Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RIaU5mQmmvs-uCiCkWvPMX4eAG8.roa
File: RIaU5mQmmvs-uCiCkWvPMX4eAG8.roa (raw, json)
Hash identifier: bq5DMbP1XIBt1n/jYuybAzMArfjv66TUSNFgztpBrCU=
Subject key identifier: 44:86:94:E6:64:26:9A:FB:3E:B8:28:82:91:6B:CF:31:7E:1E:00:6F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2016
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RIaU5mQmmvs-uCiCkWvPMX4eAG8.roa
Signing time: Fri 25 Nov 2022 04:38:18 +0000
ROA not before: Fri 25 Nov 2022 04:38:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8214 (0x2016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=448694E664269AFB3EB82882916BCF317E1E006F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:5a:89:59:ee:98:28:38:0d:bb:e6:0d:c8:
91:d4:4b:74:e5:89:91:a0:58:82:37:f3:8e:7c:75:
05:3c:cd:f7:c2:33:5d:93:ec:99:3c:4b:aa:ea:50:
6d:c6:db:95:e8:fc:9f:49:34:75:35:9f:9e:a9:d7:
c7:6c:da:69:f1:ee:0b:10:b9:17:46:b4:a3:1d:a7:
95:2d:c1:0f:d5:86:a5:f5:48:a4:e2:07:f6:3f:3d:
c4:77:0a:6f:33:d4:c5:18:30:47:b3:d8:0b:0d:61:
b4:2e:92:3b:7b:33:ba:06:b2:d4:eb:c8:8e:ce:f5:
6d:6b:8e:69:55:06:7e:76:e7:ad:57:21:ac:58:99:
77:89:c4:4e:49:00:64:ff:bd:17:b6:85:45:62:bd:
27:78:81:2a:3b:28:9a:45:d3:5a:e5:82:79:d2:43:
8e:53:d4:aa:e4:a6:a8:30:81:12:d7:21:cf:72:cc:
97:ed:50:9a:50:c8:97:e2:91:b4:e5:3a:f2:d8:e8:
ba:6d:8b:1e:8f:c8:c1:4c:8b:cc:3f:c1:af:b0:fc:
64:bf:7b:27:90:95:7e:42:6e:74:f0:31:93:a0:52:
de:ee:26:16:23:8d:16:b1:98:9e:46:c8:2f:ad:43:
2e:cf:44:f5:37:8c:6f:80:b6:d9:5e:c2:04:2d:ad:
1f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:86:94:E6:64:26:9A:FB:3E:B8:28:82:91:6B:CF:31:7E:1E:00:6F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RIaU5mQmmvs-uCiCkWvPMX4eAG8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.88.0/21
Signature Algorithm: sha256WithRSAEncryption
86:7c:13:a5:07:1a:a1:eb:c1:a0:b8:f0:af:a9:bc:c6:fe:8c:
d5:36:1e:7a:8d:cc:d2:52:55:96:90:c0:79:f2:d6:59:0c:91:
8a:cf:0d:51:1a:10:f2:7f:11:4b:30:1b:86:e3:27:e3:11:7f:
8d:b1:09:a1:af:a3:47:67:97:65:9f:79:da:9d:4a:da:59:e1:
6d:03:39:3a:ba:12:4c:47:a7:41:3e:d3:3c:e5:10:27:e8:32:
59:82:5e:25:37:fe:71:e3:4e:d1:19:c3:ea:c5:4a:42:b9:08:
e3:41:27:97:64:35:92:0a:2c:44:07:72:30:bb:86:99:a3:fa:
09:2c:e7:c1:28:84:22:fd:06:91:0e:f0:45:75:84:f2:39:3f:
80:74:56:6d:aa:67:d8:bb:52:c8:40:fa:d2:29:a2:96:0d:5d:
d2:2f:31:81:7e:d1:ed:bc:8d:0c:3a:28:27:19:3e:34:f9:84:
e2:b2:12:46:c7:18:f4:02:34:38:dd:06:3b:26:d1:1d:33:92:
f2:b8:b8:ed:ef:aa:a4:71:76:e9:27:7d:cc:09:99:d6:df:a3:
b5:69:0c:46:04:65:aa:fa:d9:a9:9f:de:59:ce:7c:f3:27:e8:
06:fa:85:44:1b:d9:92:ba:32:8b:53:d6:11:bc:da:51:a6:4e:
b1:bf:b5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org