Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QxTKHVodD4BueTflz9JA2SZBecE.roa
File: QxTKHVodD4BueTflz9JA2SZBecE.roa (raw, json)
Hash identifier: TjzF5/qTSqICqFBJ1tAQvNHmzfsTNBNNAzAOlmL9E3I=
Subject key identifier: 43:14:CA:1D:5A:1D:0F:80:6E:79:37:E5:CF:D2:40:D9:26:41:79:C1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CCE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QxTKHVodD4BueTflz9JA2SZBecE.roa
Signing time: Wed 29 Sep 2021 02:48:13 +0000
ROA not before: Wed 29 Sep 2021 02:48:13 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7374 (0x1cce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:13 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4314CA1D5A1D0F806E7937E5CFD240D9264179C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:f4:18:d7:c1:d6:60:14:91:de:0a:03:2d:
f2:2a:e7:96:11:83:f8:67:b1:46:15:5b:21:6f:d3:
63:86:b2:73:68:56:c7:55:f1:5e:ac:8e:fc:a0:0a:
62:6e:cc:5f:45:08:1a:4c:13:5a:e3:f5:29:a5:92:
bf:77:ba:f7:90:c9:0d:90:1e:1a:40:70:44:90:69:
ef:9b:64:e4:43:e7:85:74:6c:b4:ee:07:d2:90:b9:
30:3d:b0:5d:54:93:2b:b8:8f:5f:65:e1:1e:df:b1:
8b:fb:d9:76:d3:38:0c:fa:2b:8e:5e:43:06:ac:4a:
04:1e:56:c7:3d:ad:5e:23:f8:97:eb:85:35:75:3c:
49:eb:2c:d9:5f:bf:03:e7:f9:bc:be:4c:41:2e:2b:
8b:75:53:54:06:4f:78:1d:68:14:64:c6:90:36:5e:
ba:81:fa:c1:90:1c:ab:4c:88:78:10:d8:11:72:de:
d7:cb:c0:c2:a0:cf:5d:dd:7b:60:cc:4d:2c:b7:9f:
5b:75:6f:66:06:f2:21:be:6d:19:bc:c7:b9:16:5c:
6b:ff:3c:4b:af:06:bc:d2:8f:58:66:6f:9a:19:c7:
c6:17:7f:72:54:7d:28:1d:89:83:09:92:ff:06:82:
e8:34:7f:2a:94:59:3b:67:aa:fe:d0:a5:88:54:bf:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:14:CA:1D:5A:1D:0F:80:6E:79:37:E5:CF:D2:40:D9:26:41:79:C1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QxTKHVodD4BueTflz9JA2SZBecE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.36.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:b7:3f:ce:6d:85:5d:b2:bb:9d:a8:e3:9a:ce:f3:37:e5:32:
8a:f0:2a:7b:39:c1:ed:13:d7:cb:c2:fd:94:27:34:22:39:16:
cd:b1:7c:bc:58:c4:5e:0f:f4:69:b0:37:50:2d:87:15:84:30:
a6:21:63:8a:1c:27:a2:a9:37:c4:d4:ae:33:55:81:20:25:36:
a0:0e:9f:2b:3b:55:9e:d9:ac:2e:98:59:0e:ba:35:2f:5e:2b:
9b:ba:09:cd:86:fb:93:4c:2a:58:3f:f3:4f:b5:7d:bf:3e:bc:
db:71:57:89:07:75:4c:59:71:75:68:41:7c:9c:d6:58:17:44:
92:6a:8a:ec:1a:c7:02:6f:9e:30:18:96:6f:1d:2f:72:aa:e7:
da:d4:b2:1b:fb:a0:66:80:0d:08:42:8f:c4:29:0b:38:95:46:
60:33:9a:4e:82:06:ad:da:7d:23:36:f5:65:7c:09:51:46:70:
17:0f:7a:f4:6e:fa:78:ec:5a:97:42:c7:9a:c3:eb:d0:91:9c:
45:e0:11:25:e0:2b:e0:dd:90:19:fa:e7:26:31:ae:e4:a2:0a:
c2:b9:86:8e:ae:06:f0:8f:c7:64:f1:d3:79:96:d9:98:ba:18:
f0:22:d8:e5:ff:67:1d:85:be:a0:71:b1:8b:77:38:86:bc:42:
10:36:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:19 2023 by rpki-client on console-ams.rpki-client.org