Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BTQ9c5WDp5RVNcFdh4DItMCl098.roa
File: BTQ9c5WDp5RVNcFdh4DItMCl098.roa (raw, json)
Hash identifier: in81RXGRF3sCcNivfERHVi14qEgGOa9mO242r9SP/jE=
Subject key identifier: 05:34:3D:73:95:83:A7:94:55:35:C1:5D:87:80:C8:B4:C0:A5:D3:DF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1845
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BTQ9c5WDp5RVNcFdh4DItMCl098.roa
Signing time: Sun 07 Feb 2021 12:27:49 +0000
ROA not before: Sun 07 Feb 2021 12:27:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6213 (0x1845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:27:49 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=05343D739583A7945535C15D8780C8B4C0A5D3DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:d1:77:9a:54:07:04:b5:2a:6b:17:2c:ad:
06:1f:30:63:49:0b:14:0a:55:63:17:e9:53:43:89:
dd:8b:f2:8a:9b:52:11:af:f2:7e:d8:c4:2a:cb:73:
62:e3:1c:6d:4e:06:95:44:06:8f:7a:2c:c1:be:a7:
2b:48:24:3a:2d:af:a2:cd:7d:07:09:c5:05:6d:89:
8c:52:66:46:80:f5:a1:5b:51:da:d6:ec:f8:2d:69:
68:fe:92:64:8b:4b:c0:da:88:e5:07:e8:4b:56:51:
c9:0a:51:05:af:0b:e3:be:66:63:bb:c4:fe:6a:b5:
3a:18:ad:70:e2:18:c9:5c:aa:db:e0:7e:3d:fc:f8:
c4:83:32:66:89:a2:f5:ee:6e:28:8d:d7:4f:d2:eb:
7c:08:e7:12:0d:3b:b2:ce:99:d0:bd:28:40:84:09:
c2:ac:22:b6:ec:5a:1b:a4:5c:e1:4c:4b:e0:68:bb:
a2:db:30:28:e1:55:83:22:d7:38:c0:98:85:fd:9e:
98:f7:04:40:de:8a:c3:57:6b:b6:d7:79:fe:de:22:
07:76:06:71:4c:3f:f9:71:20:a4:02:c0:63:02:4f:
dc:2c:2e:0b:24:4a:2c:2a:dd:fb:fc:d4:26:1b:d3:
31:ed:be:83:8c:a9:1a:44:b5:d1:b5:86:9e:4d:95:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:34:3D:73:95:83:A7:94:55:35:C1:5D:87:80:C8:B4:C0:A5:D3:DF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BTQ9c5WDp5RVNcFdh4DItMCl098.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.132.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:c8:93:c9:f0:bd:2b:88:dd:44:94:57:c8:a7:49:73:09:78:
2a:7a:52:a5:7d:a5:7e:e3:e8:df:8f:e1:e6:40:7e:cd:73:eb:
67:61:e3:af:88:c6:a9:61:6d:e7:84:ea:83:59:0a:55:e5:c7:
78:e2:5f:a7:ae:eb:20:c6:0d:1d:7d:72:ae:f1:cb:fa:cd:94:
37:37:35:8f:b5:5f:79:df:c0:7c:02:c4:83:dd:16:41:13:f8:
bc:e5:97:2b:20:53:62:10:6d:38:40:bc:80:c0:71:f6:f2:8c:
4d:f0:3a:dd:28:8e:c6:f9:d4:6a:f0:89:04:fe:cd:29:72:f6:
bb:c0:cf:90:67:b0:3d:4a:4c:52:25:ae:98:c4:05:2b:5c:eb:
77:b6:a9:8a:32:2d:f9:58:e8:77:34:ef:aa:31:be:c6:30:0e:
2b:d6:76:19:46:30:43:81:52:95:04:49:b8:10:84:60:3b:73:
14:c6:44:24:e2:b7:06:79:53:ae:05:7a:c8:af:7f:dc:81:04:
e1:33:54:33:9f:71:64:e8:7c:17:75:5c:12:4f:d5:eb:d9:ac:
65:a4:c7:c9:cc:18:8d:76:32:c4:fe:07:75:03:fd:56:6b:f8:
3c:a0:9d:56:6a:74:b3:92:78:fc:cb:02:34:05:c5:cc:87:a5:
98:0f:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org