Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lu0sdJdzTvyXjQjk7K8RX056zrE.roa
File: Lu0sdJdzTvyXjQjk7K8RX056zrE.roa (raw, json)
Hash identifier: OEgkW4wmTpASO92Hu9CEE8df+ycoPY3dbnorv/YC9I4=
Subject key identifier: 2E:ED:2C:74:97:73:4E:FC:97:8D:08:E4:EC:AF:11:5F:4E:7A:CE:B1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D55
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lu0sdJdzTvyXjQjk7K8RX056zrE.roa
Signing time: Tue 29 Sep 2020 09:54:27 +0000
ROA not before: Tue 29 Sep 2020 09:54:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3413 (0xd55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:27 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2EED2C7497734EFC978D08E4ECAF115F4E7ACEB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:4d:6d:3a:93:1f:de:5b:ed:ae:69:7f:04:
e4:25:c3:b5:df:9a:fd:87:4c:44:88:cd:d2:8d:52:
22:a2:6e:91:0e:d4:15:f7:fd:b1:a2:1f:a1:ae:61:
07:58:7c:90:77:3a:27:eb:d9:66:21:f4:6d:03:db:
a7:53:d7:21:41:58:99:53:05:a1:5f:de:2a:36:68:
00:52:bc:73:26:c8:80:b3:56:15:70:a4:ed:75:5b:
56:99:dd:0e:a6:65:b7:86:27:76:bd:d8:86:e7:24:
1a:ac:d0:66:b4:f8:ef:7a:15:d2:d3:e2:10:4e:b1:
12:ae:4c:39:9f:a1:dc:b7:5b:bc:37:9c:91:80:f6:
39:9e:f2:94:33:63:d6:09:0c:cd:a1:94:dc:77:2d:
73:ae:8f:20:d6:00:d5:66:3a:d6:39:10:3d:05:c3:
9e:62:34:be:b6:b9:98:46:56:f7:f1:29:db:07:9c:
fb:b1:0d:7f:0f:a0:13:60:eb:18:b1:d4:04:93:e9:
b6:9f:dd:35:bb:61:a2:7b:d8:8f:df:b1:0e:cb:39:
08:66:45:22:68:03:0e:ba:82:56:55:f2:f1:f2:8d:
88:04:8b:ee:bf:2d:90:07:10:b0:b0:8b:be:39:4c:
5b:3b:d9:59:6a:8a:0b:49:15:73:b0:0f:a5:d8:83:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:ED:2C:74:97:73:4E:FC:97:8D:08:E4:EC:AF:11:5F:4E:7A:CE:B1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lu0sdJdzTvyXjQjk7K8RX056zrE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.36.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:ed:ce:e2:27:01:32:3e:34:4b:d5:e3:4d:c1:d4:6b:ed:95:
bc:f7:55:4b:01:f5:46:92:fb:b7:f5:0c:9f:c7:83:18:f6:ca:
6d:33:06:5d:e6:51:57:c6:f5:15:e4:18:cd:7c:45:cf:c7:21:
20:63:ab:8f:53:c1:df:2f:0b:96:3b:35:d9:6d:40:ce:ba:86:
f8:34:6d:90:da:78:f4:34:85:f8:f6:4d:60:d0:56:24:78:4a:
95:95:74:05:2a:6f:e0:2b:2b:36:03:f6:66:60:65:6c:d6:5b:
14:b8:79:0f:5d:2d:37:6c:c7:dc:ce:22:68:cd:01:e8:e7:9a:
c0:ef:fb:ec:97:a0:1d:c4:10:d1:50:64:9e:9c:26:06:32:b0:
24:78:e7:c2:c0:5f:21:62:ac:4a:85:02:47:a9:fd:bf:03:70:
01:9a:22:ba:8c:1a:08:e6:4c:a6:c6:00:1d:de:85:63:97:c9:
a9:43:03:7d:00:db:3f:20:65:20:f8:b1:17:7b:f0:43:53:09:
dc:96:40:1a:38:96:46:d0:66:b8:5c:bb:dc:4c:ca:3e:75:2f:
0b:8c:6a:5f:23:99:76:eb:1a:f8:a2:c8:23:2f:69:66:61:2e:
11:3d:35:b6:a6:af:3b:4c:fb:2c:91:1d:31:1a:df:23:79:d9:
64:97:a4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org