Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rpc7nCbOBn3VQeymDMZBxmz-gYA.roa
File: Rpc7nCbOBn3VQeymDMZBxmz-gYA.roa (raw, json)
Hash identifier: xKH8mK4TOuZMDoIZFrRTHFG6thT6Cl/V9HMywqF1Qr8=
Subject key identifier: 46:97:3B:9C:26:CE:06:7D:D5:41:EC:A6:0C:C6:41:C6:6C:FE:81:80
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F70
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rpc7nCbOBn3VQeymDMZBxmz-gYA.roa
Signing time: Tue 29 Sep 2020 09:56:57 +0000
ROA not before: Tue 29 Sep 2020 09:56:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.230.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3952 (0xf70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:57 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=46973B9C26CE067DD541ECA60CC641C66CFE8180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:b1:2a:f7:d7:27:d9:76:74:24:93:59:83:
88:23:4d:eb:c8:da:b4:2e:12:d8:fa:ac:32:98:ad:
8c:d5:8e:93:24:4a:a2:74:d1:63:3c:6d:be:13:2e:
86:30:32:3f:90:1d:3a:7b:57:8e:71:08:48:b3:10:
90:3e:90:cd:8b:f6:54:24:82:67:44:22:32:2c:b9:
a5:9a:64:3c:5b:75:09:b1:c7:ec:ad:2c:94:38:95:
ad:68:7c:bb:04:23:62:0d:6b:af:d2:61:87:69:86:
62:d6:a0:61:c5:19:ee:e7:3f:ea:ca:f7:3c:15:0b:
62:be:d7:e7:aa:3b:4d:f7:3e:3a:dc:f5:0f:9a:de:
ee:e8:ba:14:9a:f8:7f:66:06:07:fe:43:db:7f:e2:
78:f6:b1:5c:bd:36:eb:3e:bb:53:52:cc:61:73:aa:
41:d8:31:07:0c:ac:15:87:de:ea:1a:fc:f9:f5:db:
2a:03:d9:8b:5b:08:f4:e8:27:4a:3d:c6:98:8b:d5:
09:53:13:62:37:12:6b:9c:fd:a4:cc:44:ab:35:ba:
52:f0:20:b2:44:1d:4b:85:cc:51:ea:4c:9c:d3:e1:
19:b9:a2:48:7b:4e:38:04:e1:c7:63:cd:7a:ad:2c:
d0:0c:74:ec:4c:b1:fa:79:ff:f6:8e:df:20:79:56:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:97:3B:9C:26:CE:06:7D:D5:41:EC:A6:0C:C6:41:C6:6C:FE:81:80
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rpc7nCbOBn3VQeymDMZBxmz-gYA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.230.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:6a:72:a2:d9:c6:08:36:51:10:b7:c2:b6:7c:42:7b:94:35:
51:60:4c:22:39:d4:27:2e:d2:9b:d7:20:7a:b4:d5:07:83:32:
25:e3:cf:6f:2f:75:d3:f9:55:90:6d:7c:81:bb:e5:77:5a:eb:
0c:62:98:82:39:48:42:2e:0d:3f:43:49:86:f4:8e:e7:58:d1:
c1:7d:45:f8:ab:6d:5d:33:34:9f:62:43:14:36:a7:a2:89:2a:
5e:b1:b7:c9:ad:f3:c1:77:b8:11:29:c9:8e:48:37:6a:91:65:
54:f7:8f:d9:9c:5b:71:cf:9f:e9:e9:08:fb:7e:85:a6:6c:f4:
38:71:08:c3:7b:fe:61:d4:9d:7a:c3:e8:0d:a8:1e:70:1e:f0:
c3:7d:3c:0e:f2:e6:8d:76:ea:5a:a7:a0:52:0a:71:fa:1c:16:
1b:58:e8:79:46:b0:1a:bb:7a:39:a3:6c:20:63:da:b5:e2:50:
dd:01:40:6a:aa:0f:60:28:d6:09:7b:c1:f1:0f:6e:99:8f:8c:
b6:62:ef:cc:80:63:57:38:75:6d:1f:f4:95:2d:6a:26:08:71:
2f:2b:57:2f:1f:de:7a:f3:15:49:a3:12:02:2f:62:c6:c9:1f:
4c:62:22:df:c8:dc:7b:5a:45:9a:8e:e8:b6:eb:95:98:f5:95:
34:d4:5c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org