Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GwaH1Zhspj3FxzTVUstyqAaAZhs.roa
File: GwaH1Zhspj3FxzTVUstyqAaAZhs.roa (raw, json)
Hash identifier: xwZ5CKPzuhW2r3dX52kVoyKOHt6zNJh7/F2FJ3M4iRM=
Subject key identifier: 1B:06:87:D5:98:6C:A6:3D:C5:C7:34:D5:52:CB:72:A8:06:80:66:1B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DD2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GwaH1Zhspj3FxzTVUstyqAaAZhs.roa
Signing time: Tue 29 Sep 2020 09:55:01 +0000
ROA not before: Tue 29 Sep 2020 09:55:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3538 (0xdd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:01 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1B0687D5986CA63DC5C734D552CB72A80680661B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:60:89:50:7b:85:4b:1b:40:fb:4f:71:1a:
e0:f9:4b:4a:a5:db:3a:47:42:40:93:6c:1e:25:3b:
68:3b:88:ec:08:5d:3e:01:49:10:54:87:c9:ee:34:
61:5c:47:ec:d0:f9:17:12:d2:28:26:49:32:4a:b3:
a9:92:97:a5:db:8d:1c:bd:5e:d2:f5:a2:14:13:fa:
2f:6f:fe:9b:50:14:9a:d0:cc:0c:aa:a8:1c:9d:7a:
1d:b6:09:7a:85:d3:db:26:5f:d0:63:e4:fe:76:a0:
15:65:24:3d:f4:b4:9f:d2:9c:f5:af:a0:07:4b:d8:
69:54:9b:c3:71:0f:d9:9e:63:30:f6:ee:5d:de:ad:
13:47:88:2e:b4:d3:77:13:1b:e5:1a:b5:47:dc:a6:
61:c1:c2:ba:38:68:99:03:76:dc:92:06:ff:31:3e:
e2:a0:d0:5c:ec:53:d1:7d:88:66:98:83:b5:80:c1:
fd:f5:d8:1c:31:5a:c9:66:ae:22:58:fd:0f:56:f3:
67:c7:18:af:b0:4f:55:0f:8b:8b:c5:27:86:ff:ce:
bc:6c:1c:5b:b5:eb:28:47:a5:b5:2f:45:30:12:9e:
93:07:03:3c:d1:46:42:36:30:4b:6b:88:43:8f:23:
bd:5e:3b:9a:8f:07:8e:3b:ba:24:9c:83:10:01:81:
51:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:06:87:D5:98:6C:A6:3D:C5:C7:34:D5:52:CB:72:A8:06:80:66:1B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GwaH1Zhspj3FxzTVUstyqAaAZhs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.148.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:db:44:ea:9e:a8:ab:9b:b2:71:34:dd:45:ab:d5:3d:78:d3:
ea:4a:7f:61:7b:8a:26:6d:56:05:64:27:2f:d6:ab:f2:da:7c:
84:79:94:e2:dc:da:5d:24:94:60:ba:ed:3c:d0:9c:5f:6e:79:
50:93:0c:8c:41:74:bf:d3:fb:f6:34:d3:cc:43:6f:67:6e:66:
d4:e2:48:4d:2a:84:2a:65:ff:d0:9a:94:b2:7d:d8:ec:b2:d6:
08:4d:7b:89:b9:20:5f:c6:a0:61:51:a9:aa:37:6a:8b:ab:17:
08:46:89:79:56:53:38:78:01:c4:69:34:6c:f8:ba:39:63:41:
b5:80:53:a9:05:78:df:91:4b:d7:37:07:ff:24:10:59:c1:de:
a7:44:cf:4e:72:16:bd:bb:8d:94:9c:fb:98:e4:43:a8:84:c9:
1d:23:5f:a2:c6:cd:da:9a:8d:80:e5:45:44:f6:ab:68:94:18:
00:73:69:67:f1:c9:b3:d5:38:54:af:02:db:80:7b:61:46:88:
b6:bc:2c:16:2c:50:35:3a:c6:84:d3:a5:00:b4:60:fb:80:fa:
d7:8e:04:4c:93:20:81:4c:ff:bc:b8:41:b9:7e:2b:8a:3b:91:
ed:45:43:85:1f:67:67:93:fd:76:d8:bf:41:e1:c8:23:9b:75:
30:3b:5e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org