Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FaMPhYqlLVieWdj0V8itt6TuC_o.roa
File: FaMPhYqlLVieWdj0V8itt6TuC_o.roa (raw, json)
Hash identifier: pZ/B93cW22fPvJphyPa3nFsOQjh3e7H5pFVSZjEPxqI=
Subject key identifier: 15:A3:0F:85:8A:A5:2D:58:9E:59:D8:F4:57:C8:AD:B7:A4:EE:0B:FA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 182B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FaMPhYqlLVieWdj0V8itt6TuC_o.roa
Signing time: Sun 07 Feb 2021 12:26:53 +0000
ROA not before: Sun 07 Feb 2021 12:26:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6187 (0x182b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:26:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=15A30F858AA52D589E59D8F457C8ADB7A4EE0BFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:e3:fa:d0:4d:56:06:8d:20:a1:16:c4:92:
91:75:c2:44:f3:17:bc:bd:0f:14:ef:5b:20:ba:aa:
8c:69:90:4f:f6:d1:e4:e7:8d:44:37:91:b6:fd:2d:
4a:ad:51:9a:e3:0d:02:9c:97:54:de:86:6d:53:88:
81:58:12:9d:7c:8b:49:b6:92:ff:f1:f9:3b:8a:fd:
68:09:82:e9:e8:ea:76:17:d0:9a:ce:fc:21:69:41:
47:54:9e:94:fa:30:1b:c1:61:8e:ac:19:5c:79:13:
d6:1f:c7:92:48:a7:e5:5e:dc:2d:8b:96:06:e4:e0:
98:84:e5:07:d6:6a:7e:56:ce:61:5a:fc:ad:44:a7:
f8:5f:02:be:fd:c9:49:7a:14:23:f5:81:ee:13:3b:
93:9f:98:c8:81:90:52:58:d0:60:c4:c0:0b:3a:3d:
74:37:44:db:26:88:90:81:b8:96:2c:40:ee:37:71:
48:77:8e:35:4e:51:d6:e7:49:1b:30:d9:f4:02:7b:
ee:27:ff:9c:b8:37:b0:01:d0:0c:bc:64:8e:db:8b:
e3:3e:e4:9e:15:42:91:9e:a4:4e:2a:66:c7:20:9f:
a3:fe:e0:e5:fb:f8:74:a1:96:28:a9:f3:ea:91:ec:
8b:dc:56:01:f5:62:43:63:b6:9b:e3:89:1d:6f:0f:
9e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A3:0F:85:8A:A5:2D:58:9E:59:D8:F4:57:C8:AD:B7:A4:EE:0B:FA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FaMPhYqlLVieWdj0V8itt6TuC_o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.168.0/21
Signature Algorithm: sha256WithRSAEncryption
af:79:33:62:7a:92:7a:76:13:ba:df:96:29:85:82:96:db:d0:
30:0f:44:f2:bf:6b:51:7c:b7:04:ba:8c:2a:5a:f9:2e:0c:05:
c7:23:ef:8b:6b:9f:cf:ca:36:43:c1:25:17:36:3b:ea:c6:2f:
67:bb:e1:da:a1:0d:f4:01:b7:e0:bf:04:8f:8e:99:d1:40:fc:
6a:90:b3:8e:94:3f:b7:67:fe:a0:b3:81:70:af:11:af:68:de:
bd:c3:37:f7:2c:5d:6a:13:5a:3d:a9:ba:db:07:74:7c:59:14:
03:e9:c2:ba:1b:1e:b1:67:b5:a9:08:a7:c8:fd:65:34:f3:6c:
ca:3f:5e:62:51:32:f8:12:5c:82:ef:0d:05:64:f5:88:69:25:
aa:3c:e6:1e:64:e1:4a:65:c6:30:5e:19:2a:39:22:66:b0:68:
96:ef:28:2f:77:aa:38:1c:f9:12:96:c6:18:9e:fa:10:7f:6b:
68:21:ef:e2:9c:3f:b6:9a:c8:f1:fc:71:d0:48:ed:a8:bf:c6:
7e:cd:c1:3e:02:6d:2d:3c:13:c1:99:9f:80:b5:26:00:f1:09:
4f:51:a0:4d:40:27:a0:90:98:e1:76:f0:54:69:7a:b3:89:03:
78:07:80:4a:56:20:ab:37:93:ba:5f:32:01:d5:2c:0e:97:5c:
03:7d:7e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:25 2023 by rpki-client on console-fra.rpki-client.org