Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CvsI4gZIfJuU4aMEgUvmOdIHJtA.roa
File: CvsI4gZIfJuU4aMEgUvmOdIHJtA.roa (raw, json)
Hash identifier: 9EDv71F9o/VXxH6+S+SWLWN3tVCzo4jImcTGlQMyH3w=
Subject key identifier: 0A:FB:08:E2:06:48:7C:9B:94:E1:A3:04:81:4B:E6:39:D2:07:26:D0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DDB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CvsI4gZIfJuU4aMEgUvmOdIHJtA.roa
Signing time: Tue 29 Sep 2020 09:55:04 +0000
ROA not before: Tue 29 Sep 2020 09:55:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3547 (0xddb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:04 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0AFB08E206487C9B94E1A304814BE639D20726D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:14:d0:ec:99:21:b3:97:4e:72:71:82:a6:
f7:f9:92:d6:8f:a3:eb:75:76:e6:01:92:cb:0e:ac:
e1:20:b2:81:9f:c3:b5:4e:94:a8:b8:22:f7:28:cc:
c2:cf:a0:7f:c7:be:05:ae:6d:60:d0:e9:5c:3a:91:
e2:e5:9f:65:ae:2b:0c:d3:40:b9:7e:b3:7f:dd:98:
24:72:be:79:81:83:f7:90:49:2a:ee:da:1e:3b:a6:
b1:1e:98:a1:fc:00:d7:b4:0a:3d:7e:1e:5d:fc:69:
a0:a1:fb:60:9a:ef:bd:9f:d2:d8:dc:bb:95:b1:cb:
5f:e2:3e:c7:bf:3e:2e:88:df:58:89:67:d8:cc:3e:
e3:b2:97:90:88:2f:bb:3f:94:8c:af:bd:a2:fb:ac:
85:7b:ec:f9:4f:52:a1:23:49:c9:42:e4:51:01:0e:
3d:13:e2:fd:ad:5f:b7:8c:c2:3c:67:db:ca:f1:09:
63:67:c5:60:ce:5d:95:98:0e:48:37:c2:1a:b0:20:
b7:57:d0:f5:f6:85:c8:d4:dd:50:2a:92:00:b7:46:
81:82:92:4e:b4:a6:6b:2b:47:7f:c6:96:9d:25:48:
50:1e:1f:c3:1b:3a:10:e8:85:ff:6a:5a:39:47:9d:
7b:d1:af:19:17:ee:77:4d:ac:e3:86:2f:ea:76:9c:
9b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FB:08:E2:06:48:7C:9B:94:E1:A3:04:81:4B:E6:39:D2:07:26:D0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CvsI4gZIfJuU4aMEgUvmOdIHJtA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:ac:52:9d:79:0b:6e:ff:27:95:f4:23:28:dc:d3:1c:a9:d5:
23:ce:91:4b:9b:49:4d:13:9e:36:4e:c2:94:71:83:ac:85:48:
b5:da:8d:ff:2b:54:fb:14:f4:61:9e:53:d9:b2:b8:bb:b1:e0:
58:b5:01:e1:26:93:c6:5f:bc:a8:5d:ff:06:d8:ce:66:92:43:
5d:39:f1:d1:e1:fb:92:e0:65:a2:75:45:dc:d1:0d:05:d0:05:
ba:16:7f:50:6c:61:99:5f:98:ed:1c:eb:22:2e:56:48:06:3c:
62:5e:5d:bc:57:1f:2b:5e:74:e3:46:2d:f0:10:a0:f7:9e:de:
70:a4:77:21:12:17:8d:22:34:67:13:94:75:13:80:12:44:f8:
91:97:11:67:5f:14:00:4e:42:ef:4d:8a:c7:b2:f9:f9:ee:20:
9a:e7:09:81:7e:e9:67:02:15:38:17:50:31:9e:f5:71:88:1f:
79:b3:9b:8f:8b:48:16:3c:18:ee:7b:a9:50:8a:4d:f4:8e:85:
cf:d1:ce:8c:2c:b2:31:40:5f:cb:20:bf:90:cd:4a:6f:a9:4e:
11:8f:5a:0b:58:7f:ae:5e:bc:0e:43:50:7b:30:fc:de:e1:09:
d1:14:87:b7:97:d1:ff:97:a0:c0:25:d5:32:9a:26:67:4a:b0:
09:48:c0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org