Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BBdMJp-R6R-V4btvST4yAqLCWcM.roa
File: BBdMJp-R6R-V4btvST4yAqLCWcM.roa (raw, json)
Hash identifier: S/2rSHjBIsuVJVkwRyoMBvA9MnKG7MjkCotj6jLclPc=
Subject key identifier: 04:17:4C:26:9F:91:E9:1F:95:E1:BB:6F:49:3E:32:02:A2:C2:59:C3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 17BF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BBdMJp-R6R-V4btvST4yAqLCWcM.roa
Signing time: Sun 07 Feb 2021 12:23:14 +0000
ROA not before: Sun 07 Feb 2021 12:23:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6079 (0x17bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:23:14 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=04174C269F91E91F95E1BB6F493E3202A2C259C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:68:8d:dd:a6:7c:27:e7:63:65:e6:15:d7:
5d:cc:b7:dc:a8:8c:5c:c4:cf:77:89:31:0a:3e:ba:
1f:88:97:33:f1:40:1f:d5:4a:97:a9:f2:b2:9c:e3:
e9:f3:a2:1f:f1:5c:76:1a:27:a0:d2:96:00:94:da:
d7:1f:1e:02:87:a0:11:f4:6a:69:23:d4:c8:24:ef:
bc:bc:66:26:5f:5e:6b:a2:dd:4e:34:c9:37:3f:5b:
a1:73:f3:ec:6d:c1:d9:4f:89:f6:a1:09:7f:33:f2:
97:e6:c2:5d:bc:0e:6b:7a:eb:71:ed:2b:b6:79:ae:
53:32:a1:d5:73:f1:8f:b3:cb:be:cc:53:d8:75:c0:
d0:99:8c:cb:06:22:26:01:13:b5:dd:bc:60:9f:3a:
92:4d:25:88:f7:c7:27:f5:61:51:4a:26:2c:e3:34:
8a:03:60:ca:49:42:09:13:0b:65:5d:1a:6c:1a:f9:
6d:21:d3:68:2f:57:38:5f:50:b2:df:f3:22:1f:f7:
6a:0f:b1:ce:7e:03:51:76:94:ad:bb:ff:e5:da:da:
80:96:47:20:d4:a1:69:af:33:2d:e4:76:d0:2f:3a:
8c:1e:60:a8:61:28:e2:f7:a7:41:7d:bc:86:9e:c4:
97:a4:02:15:91:ec:10:63:27:61:70:3d:26:a1:c3:
e2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:17:4C:26:9F:91:E9:1F:95:E1:BB:6F:49:3E:32:02:A2:C2:59:C3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BBdMJp-R6R-V4btvST4yAqLCWcM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.160.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:ad:3c:d9:34:92:3b:66:23:07:ba:fe:d4:f5:ec:cc:bb:81:
ab:e2:97:b2:0e:29:54:9d:4b:82:ee:f0:9b:9e:2b:ee:97:c5:
a6:2d:61:ac:26:a2:36:46:fe:ee:29:ca:35:91:66:94:a8:22:
1e:e3:fe:de:39:c3:9f:79:43:cc:78:97:50:d6:f3:5d:23:bf:
c4:c5:26:08:1b:9a:ce:48:65:ab:15:2c:9c:7d:66:b1:39:2a:
d2:6f:27:a0:a6:06:73:2a:d5:91:37:40:fc:d6:e0:17:6f:e8:
0c:09:f0:a7:d9:1d:3e:6e:27:1d:22:34:9d:29:c6:59:48:72:
21:64:8f:da:48:ea:a2:f9:a3:3e:db:f4:a7:fd:e0:6b:af:92:
15:ce:e5:2d:bb:1d:55:c9:af:5d:9c:d4:4d:2c:be:a8:ea:16:
3f:ef:1e:c5:2f:3f:13:cd:09:d5:79:47:ed:20:56:3e:b0:f5:
99:e0:da:23:b0:e3:53:cc:01:4f:fe:e6:98:5c:02:7a:c3:c1:
c7:d9:ba:9e:8d:1b:8f:fa:8d:81:1b:5f:a4:0f:35:6f:a1:85:
97:3f:2d:4a:2a:e5:f3:3a:d0:cd:41:5e:eb:20:68:44:0b:d4:
24:94:11:f7:0d:35:4d:1b:8a:28:b2:7e:57:12:34:30:1b:6a:
cc:bd:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:11 2023 by rpki-client on console-ams.rpki-client.org