Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IP-lkrJW10poOTiHs1wAm4QKvB0.roa
File: IP-lkrJW10poOTiHs1wAm4QKvB0.roa (raw, json)
Hash identifier: YGjAfAIDAV/Zm8V1GbummJ/RxB7gNbauEKxUWj12eaY=
Subject key identifier: 20:FF:A5:92:B2:56:D7:4A:68:39:38:87:B3:5C:00:9B:84:0A:BC:1D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1893
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IP-lkrJW10poOTiHs1wAm4QKvB0.roa
Signing time: Sun 07 Feb 2021 12:40:13 +0000
ROA not before: Sun 07 Feb 2021 12:40:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6291 (0x1893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:40:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=20FFA592B256D74A68393887B35C009B840ABC1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:1d:99:63:ea:a0:06:3e:f7:81:f8:90:04:
ed:42:57:72:ee:67:8a:e3:25:2e:14:8e:dc:4f:d5:
a8:fc:a4:42:57:fe:7c:ee:2c:e7:59:ca:9a:ce:49:
bb:9e:7f:9e:ff:72:58:fd:20:7d:60:c6:22:26:35:
e9:89:86:c0:f8:d2:28:f6:7b:a3:d6:db:2e:32:46:
d7:39:63:3f:56:6b:b0:f0:b2:d5:f3:01:bf:3d:75:
9d:ef:40:25:d2:49:b7:9e:24:bb:20:1a:c3:04:89:
90:88:f0:7b:e3:60:82:44:29:0a:6d:fe:7a:ef:9c:
61:f3:65:c0:d0:6b:69:b9:9b:96:32:e5:c1:c1:7f:
63:93:1d:b9:7b:8f:81:63:ae:73:a4:03:92:78:fe:
27:a6:33:a3:63:6a:a6:ad:8a:c9:04:cf:7b:28:f9:
9f:0b:0e:23:be:19:a4:f9:cc:35:71:74:ff:11:6e:
45:7f:94:a7:9d:ec:91:bb:ef:da:7e:34:74:23:fb:
b7:52:10:69:03:40:1b:f0:ae:89:e7:1c:d9:27:b1:
e7:68:57:a6:a0:6f:e8:e2:f3:0e:67:53:b9:dd:61:
a9:e5:dd:95:31:62:8a:56:c4:76:37:97:71:29:fe:
63:bd:d5:93:78:0f:79:c3:09:4c:45:0a:ec:be:b3:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FF:A5:92:B2:56:D7:4A:68:39:38:87:B3:5C:00:9B:84:0A:BC:1D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IP-lkrJW10poOTiHs1wAm4QKvB0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.64.0/22
Signature Algorithm: sha256WithRSAEncryption
29:84:92:be:af:53:80:44:cd:8f:53:24:e2:69:85:3f:f6:7d:
96:ef:69:b4:4b:12:f8:c0:93:19:fb:b9:5a:ca:e9:1f:68:f5:
2f:4b:f2:50:6a:f8:e2:63:60:03:df:a6:36:f9:3c:44:4e:fb:
4b:8d:00:2a:b8:e4:9b:df:e8:67:6a:83:a6:97:53:8e:2b:53:
fa:42:37:5f:db:fb:cb:c6:3f:34:4e:7c:89:6c:36:a7:f3:d6:
56:1f:7b:e1:9f:bf:9d:79:e4:05:c6:bc:6c:4f:9d:cf:45:d1:
8f:b2:53:66:6d:23:f5:ba:f3:e7:ee:54:00:4b:6d:c4:ce:c2:
6d:9a:3f:c6:6b:37:ba:1f:85:51:6d:f0:23:b7:23:54:09:9e:
c5:bb:74:f0:36:4e:27:45:35:cf:92:da:c9:8f:0c:f9:b9:18:
57:0a:69:dd:9c:19:c4:6f:e0:18:3e:e0:b0:db:bf:3c:ad:b7:
5a:b1:07:0c:2e:d7:d0:9e:56:4f:01:1d:02:d1:29:5b:b0:6d:
41:b5:e4:42:17:1f:6f:7f:cd:d7:45:3a:80:cd:44:a6:f0:3b:
b6:29:f2:64:0d:2f:42:bf:d4:98:b4:89:68:10:fc:ee:9c:50:
5e:5c:e8:2e:81:f3:e7:5a:b3:55:88:11:54:13:2d:91:69:9b:
7a:ca:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:25 2023 by rpki-client on console-fra.rpki-client.org