Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I4Q25ewgePwYU-k72NuVxD9Ne8g.roa
File: I4Q25ewgePwYU-k72NuVxD9Ne8g.roa (raw, json)
Hash identifier: 1Gv3Q844byzCoFnsYYtG/WeSSP6samzmc5ok/sES8gw=
Subject key identifier: 23:84:36:E5:EC:20:78:FC:18:53:E9:3B:D8:DB:95:C4:3F:4D:7B:C8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D7C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I4Q25ewgePwYU-k72NuVxD9Ne8g.roa
Signing time: Tue 29 Sep 2020 09:54:36 +0000
ROA not before: Tue 29 Sep 2020 09:54:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 118.232.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3452 (0xd7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:36 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=238436E5EC2078FC1853E93BD8DB95C43F4D7BC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:f0:ab:5c:57:92:a1:18:cc:f9:bb:27:31:
de:b0:63:9c:7a:cd:72:92:a4:f0:48:55:7d:3a:fb:
c2:ee:cc:4d:f3:ff:98:59:2c:db:72:2d:bc:2e:9b:
35:f5:77:de:1d:f3:eb:3b:aa:cf:5e:49:41:c6:8e:
a9:6d:ce:c9:5e:f7:e7:1f:66:ab:68:9a:e2:61:12:
64:fa:9f:4e:74:d3:7c:5c:74:2f:e4:f6:74:a6:e0:
0e:70:37:11:05:73:23:0a:5c:e7:dc:f0:94:0c:47:
da:b8:53:72:8c:4a:cc:0e:29:0e:3d:bb:cc:87:f6:
7a:47:cb:08:09:a7:2a:b2:02:ae:f9:14:c4:ca:cd:
f1:49:8a:b9:f0:8a:fe:bd:89:ac:98:bc:2c:0c:2c:
37:c8:25:4c:1e:44:c8:c5:da:24:0e:a0:aa:f5:13:
5a:a4:df:d5:e1:cb:b8:e4:ec:fa:fd:e0:65:d8:ca:
a7:3d:34:bc:26:cf:e8:59:82:f0:df:70:ef:de:15:
45:0c:04:01:a9:c3:76:78:49:e8:b7:5c:10:8d:c0:
fe:37:ca:b8:6d:65:94:26:ac:bb:d2:06:9e:dc:f1:
a2:4e:9c:6b:9b:98:7d:2f:7f:2d:a8:22:7e:de:fc:
a0:e7:75:fd:35:39:e4:83:c6:8d:c6:31:72:59:5a:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:84:36:E5:EC:20:78:FC:18:53:E9:3B:D8:DB:95:C4:3F:4D:7B:C8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I4Q25ewgePwYU-k72NuVxD9Ne8g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3e:94:cd:e3:a3:5a:8f:c4:89:92:65:6a:90:1f:38:64:86:ae:
95:a4:74:d6:7c:16:2f:04:07:ef:d7:50:ab:44:6a:f5:60:dd:
01:82:b5:56:c7:93:2f:30:b5:08:55:da:9d:a4:43:dd:50:2c:
95:80:a3:94:7f:d9:c4:95:a5:f4:ca:07:bd:5e:1c:e2:c7:a6:
6a:63:f7:b9:7c:16:41:a7:b1:ae:17:43:30:8d:36:76:fd:b0:
e0:d5:75:d9:89:15:6e:0e:3d:22:ea:01:a1:64:ca:72:47:8a:
8d:c1:7e:8a:94:10:a1:d9:10:2d:d8:6c:f8:e8:a8:28:a4:75:
d3:62:dc:4f:15:41:7d:28:0a:57:cd:f4:b7:46:d3:95:15:4c:
5e:df:cb:0d:f5:b6:9f:d0:21:4b:a3:20:48:fd:82:55:4d:a9:
d9:ae:c3:1c:39:5f:d4:55:94:3f:3a:dc:c2:68:9d:e1:e2:56:
2e:64:b1:0c:ca:40:77:25:5c:c0:a8:07:44:30:4e:fa:76:0a:
b4:c4:02:d5:4d:f7:da:65:3a:39:17:cd:f8:15:d6:ea:b8:a0:
25:fb:a1:28:4a:0f:95:00:49:96:a2:59:c8:db:96:f5:e2:6c:
6b:e1:b7:e8:52:85:78:4e:d6:c4:b8:3f:c5:0b:c5:9f:19:9e:
04:3a:01:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org