Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CUHWr1FK3n0c-YkxI7Ksp4lg5IU.roa
File: CUHWr1FK3n0c-YkxI7Ksp4lg5IU.roa (raw, json)
Hash identifier: Mu8IztxvUizYREW2zGHzX/wlS2eLqxa/AxAO0LeF+HE=
Subject key identifier: 09:41:D6:AF:51:4A:DE:7D:1C:F9:89:31:23:B2:AC:A7:89:60:E4:85
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CUHWr1FK3n0c-YkxI7Ksp4lg5IU.roa
Signing time: Thu 15 Sep 2022 02:46:11 +0000
ROA not before: Thu 15 Sep 2022 02:46:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0941D6AF514ADE7D1CF9893123B2ACA78960E485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ef:b5:e0:61:96:8e:90:81:ce:5e:34:18:3e:
89:5d:7d:f9:13:7d:47:fb:b7:51:70:ef:1c:75:40:
9b:90:58:0d:39:6b:eb:65:3d:81:d0:df:fd:66:27:
b4:2b:2f:5f:a2:12:19:f6:ea:95:19:ad:43:cc:68:
a0:88:0d:9d:28:7b:fc:ab:5a:58:1a:f9:a3:19:22:
23:70:ad:1e:4d:91:9a:17:e5:62:07:2f:ad:35:b2:
8d:88:f4:1d:fa:43:c5:bb:7b:6d:8b:3f:39:40:d4:
e2:e5:ad:58:54:e5:4e:36:79:3f:c4:f1:bf:16:ab:
15:47:48:d6:d7:0a:f5:bc:f8:07:2b:55:dd:49:d8:
eb:73:fb:a2:97:a6:f3:18:58:b7:da:32:b6:63:38:
ac:30:9e:e9:2c:bc:58:82:cb:1a:f4:aa:75:ca:a3:
0d:ec:49:6f:78:a4:d7:c7:da:36:b7:05:c0:82:28:
db:ef:18:cc:bd:63:f2:33:8e:de:3f:72:b9:ce:07:
eb:65:a5:8a:c2:bc:1a:68:d5:66:e4:4c:96:b6:58:
8c:2b:02:10:09:49:a5:ba:73:42:3d:46:c3:a7:c4:
94:da:e3:21:10:32:c7:b8:14:47:7f:56:ed:20:af:
ab:8b:60:9c:8c:c8:90:ff:d2:2f:aa:bb:a1:f3:03:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:41:D6:AF:51:4A:DE:7D:1C:F9:89:31:23:B2:AC:A7:89:60:E4:85
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CUHWr1FK3n0c-YkxI7Ksp4lg5IU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.64.0/21
Signature Algorithm: sha256WithRSAEncryption
74:70:c4:09:ec:54:c5:77:d8:1f:92:db:18:4d:91:23:1a:df:
51:85:5a:04:4c:08:6a:22:37:22:b9:d4:f5:e8:b2:41:fc:d1:
51:28:77:1d:94:a7:ce:df:fd:dd:c6:7e:19:f7:88:35:f3:b0:
88:d2:f7:43:95:7b:2a:a2:10:7f:ba:73:f8:e5:07:4a:86:dc:
eb:c9:fb:d9:3b:9d:0f:ac:c7:b4:ce:30:0c:8a:99:8f:e3:42:
7b:cf:9a:1b:bf:ad:3d:44:33:63:01:eb:6c:a3:df:d2:83:94:
6a:5b:d3:16:2e:42:dd:0e:24:c4:16:07:29:92:04:99:43:46:
96:ac:08:4c:29:e4:95:89:5f:0d:74:c2:30:8f:9c:39:6a:99:
ed:98:f1:d9:65:37:a8:ba:c2:fd:55:e2:dd:41:a6:d0:a4:6c:
62:51:13:0a:53:ae:1a:1c:44:ca:8e:90:da:31:12:9f:28:77:
84:8e:f5:86:9b:6f:86:69:eb:63:86:be:d2:07:bb:f6:42:03:
2a:03:8f:36:b0:83:77:93:d6:8c:3c:1b:e6:30:2b:b9:75:ab:
de:34:42:88:3c:5f:03:d8:ff:8f:33:dc:e0:10:9f:e3:5e:42:
62:0d:9c:42:87:2f:97:5d:76:0f:3e:76:f9:0d:87:f8:54:1f:
36:16:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org