Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KAb4AljYkSNtdEnxtv3xYqoA1dg.roa
File: KAb4AljYkSNtdEnxtv3xYqoA1dg.roa (raw, json)
Hash identifier: Wm5ffOJgqN8TlDFGqGqFD4R2/yMeC/K/MrvQw1+yI2U=
Subject key identifier: 28:06:F8:02:58:D8:91:23:6D:74:49:F1:B6:FD:F1:62:AA:00:D5:D8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1705
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KAb4AljYkSNtdEnxtv3xYqoA1dg.roa
Signing time: Sun 07 Feb 2021 12:16:03 +0000
ROA not before: Sun 07 Feb 2021 12:16:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5893 (0x1705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:16:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2806F80258D891236D7449F1B6FDF162AA00D5D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5b:47:b8:c7:fc:d6:bc:a5:38:60:0c:28:22:
c5:75:7c:22:00:a1:8d:26:1d:24:04:ea:5f:fe:af:
3c:a1:79:8e:94:40:c8:89:ba:8e:85:2e:a6:51:d9:
61:89:98:a0:ac:63:dd:98:d9:2a:21:ba:89:58:c8:
df:90:73:ba:fc:fa:9c:9e:be:bf:b6:95:9e:58:9b:
f4:e2:76:56:3c:44:36:50:bc:66:bc:b9:9d:ac:c4:
1b:57:cb:fe:de:41:61:41:fc:dc:c8:c0:fd:cd:92:
a2:71:4e:99:6c:96:4e:8d:51:16:ab:b5:2c:88:8e:
bc:9d:b0:1a:88:2f:cb:fe:7a:53:fd:83:a3:8b:6e:
14:9d:25:1b:52:41:76:c3:dc:1d:46:10:89:d6:ae:
72:e0:ae:c6:72:91:76:cc:a8:83:d9:4d:82:1b:58:
d4:b0:ed:dd:e9:48:88:62:79:9d:e8:47:20:69:a4:
4f:82:e9:b0:99:9b:73:fd:52:12:d1:5e:f6:9f:ac:
b2:08:99:fb:2f:12:52:af:96:db:99:50:e9:f0:f4:
7d:91:50:16:4a:84:9b:07:b3:17:4b:26:3a:da:dc:
6b:a4:25:e9:a5:0d:97:c4:be:52:44:ac:1e:1a:81:
d5:c1:c1:55:e4:3c:bb:aa:81:05:f8:71:d5:2a:22:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:06:F8:02:58:D8:91:23:6D:74:49:F1:B6:FD:F1:62:AA:00:D5:D8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KAb4AljYkSNtdEnxtv3xYqoA1dg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.200.0/21
Signature Algorithm: sha256WithRSAEncryption
66:5d:98:9d:16:16:e5:f1:24:9f:d7:59:99:96:b6:b1:e5:24:
ae:2b:e7:59:6c:08:c3:ca:22:8a:11:3d:4a:5d:a7:58:aa:18:
7a:01:c8:2c:22:1a:73:b7:52:c6:29:78:76:df:08:b4:cd:a6:
d4:e0:23:54:ec:86:c8:fc:ff:4b:53:3d:49:00:79:50:17:d5:
97:2e:93:78:be:61:fa:8b:ec:40:5f:38:93:a6:79:7b:07:af:
cb:ee:5e:de:a2:6e:89:9a:9d:72:96:dd:26:25:fe:9c:a8:63:
bc:8e:5e:d9:76:a3:94:a6:4a:33:59:4d:db:ef:0c:e2:43:2f:
2d:ea:72:a8:f0:53:47:88:55:51:05:a6:71:95:70:2e:7a:dd:
a3:42:0f:a6:cd:d1:4c:ae:4b:12:f6:11:c6:9e:a1:17:93:8c:
3c:98:f2:b8:ae:18:86:bb:6b:8a:21:c7:bf:0f:57:84:91:c7:
03:fa:e1:98:e9:0f:7f:9e:fc:21:2a:ad:1b:66:9c:d6:22:a7:
00:82:82:59:b4:0c:61:4a:c4:07:4b:df:21:b4:25:2c:0b:6f:
8b:f5:a4:9f:24:7d:ab:3e:21:98:84:ff:96:a2:71:3c:1c:06:
75:37:9c:48:6f:d6:5c:be:1e:db:36:3f:17:ec:5b:10:f2:90:
38:47:ea:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org