Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LqynpA4o3D6RD0co6qXj6PiZEhE.roa
File: LqynpA4o3D6RD0co6qXj6PiZEhE.roa (raw, json)
Hash identifier: CKULJUCafm2d6wPnOOM0mu8Us6jvvFsuxk/i8Ea0m50=
Subject key identifier: 2E:AC:A7:A4:0E:28:DC:3E:91:0F:47:28:EA:A5:E3:E8:F8:99:12:11
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C82
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LqynpA4o3D6RD0co6qXj6PiZEhE.roa
Signing time: Wed 29 Sep 2021 02:47:51 +0000
ROA not before: Wed 29 Sep 2021 02:47:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.232.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7298 (0x1c82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:51 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2EACA7A40E28DC3E910F4728EAA5E3E8F8991211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:73:d8:4d:73:12:14:25:ca:01:0e:58:68:22:
62:ea:ae:13:98:10:c7:24:60:7d:02:10:9d:53:27:
ec:96:2d:2a:25:8f:4b:9e:47:0a:35:e0:14:1f:de:
5a:de:06:6e:d3:01:bd:f8:7f:db:1d:91:36:cd:cc:
ad:7e:44:6b:18:78:f8:3b:fa:00:c4:31:34:58:87:
b1:6d:c9:75:ff:c3:e1:f1:0b:0d:6e:46:b0:af:b9:
4e:f3:14:af:8f:48:48:88:28:00:45:17:10:7a:9e:
2e:2b:60:94:ba:6e:73:32:fa:9b:9b:f7:49:63:9b:
e0:67:57:fb:18:96:33:60:0a:3d:03:4a:8d:65:73:
4a:ec:8c:77:2a:52:92:33:be:7e:d2:d6:75:c1:dc:
82:62:f7:ba:a5:85:d4:c6:7c:d8:f2:9d:f7:c5:0e:
6b:2f:ec:2c:bd:89:bf:76:6c:a0:24:48:c4:dd:d0:
9b:cb:65:fd:02:1a:46:c2:29:79:f8:fa:21:b1:63:
32:ea:4e:ae:ea:a0:39:ec:52:db:08:bc:8b:61:c6:
09:90:80:b7:e6:de:36:0f:10:1e:39:ac:9a:81:9e:
1d:ae:0e:c1:45:a4:95:01:43:7b:d5:e5:83:37:fe:
27:a4:32:bc:6a:58:41:80:bc:f5:4f:6a:06:54:0b:
d4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AC:A7:A4:0E:28:DC:3E:91:0F:47:28:EA:A5:E3:E8:F8:99:12:11
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LqynpA4o3D6RD0co6qXj6PiZEhE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.152.0/21
Signature Algorithm: sha256WithRSAEncryption
63:3e:84:d4:5a:57:9d:0c:62:8f:d3:ad:42:42:33:0d:47:63:
31:74:47:26:a3:82:a8:a5:a1:2c:f2:5c:70:3b:79:fd:6b:55:
e6:12:d8:56:d8:73:57:20:92:a5:7b:77:00:8c:54:61:04:dc:
0d:96:a0:5a:28:0e:25:19:05:f7:65:59:dc:62:27:cb:a4:50:
92:27:75:d0:13:0e:9e:11:58:48:9a:9b:14:e3:46:bb:31:55:
90:cc:34:5e:77:6e:59:23:33:13:d2:bb:6a:b8:c8:3a:43:29:
c4:18:c8:a3:34:a9:6e:45:9a:76:90:b9:1e:a6:a4:4f:fa:c3:
bb:28:03:01:5b:8e:75:80:03:14:9b:d1:10:f7:f1:fa:10:34:
40:c3:4c:be:9b:76:3c:7c:b5:a6:9d:d8:1c:30:7f:1e:03:3d:
a3:a8:4e:26:23:03:e4:fe:dd:fd:04:b2:f8:fb:09:61:e0:f7:
a0:d6:84:cb:8f:36:3f:dc:b9:0a:7a:63:96:99:7d:31:05:1f:
99:0d:30:5b:ce:11:64:bc:da:f9:98:69:1e:7c:f9:b1:47:76:
f8:0a:62:c5:be:4e:73:19:c3:9d:d9:90:03:6a:47:1c:31:f0:
c6:cc:21:fd:7e:6b:17:19:5e:83:86:fd:52:6b:96:29:b0:2f:
53:e8:60:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org