Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D9Gcp_R7JldZHUUZ7HN_Byeq_eg.roa
File: D9Gcp_R7JldZHUUZ7HN_Byeq_eg.roa (raw, json)
Hash identifier: f4TsOPiNxRhRNqzc4p9Yu7dIW0eBh4Xh80lhSSZGkFY=
Subject key identifier: 0F:D1:9C:A7:F4:7B:26:57:59:1D:45:19:EC:73:7F:07:27:AA:FD:E8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 16FD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D9Gcp_R7JldZHUUZ7HN_Byeq_eg.roa
Signing time: Sun 07 Feb 2021 12:15:50 +0000
ROA not before: Sun 07 Feb 2021 12:15:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5885 (0x16fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:15:50 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0FD19CA7F47B2657591D4519EC737F0727AAFDE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:18:6d:2a:e6:18:8a:7f:cc:be:42:a9:1b:
e7:74:85:1b:05:2d:54:ab:02:49:bc:14:71:d0:eb:
1d:5c:64:d9:bc:e1:0d:91:51:c4:d4:f9:50:63:3f:
de:61:88:02:80:57:ea:86:09:88:12:8b:10:c3:97:
23:b1:1b:45:d9:2f:9c:3e:00:1e:e1:8d:60:4b:77:
d0:81:f5:22:d7:17:cd:97:d4:49:a5:3c:d3:81:b6:
6b:65:c8:5e:07:b4:80:90:64:b1:a2:35:02:04:6f:
31:2c:af:32:0b:85:95:08:1a:cb:a6:f2:22:b5:19:
fe:ed:2e:62:b7:87:6a:06:c7:eb:12:51:b1:c3:ae:
a4:dc:ef:fe:86:6d:2c:e8:6d:c3:34:52:a0:a1:85:
a8:5a:48:b2:79:b5:26:f0:80:09:97:5c:a3:a0:08:
a3:d1:49:4b:8b:a6:92:43:c5:d8:fc:61:fa:de:5f:
48:80:a1:93:16:e6:a8:40:50:06:f1:ac:d8:be:29:
97:33:87:8f:9f:3e:c4:fe:30:09:07:c7:26:b0:53:
10:22:9b:21:6e:bb:6f:1a:82:05:43:35:72:4f:af:
fd:c3:80:9c:0e:56:80:fa:0e:d6:24:39:a5:22:5f:
4e:f9:e3:1f:75:1a:9a:ee:ef:d8:40:de:96:e2:fd:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D1:9C:A7:F4:7B:26:57:59:1D:45:19:EC:73:7F:07:27:AA:FD:E8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D9Gcp_R7JldZHUUZ7HN_Byeq_eg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.8.0/22
Signature Algorithm: sha256WithRSAEncryption
38:55:9c:d2:49:cb:b7:b8:2f:8b:75:9c:49:b2:e5:0c:b8:1f:
0f:39:36:d2:f2:e2:81:54:37:3d:fb:e0:0d:e0:91:7e:ba:32:
31:52:1f:92:26:c2:a0:36:c9:96:6f:3e:a3:ed:eb:41:8c:46:
14:6e:93:17:06:ff:2b:ec:9c:d5:4f:0b:04:fd:53:8b:28:fa:
ad:e8:cb:a0:ff:4c:43:ee:48:cd:79:10:4e:b9:5d:47:21:6c:
32:16:18:40:b0:00:e0:20:7a:f6:ee:a0:46:b9:dd:93:9c:3d:
76:ca:97:0a:40:e6:47:7b:88:1b:23:c6:2c:4b:7d:a6:d2:33:
2c:2d:c4:fe:8e:b0:65:1f:7b:c4:59:01:ba:2d:ee:5f:7e:50:
c7:67:d0:5d:96:25:10:3b:f1:24:c0:93:27:11:fb:e6:1f:3f:
ac:fc:77:c0:dd:53:29:1c:52:22:fa:9b:46:38:df:d3:d4:b2:
be:6e:09:ac:c8:23:71:00:4a:d0:07:f7:b5:b2:f2:0c:3b:4d:
a4:4c:85:fd:f1:bb:91:aa:7b:b7:85:f8:88:95:95:b4:2c:85:
e0:2e:84:42:e9:f3:34:46:87:c7:8f:2a:92:1c:33:fb:b1:67:
f0:bb:9a:e8:53:52:9e:d0:2e:2d:09:0c:c2:fc:af:6c:92:00:
d7:3c:14:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org