Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S_ek5Ixifyif6ZkrUXkR_KhmXEk.roa
File: S_ek5Ixifyif6ZkrUXkR_KhmXEk.roa (raw, json)
Hash identifier: 3cne2SXwyIfaCla6ijwflbrJhNfWihiruN9JeHfWtR8=
Subject key identifier: 4B:F7:A4:E4:8C:62:7F:28:9F:E9:99:2B:51:79:11:FC:A8:66:5C:49
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 230B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S_ek5Ixifyif6ZkrUXkR_KhmXEk.roa
Signing time: Fri 25 Nov 2022 04:41:58 +0000
ROA not before: Fri 25 Nov 2022 04:41:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8971 (0x230b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4BF7A4E48C627F289FE9992B517911FCA8665C49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:35:ef:dc:67:64:08:9d:37:95:07:4f:fb:
81:ca:32:89:72:f2:31:87:98:25:f7:34:50:6f:23:
1b:d6:2e:ec:2d:cc:33:de:90:81:7c:4d:eb:9c:e9:
cf:c6:8f:c7:36:b0:fd:93:23:12:fb:68:53:f5:f8:
61:39:01:73:b5:d8:3d:04:83:9a:47:6a:78:1b:34:
8c:9a:35:8b:cb:b9:d4:d5:a8:ed:2d:65:a3:3f:56:
33:d0:ed:f8:85:3c:65:97:4f:39:aa:96:ae:86:9a:
d3:46:03:57:57:fe:b1:99:3b:03:de:28:1c:99:9b:
c0:ae:34:9a:43:37:a0:7b:93:3b:b6:43:e5:ea:ca:
69:38:bc:ce:e0:7a:c5:3f:20:f3:ce:1e:6a:a6:88:
62:66:9c:86:a0:eb:0f:33:7b:f9:ea:ff:b0:1f:98:
ff:e2:de:b3:58:fd:a6:99:9e:e1:51:01:4c:e2:06:
22:08:15:52:42:28:aa:91:31:23:95:c2:77:b8:17:
13:20:41:56:c5:e3:fb:3b:66:ba:ac:51:d1:5d:15:
12:34:e7:c8:07:3f:03:ec:39:17:10:43:bd:d7:9a:
98:62:e8:a9:75:88:af:fd:e8:b6:91:19:95:09:26:
7e:8b:c2:d6:9d:63:c7:1c:98:e3:8a:f6:1c:1f:c3:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F7:A4:E4:8C:62:7F:28:9F:E9:99:2B:51:79:11:FC:A8:66:5C:49
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S_ek5Ixifyif6ZkrUXkR_KhmXEk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.200.0/21
Signature Algorithm: sha256WithRSAEncryption
57:45:d1:a4:43:09:0b:05:bc:34:19:82:1a:1a:24:01:58:58:
d4:60:5c:83:28:7a:b3:b2:f3:e6:c6:f7:a8:4f:89:8e:91:35:
d1:29:d6:c8:5c:0b:c1:aa:4a:d2:9e:a0:75:9e:a4:ba:6b:3d:
14:e6:f4:05:34:be:a4:6f:2a:c3:14:e6:4e:65:8c:21:af:79:
45:12:d5:87:ba:a1:33:68:17:a7:54:e0:f5:5d:29:28:d4:01:
92:9e:88:24:a8:01:e2:a1:a5:28:62:99:b2:47:18:5a:0f:da:
7b:45:36:cd:52:7b:8b:3b:dc:28:85:fe:7c:9a:7a:0f:63:59:
c3:0a:62:ad:f3:9b:70:09:2c:fb:55:f0:0d:d4:20:91:f8:39:
a7:fe:27:82:5f:6f:3f:6c:e3:9f:c4:4d:d2:56:f2:ca:f1:57:
20:0f:b1:40:db:a5:06:b0:3a:50:ec:90:93:d4:17:97:42:f1:
5c:a4:f8:2c:57:4b:dc:24:64:94:69:b9:8d:83:ef:10:66:3a:
f5:a7:96:da:f2:4e:b3:e6:04:1f:fc:62:ec:d8:dc:bc:90:13:
ad:01:d1:40:33:a7:a0:64:0c:4a:84:ce:39:16:c5:7d:31:4b:
53:fd:75:09:6e:cd:4d:ae:87:2c:a5:1e:a5:07:9a:5f:17:fa:
c9:d2:a7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org