Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M1GKWRGp5IGC1c0YVrbz6t7TGgo.roa
File: M1GKWRGp5IGC1c0YVrbz6t7TGgo.roa (raw, json)
Hash identifier: 5467re087U/hD0CJqy4PR2+2Rwk5uEIk3Ak/Of0M4Vg=
Subject key identifier: 33:51:8A:59:11:A9:E4:81:82:D5:CD:18:56:B6:F3:EA:DE:D3:1A:0A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 17C3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M1GKWRGp5IGC1c0YVrbz6t7TGgo.roa
Signing time: Sun 07 Feb 2021 12:23:22 +0000
ROA not before: Sun 07 Feb 2021 12:23:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.176.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6083 (0x17c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:23:22 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=33518A5911A9E48182D5CD1856B6F3EADED31A0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:b5:18:66:4b:4e:48:d2:fa:25:1c:e5:bc:
9a:f4:53:66:94:68:9b:bc:a7:e2:ee:e8:ab:f7:9c:
12:d7:4e:96:7f:c1:b2:23:7f:61:26:97:97:45:02:
ed:aa:b1:ff:a3:e0:cb:bb:fd:ba:69:28:3a:40:ab:
5f:20:cc:6d:48:34:61:17:12:20:58:b1:60:c1:78:
0a:44:1f:96:12:2f:8a:6e:d6:66:7d:1b:66:8e:87:
48:c8:6b:dd:63:c2:db:04:b8:1e:26:a3:76:01:71:
1b:95:ff:3d:f1:4c:dd:51:41:60:53:33:5a:99:54:
81:03:6f:4c:5b:68:df:15:ee:c3:2b:4e:a7:54:b6:
6f:56:42:a6:88:b7:59:7b:14:d4:dc:cc:1e:7d:79:
fd:43:3c:68:7d:d7:d6:83:08:db:fa:e8:54:dd:bc:
ed:8d:9d:09:ce:0a:de:d0:e4:b9:f9:41:b9:50:ed:
4a:6f:26:d2:02:ac:55:91:13:ed:83:2f:d9:47:29:
d9:29:41:6c:73:05:b5:bc:ee:22:72:53:f0:fc:19:
23:6d:b5:40:d9:8f:b3:e2:19:ed:01:c1:af:5f:71:
ca:a3:42:16:2e:9e:f7:0e:ce:46:66:d5:27:ac:48:
c0:df:24:1a:e9:02:90:78:46:61:55:33:a7:da:03:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:51:8A:59:11:A9:E4:81:82:D5:CD:18:56:B6:F3:EA:DE:D3:1A:0A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M1GKWRGp5IGC1c0YVrbz6t7TGgo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.176.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:51:2b:fd:1c:e4:51:70:30:e3:ec:e1:c8:d2:99:e6:31:94:
cf:5b:26:b9:55:e1:36:6c:27:c8:0a:98:f1:8c:da:d9:19:f5:
c5:a8:0a:67:55:17:82:35:0b:21:1f:5f:79:6c:fc:06:f6:43:
f9:da:20:99:79:e1:84:72:a9:b4:9b:cc:dc:22:18:ec:60:8e:
b9:6a:f4:06:6a:e0:e2:e8:a6:5e:a1:29:3b:4a:02:f8:cc:c7:
c4:01:0c:64:6e:0c:05:03:55:4c:1d:3c:55:a6:2e:42:1a:f9:
6f:95:17:f0:5e:4f:05:86:16:4e:00:2b:f2:d0:b3:c0:c8:a6:
f5:d7:9c:be:5e:10:3a:e9:f6:3f:20:63:f9:06:33:e1:e6:36:
35:bc:03:6f:ed:26:fa:38:da:9d:20:b8:ec:04:14:a3:2f:28:
e0:d9:14:1b:62:ac:16:da:0f:57:88:4b:3f:3f:52:11:64:52:
94:b3:da:2f:79:1c:50:80:85:1d:74:4d:ee:07:7c:2b:17:bd:
22:14:cd:2e:58:6b:14:fc:b4:75:28:47:e1:68:94:9b:59:c7:
d5:b5:79:e1:52:1f:6a:ba:3a:fd:22:57:b8:fd:0a:46:a9:bf:
10:5f:11:0b:07:f3:da:27:83:32:16:b8:5f:42:50:8d:3d:7e:
65:91:f4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org