Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G0NEeAkI1HazWBDcLxz2vXCHzBk.roa
File: G0NEeAkI1HazWBDcLxz2vXCHzBk.roa (raw, json)
Hash identifier: WBijRjUn75mxiTxtZmWy+/NDsv7PROMVRfVPjl/itgc=
Subject key identifier: 1B:43:44:78:09:08:D4:76:B3:58:10:DC:2F:1C:F6:BD:70:87:CC:19
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20EC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G0NEeAkI1HazWBDcLxz2vXCHzBk.roa
Signing time: Fri 25 Nov 2022 04:39:17 +0000
ROA not before: Fri 25 Nov 2022 04:39:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8428 (0x20ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1B4344780908D476B35810DC2F1CF6BD7087CC19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:af:a9:45:69:e0:08:1f:c4:89:8e:f2:ae:69:
e2:d1:1d:7b:93:2f:74:b8:1e:22:93:c6:21:4f:59:
f9:17:d8:75:27:b1:05:90:1e:9f:d6:99:d7:56:65:
ec:5f:6b:9c:3c:45:5f:63:33:56:f4:81:ad:46:db:
a4:96:8d:cd:b3:54:30:c7:b4:58:47:1f:fc:ba:3f:
4f:84:ac:7b:4e:6e:43:c8:fd:f1:90:fa:ad:2d:c6:
ca:0f:15:93:f1:0d:b4:aa:1b:6e:ef:ea:b1:f8:be:
d9:79:e4:4f:39:7b:cb:f7:fd:40:af:7b:08:a0:56:
2c:e5:85:d0:45:62:06:f0:bc:30:38:32:8f:0f:de:
d7:69:7a:9f:38:5e:a1:ef:a8:1f:86:13:5a:35:42:
ec:86:f5:5a:4d:2b:89:66:69:85:3c:6e:5a:4d:32:
00:6e:56:f1:a8:84:2a:d8:79:af:77:01:81:c3:3e:
d1:5a:10:07:d8:8a:fb:fa:88:d2:97:c7:b6:07:ac:
ed:7c:33:9a:dc:7f:81:ee:14:2b:d7:f6:9b:7d:bd:
67:34:64:14:df:85:3e:37:85:cc:30:60:1d:4c:37:
10:cd:dc:7a:34:af:db:4f:cb:97:b6:d0:ab:36:c3:
f9:87:3d:a7:c8:93:16:5d:b9:3c:77:b7:58:ea:34:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:43:44:78:09:08:D4:76:B3:58:10:DC:2F:1C:F6:BD:70:87:CC:19
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G0NEeAkI1HazWBDcLxz2vXCHzBk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.128.0/21
Signature Algorithm: sha256WithRSAEncryption
71:4e:47:c0:3a:91:ac:2f:5e:3b:a0:e8:c4:03:e3:c1:8f:22:
46:0e:18:a4:04:da:45:34:e0:0f:1b:64:4f:95:7b:f3:82:3f:
94:ec:17:4e:2f:c6:31:d6:47:b6:88:13:79:2c:6b:f0:37:f1:
53:2e:a4:f2:30:f7:86:77:2c:0a:2c:e6:d4:fe:76:48:3d:de:
02:76:ba:27:da:7a:69:ed:a7:5c:16:c4:62:c3:65:fb:36:df:
fd:85:24:42:b9:10:7e:58:e9:87:dd:ca:51:d6:7b:0d:8a:95:
a0:1c:ba:a2:aa:80:6c:2a:a1:5a:5a:3f:1d:ef:0b:e3:69:a8:
94:b9:3a:b0:ed:f0:60:fb:eb:75:c0:c5:dd:e4:15:d5:0e:41:
f9:69:41:3c:ee:ed:51:d7:29:28:4f:56:5d:40:80:3c:2e:a3:
75:c1:6e:68:01:32:1d:70:99:47:aa:3b:cc:fd:c1:84:3f:cf:
ef:4c:dc:61:b6:10:7d:dc:7f:7f:82:1b:5e:8e:30:fe:e3:81:
1e:39:39:6d:81:ff:0f:42:5e:8f:6d:d8:a1:a6:7d:fd:99:03:
a5:9b:64:2a:35:fb:3f:cd:c9:43:b5:9d:41:18:81:49:bd:79:
b9:ad:55:ce:7f:d6:56:f4:78:51:f1:91:35:98:78:98:db:81:
e5:07:2b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org