Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L_UZNxDxzZjrfLPGyej5JHqV9B8.roa
File: L_UZNxDxzZjrfLPGyej5JHqV9B8.roa (raw, json)
Hash identifier: jHMWKCQoRAs+r8u6z9y1LpVK1JqIvFH7XXHAU39WHsg=
Subject key identifier: 2F:F5:19:37:10:F1:CD:98:EB:7C:B3:C6:C9:E8:F9:24:7A:95:F4:1F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 215E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L_UZNxDxzZjrfLPGyej5JHqV9B8.roa
Signing time: Fri 25 Nov 2022 04:39:51 +0000
ROA not before: Fri 25 Nov 2022 04:39:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8542 (0x215e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2FF5193710F1CD98EB7CB3C6C9E8F9247A95F41F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c8:02:55:9b:7e:20:f3:b7:ec:49:ec:9f:80:
79:bb:03:66:b3:e0:04:97:eb:9c:b7:02:2d:f7:83:
c2:73:9a:48:35:69:98:a8:13:00:8c:b1:0a:c4:f0:
63:2b:70:a4:e6:e7:f2:e9:41:dd:37:00:a5:c5:c5:
57:4c:96:8e:94:24:30:a9:fe:45:dc:32:bc:27:77:
7d:7b:3a:6a:72:d9:a5:76:58:79:14:92:25:ef:20:
d2:67:6e:f9:88:aa:64:9d:ef:be:43:64:f4:6a:40:
07:3c:25:30:71:92:78:f7:00:db:1f:5f:ee:2b:38:
3d:81:d4:aa:8c:a4:44:ce:e0:56:2c:21:21:8b:87:
7a:b2:d2:79:61:f8:24:20:75:d2:0d:4d:f7:04:c7:
9a:dd:1f:f0:da:da:73:a9:c7:24:f4:c4:e1:84:3d:
2e:5e:1c:9f:0c:60:c6:ed:e9:06:8b:ef:65:92:78:
bd:37:cb:b2:99:25:b2:a3:c8:32:98:01:40:7a:44:
85:66:34:69:63:21:e9:d6:b4:d7:75:af:ed:9b:90:
c7:3c:aa:68:04:8d:b0:2a:6f:47:13:0a:65:f7:b5:
f5:47:b1:c1:5e:b1:d7:55:cd:23:00:eb:31:62:ec:
08:9f:f9:d6:e8:8e:d5:fc:4f:a3:30:93:7d:06:a3:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F5:19:37:10:F1:CD:98:EB:7C:B3:C6:C9:E8:F9:24:7A:95:F4:1F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L_UZNxDxzZjrfLPGyej5JHqV9B8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.16.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:0e:a1:dc:f1:20:1f:14:8e:20:75:64:4a:3b:c5:d3:af:74:
5c:6f:bb:2c:d8:82:a2:ef:92:59:85:e2:4a:c1:02:84:16:73:
90:21:fa:93:55:77:12:c6:38:c3:7f:54:01:83:7f:fa:1b:5f:
ec:8d:8e:18:b4:7e:95:01:71:e1:0b:4b:af:fa:82:f8:8e:67:
88:32:89:1c:b7:83:da:ea:25:65:bc:1b:c1:9d:66:fb:f3:37:
85:52:08:b7:1b:1e:90:37:4b:e1:d6:46:04:07:8e:d8:74:b9:
5f:e6:f3:04:1f:fb:52:ca:b2:44:14:8f:c3:a1:81:cc:96:cf:
71:d5:44:75:a1:b7:19:f6:78:c5:04:29:c8:82:64:66:76:03:
fa:ec:df:06:04:a2:46:d5:8d:27:6a:d4:69:11:d2:0e:8d:24:
cb:aa:99:48:56:b6:3c:4e:57:91:4d:4f:a5:4d:c8:77:5b:49:
f1:f5:99:53:85:d4:e5:7d:be:ea:3c:53:38:39:73:84:89:66:
f6:8c:8c:74:b2:b5:ab:cd:8f:0e:eb:3e:52:f1:ed:63:0d:36:
8e:ee:3c:33:99:16:b5:c6:99:67:b0:5a:07:f7:ff:7c:c4:12:
fd:26:a6:7f:c7:0d:ea:58:a5:97:c3:18:cf:f1:86:8d:14:f7:
eb:f2:f8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org