Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OG3ZvBaRLxcaWEQKbVZsWkt5Cqw.roa
File: OG3ZvBaRLxcaWEQKbVZsWkt5Cqw.roa (raw, json)
Hash identifier: fmWi+jcF51xj3nL58+5ypyshPBRax+J4t4Hoj3fyWj8=
Subject key identifier: 38:6D:D9:BC:16:91:2F:17:1A:58:44:0A:6D:56:6C:5A:4B:79:0A:AC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15A7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OG3ZvBaRLxcaWEQKbVZsWkt5Cqw.roa
Signing time: Sun 07 Feb 2021 12:05:47 +0000
ROA not before: Sun 07 Feb 2021 12:05:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5543 (0x15a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:05:47 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=386DD9BC16912F171A58440A6D566C5A4B790AAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:24:93:78:cc:fc:e6:e6:38:a4:a1:83:c5:
fc:4f:3c:a3:e1:74:8c:34:6b:5e:41:0a:d0:24:74:
47:19:9e:fc:7c:d7:d0:5a:2b:fb:7d:01:58:59:95:
a1:13:73:93:cb:1b:09:e9:1f:b0:ae:9d:4e:aa:9a:
99:f3:90:05:6c:29:95:d1:7e:04:35:3b:73:30:f4:
51:62:ad:5e:cd:04:65:bd:0c:b1:e3:b2:15:e2:79:
e9:3f:c2:4a:8a:2d:a7:5a:6b:b5:26:fe:79:21:c8:
ce:a1:46:70:bb:f2:42:c6:62:c1:e8:c4:da:46:ec:
9c:49:2a:90:b2:0d:e6:93:97:22:83:99:db:0d:81:
7c:d5:d3:db:20:4e:18:c4:b7:6b:6c:74:26:74:57:
1b:37:2c:17:b4:97:60:bf:f0:41:3e:26:14:04:19:
a5:f3:7a:4c:30:81:be:f4:cc:aa:7e:c6:e6:b8:be:
87:21:b8:91:4f:4a:5b:eb:19:77:a9:b9:6d:9c:d1:
d5:68:8b:58:0e:1d:06:99:60:95:e1:8b:8c:ab:a2:
e8:30:cd:31:2a:ad:41:82:a3:65:ce:c7:b0:97:88:
88:d1:ea:0e:20:ca:78:3c:a2:4c:5a:c2:4a:35:e0:
d4:be:77:97:43:72:0d:10:ad:66:a9:0a:64:48:5b:
2f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6D:D9:BC:16:91:2F:17:1A:58:44:0A:6D:56:6C:5A:4B:79:0A:AC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OG3ZvBaRLxcaWEQKbVZsWkt5Cqw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.119.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ab:91:39:29:57:21:55:d4:7e:bd:78:f8:e4:13:9d:e7:ba:
72:5a:dd:b4:01:70:c2:5b:17:19:1c:1f:e5:9e:bd:74:28:00:
46:71:95:ed:40:24:d0:ec:b5:1f:0d:f4:38:5d:dd:00:0c:fa:
1b:4a:2d:14:63:8b:90:bd:3f:6d:de:51:b7:71:02:e3:4d:37:
dd:b7:f1:0d:90:19:ff:84:30:08:74:20:a3:a0:1c:b1:2f:d0:
0f:e5:26:69:69:7b:fc:06:f4:95:32:8d:21:e6:be:aa:f3:15:
86:84:0e:c9:5b:e3:37:03:01:ea:51:6a:8a:9d:fb:aa:8d:bf:
fb:30:a3:a4:03:de:97:2e:39:07:a6:dd:8a:2f:f7:f7:bd:29:
47:87:39:6a:2f:3a:57:b2:f1:bf:33:b9:de:da:62:aa:c1:fa:
04:4a:24:a4:2e:ac:e8:05:9a:f3:d7:e5:b9:a8:78:ac:cf:25:
5b:00:d6:b5:48:f4:96:60:f9:e7:68:7f:00:6e:5c:5b:11:26:
d1:ef:4d:f6:ce:6e:8e:27:1a:06:73:ab:29:59:77:93:cf:7d:
4b:82:44:5a:0d:41:b5:2d:60:10:e2:3b:e6:f9:db:ab:76:10:
de:70:81:18:bc:8e:0e:6b:90:b3:b7:0c:5a:8c:5d:47:29:ea:
cb:af:c5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org