Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KUJRDiRKwDnKsRPTfZzxexgDQI4.roa
File: KUJRDiRKwDnKsRPTfZzxexgDQI4.roa (raw, json)
Hash identifier: Ze7UKIlDb6IVAu1Ph950Sl78081vzqHqjbA1KC5Z/4k=
Subject key identifier: 29:42:51:0E:24:4A:C0:39:CA:B1:13:D3:7D:9C:F1:7B:18:03:40:8E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0CFA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KUJRDiRKwDnKsRPTfZzxexgDQI4.roa
Signing time: Tue 29 Sep 2020 09:54:01 +0000
ROA not before: Tue 29 Sep 2020 09:54:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3322 (0xcfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:01 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2942510E244AC039CAB113D37D9CF17B1803408E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:87:d2:da:74:40:0b:12:84:a3:64:df:b7:
55:3d:51:c8:28:46:7b:2d:ab:69:45:f1:ae:e2:e1:
6e:8a:02:84:d9:4d:48:ed:2d:a2:94:01:cd:63:83:
c4:4d:d1:a9:e0:2d:6e:8c:23:88:b3:54:b1:b2:e1:
47:43:a1:8d:f2:5e:11:fc:29:ab:45:61:7a:66:12:
83:72:a0:ab:b9:c8:32:cc:3e:a6:b4:40:b2:79:26:
e2:2b:b2:de:03:f8:73:1a:8c:3b:30:19:08:30:2b:
e8:a6:19:9e:88:fe:03:67:c6:40:a6:4d:a6:52:c8:
a6:72:ab:d7:42:09:39:25:dc:06:9d:10:c9:dc:d0:
35:85:af:25:68:8b:a4:28:44:32:1c:94:e0:11:7b:
73:13:0f:5b:85:bc:ad:5f:03:78:84:0d:0b:5d:ea:
9e:a0:0f:45:4c:df:b1:8b:5d:ee:33:39:25:c6:1f:
47:3a:6d:2d:43:8c:0b:19:45:a8:f1:c9:f7:d9:c1:
54:34:86:e7:0b:fa:4e:b8:6d:60:18:e8:4a:4a:0c:
eb:ae:29:c8:54:f0:09:00:7f:13:31:22:65:8c:f3:
79:f9:4c:c7:53:63:5a:c8:08:3c:bb:fa:99:91:f1:
c4:b6:12:be:82:9c:7c:49:0d:99:2d:97:00:20:6c:
05:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:42:51:0E:24:4A:C0:39:CA:B1:13:D3:7D:9C:F1:7B:18:03:40:8E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KUJRDiRKwDnKsRPTfZzxexgDQI4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.56.0/21
Signature Algorithm: sha256WithRSAEncryption
64:3e:66:0f:1d:03:66:5f:17:e0:30:3e:e7:b9:3e:47:e1:96:
4e:c7:0c:e6:02:d5:75:70:70:32:5d:59:38:31:57:91:ee:70:
c5:41:fe:21:24:98:8f:ac:87:b0:aa:8a:3a:4d:27:aa:9a:23:
28:79:31:3f:5b:d2:19:7f:7a:86:75:69:f1:f1:88:67:38:d6:
e9:b4:1f:ed:24:fd:b4:e4:38:69:b3:79:2c:8b:11:58:81:5c:
4c:94:69:3c:a5:7f:b1:4f:c9:f9:6d:39:a2:dd:be:00:7e:4e:
cf:77:98:e0:6d:a3:52:57:d3:37:d9:58:ad:1c:1e:eb:f1:7e:
cc:5d:74:02:89:94:5f:79:53:e2:31:78:b2:2b:20:f7:07:78:
a9:1d:00:b8:63:0d:45:d4:47:9c:39:4a:28:db:18:93:66:3f:
75:a3:5f:a4:bb:3c:4a:50:a3:14:8a:08:d3:68:16:f2:26:94:
34:d0:34:a2:6d:56:43:39:6f:d9:92:39:7a:35:3c:12:03:61:
da:25:4d:5f:ff:3d:77:a6:a9:b4:3b:98:bb:8f:4b:c7:c2:fc:
ac:34:fe:11:6e:af:c1:37:8d:0e:aa:d8:c5:61:e4:dc:39:8b:
04:80:e8:97:42:2f:10:2a:e7:45:62:c3:73:52:21:c5:06:8c:
cd:d1:d8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org