Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9lVStJxLZFgrQdvriz1vv_TYi1g.roa
File: 9lVStJxLZFgrQdvriz1vv_TYi1g.roa (raw, json)
Hash identifier: 7A4sigUOUdRIDfSX0IiqLe+z6JqYzFuqKowMVEGuwOM=
Subject key identifier: F6:55:52:B4:9C:4B:64:58:2B:41:DB:EB:8B:3D:6F:BF:F4:D8:8B:58
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D10
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9lVStJxLZFgrQdvriz1vv_TYi1g.roa
Signing time: Tue 29 Sep 2020 09:54:08 +0000
ROA not before: Tue 29 Sep 2020 09:54:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3344 (0xd10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:08 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F65552B49C4B64582B41DBEB8B3D6FBFF4D88B58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:2c:e3:79:21:f1:f2:a2:c5:29:af:ea:57:
e8:79:66:22:29:7b:c5:46:98:82:62:bb:69:0f:eb:
89:29:aa:71:f1:e2:cc:2f:42:8f:e1:d0:ce:2d:f1:
18:63:e8:b3:34:50:e7:c1:85:f4:71:24:1c:cb:e5:
0a:c2:95:35:a0:25:88:6e:f6:24:73:77:12:d3:b6:
09:53:1e:a8:de:1a:bd:15:dc:3f:98:13:5c:5e:35:
33:fc:a1:ac:31:48:d2:90:d5:9d:bc:d4:6f:e4:a5:
f2:6d:19:ff:89:4e:65:42:94:ec:f4:7f:6f:56:75:
2a:01:f3:7b:14:16:a5:c6:a6:40:c2:ee:49:ab:01:
7a:2f:31:a0:ce:8f:9f:73:2b:8d:2f:e4:a8:93:b9:
cd:4e:1c:ad:9d:6c:48:5b:df:dd:ea:ee:77:5f:5f:
94:84:d9:59:8c:39:bf:66:46:42:e2:ba:40:d3:43:
73:4e:2e:e8:c1:a1:d2:ca:13:09:1a:85:50:71:15:
8e:05:72:d7:dd:50:94:8a:42:4f:c2:0f:c7:90:f6:
d0:6c:7c:79:ca:f6:69:45:55:de:0a:a3:63:2d:08:
66:bd:ce:a1:59:2d:09:02:2b:ac:ed:cf:3d:63:4e:
2e:2a:6d:cb:08:35:bd:31:42:70:6c:a5:24:2a:6b:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:55:52:B4:9C:4B:64:58:2B:41:DB:EB:8B:3D:6F:BF:F4:D8:8B:58
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9lVStJxLZFgrQdvriz1vv_TYi1g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.240.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:08:b2:67:fc:36:47:01:10:c1:d1:5c:68:48:ae:12:30:51:
95:dc:ad:64:dc:da:74:11:39:05:0d:ab:d9:5f:4a:a6:1e:80:
d2:11:3e:01:3b:88:31:ea:73:ec:64:36:50:45:60:f1:1d:f9:
e4:d4:64:c0:a3:d3:ce:af:9a:36:6a:5d:f6:2e:20:34:80:bb:
3d:66:42:fd:95:c0:a6:a3:b1:33:7d:ff:88:3d:43:36:a1:9c:
2c:8e:28:22:66:5f:f1:36:ad:73:25:21:3c:a8:41:5b:e8:c6:
29:eb:79:3d:cb:13:8e:c0:46:df:da:a6:74:8b:8b:90:b7:bb:
5f:3c:34:2c:d0:88:b9:50:29:3b:dd:79:b6:83:ae:6a:75:58:
b9:04:86:28:89:d0:da:6d:b6:79:25:a6:ee:af:21:e9:d3:29:
0c:81:b5:4b:b8:19:bf:4d:0c:b3:97:15:30:ab:46:b1:a5:f3:
c4:b7:6d:97:31:c9:3f:3a:53:d5:26:b3:48:42:d9:4d:27:9a:
f6:c3:88:76:9f:c1:8a:22:d8:f9:30:e8:fc:7c:fb:56:ef:bb:
fe:ab:44:d4:a2:6b:2a:20:4a:98:13:6f:5a:9d:6a:04:93:1c:
c4:d3:52:51:56:b7:8d:a4:85:d9:90:bc:d2:e9:88:fa:d3:11:
37:f1:81:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org