Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S8UJt2ETiwRZtXstvnT_iFOCRS0.roa
File: S8UJt2ETiwRZtXstvnT_iFOCRS0.roa (raw, json)
Hash identifier: QTRMHE5DNYY2RDmuc/Lp0M6BgbizezBSvXk/9Jqb218=
Subject key identifier: 4B:C5:09:B7:61:13:8B:04:59:B5:7B:2D:BE:74:FF:88:53:82:45:2D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D5C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S8UJt2ETiwRZtXstvnT_iFOCRS0.roa
Signing time: Tue 29 Sep 2020 09:54:28 +0000
ROA not before: Tue 29 Sep 2020 09:54:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3420 (0xd5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4BC509B761138B0459B57B2DBE74FF885382452D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:94:0b:6b:2d:6a:8f:ba:35:0e:dc:56:ca:
ef:85:09:15:30:dd:c2:ba:fc:e4:4d:1f:97:0b:a9:
a7:d3:4e:85:2d:86:37:86:e6:63:d0:cc:ad:5f:1f:
07:4e:39:e7:f7:c1:42:85:20:ca:b9:24:a7:0f:9a:
12:3b:9a:14:14:ef:ef:09:6d:6f:96:93:00:b2:27:
01:6a:b0:11:9c:1f:95:7d:f8:fd:5b:e7:0a:43:f0:
df:9a:14:35:8b:47:41:b5:62:7c:82:5c:19:66:e4:
19:af:f7:3e:11:f4:44:c7:b4:95:9d:cb:50:40:48:
1d:67:67:ba:45:34:82:83:59:c9:68:4e:52:be:7f:
37:87:70:f8:8d:8e:ca:a2:2a:c9:0f:ca:40:cd:92:
f3:24:a9:f5:40:b4:b1:45:7c:b9:de:28:89:84:4b:
95:67:63:99:ea:09:48:4b:4e:57:c1:fd:5f:6f:33:
36:05:ed:46:f8:70:9e:16:ff:b0:a4:96:ef:ed:ab:
81:de:e9:0e:d4:cb:97:50:e4:bb:08:66:05:b5:93:
2b:6c:66:6d:18:97:7c:f3:02:b5:78:74:bf:72:1e:
9d:df:d7:4e:b6:73:24:90:78:58:a1:fe:de:3f:fc:
4d:6c:25:f3:54:43:32:5d:d9:0f:38:5e:55:49:77:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C5:09:B7:61:13:8B:04:59:B5:7B:2D:BE:74:FF:88:53:82:45:2D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S8UJt2ETiwRZtXstvnT_iFOCRS0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.8.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:82:ed:22:89:17:09:59:4d:74:12:50:75:32:a2:10:62:02:
19:c0:a9:1d:13:02:6c:42:06:5b:b1:0f:98:bd:b8:a1:38:42:
e2:94:71:46:68:0f:1c:72:45:ba:bb:2e:61:ed:d0:07:e3:03:
30:32:d4:ef:ab:36:b8:88:5f:63:ed:d8:43:d5:cf:c4:e8:f1:
25:16:61:06:d7:6d:69:d5:56:ce:80:3a:f0:42:76:81:99:17:
52:14:09:38:1e:c9:72:74:cc:35:90:7d:3a:22:c3:a5:98:5b:
c5:a4:64:8f:be:e9:b3:f0:0f:50:a6:80:4b:be:be:98:ff:04:
f2:a8:e7:da:4a:de:a5:86:c1:7c:be:cc:fe:eb:54:ba:4d:c1:
b0:38:81:16:75:69:53:db:da:56:0f:6a:ba:b4:dc:30:f8:02:
d7:0a:fc:98:0d:e8:11:99:02:7e:7d:ab:08:a5:95:ad:ce:c8:
15:a1:c6:62:77:6a:64:d6:79:46:87:cf:6b:3b:7b:a4:fc:06:
90:06:bb:09:d3:0b:1d:68:75:c2:8d:75:ff:55:1e:53:60:d0:
ec:19:20:09:10:ee:4a:e0:24:67:6c:b4:c9:c2:0a:bd:b2:e2:
c5:08:35:2f:23:3e:d3:e5:4d:3e:fd:88:b7:3b:b4:ad:1c:3c:
a3:d4:6f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:19 2023 by rpki-client on console-ams.rpki-client.org