0a:c5:5f:78:76:a8:f4:
db:aa:ba:ad:29:74:f5:ab:28:14:91:2e:77:5d:b6:56:27:bc:
d1:c3:a0:7f:c0:39:d8:62:78:5a:14:88:f2:a0:15:df:ec:7d:
0f:30:93:47:79:d8:08:0b:0f:78:db:57:fe:51:41:54:53:3a:
32:dc:07:7c:21:df:d3:95:5d:dc:33:3e:b9:b9:77:59:07:1a:
4f:a0:ce:ea:a2:e7:04:db:d4:70:15:23:f1:de:41:51:47:ef:
dc:23:5e:3a:31:5f:28:d6:a6:6f:89:b8:98:b3:50:30:53:fc:
96:e1:ac:66:22:de:c9:c8:25:51:ee:90:27:dd:a1:33:de:59:
ff:c8:27:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org