Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TJCgNrV228-nSzBSTFNdcRNs23M.roa
File: TJCgNrV228-nSzBSTFNdcRNs23M.roa (raw, json)
Hash identifier: DjxCKn/vnYUiAWhy+vKXlhg7Okg1L/U9ojySj+4/IwE=
Subject key identifier: 4C:90:A0:36:B5:76:DB:CF:A7:4B:30:52:4C:53:5D:71:13:6C:DB:73
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D85
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TJCgNrV228-nSzBSTFNdcRNs23M.roa
Signing time: Tue 29 Sep 2020 09:54:39 +0000
ROA not before: Tue 29 Sep 2020 09:54:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3461 (0xd85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:39 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4C90A036B576DBCFA74B30524C535D71136CDB73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:54:60:75:93:dd:88:a9:3e:d1:61:a7:5d:
92:43:0b:a8:23:b2:ed:3e:8e:bc:bb:84:a5:34:d2:
c1:27:f7:d7:b7:41:b8:d2:36:78:57:ba:16:da:65:
57:e9:57:5a:dd:43:a3:cb:08:ba:88:3c:76:6b:31:
37:a5:a5:53:f5:62:0e:cc:c6:3b:28:63:97:20:a7:
83:f5:71:df:07:6e:e9:93:a7:a6:97:df:12:13:07:
f9:65:f4:ed:11:d4:0c:b4:2a:4c:b0:bb:47:3f:87:
07:cb:e1:2b:ad:bf:84:c8:08:63:23:5d:bd:87:a0:
50:8a:b0:a2:68:af:91:f9:ba:16:a3:44:7e:bf:35:
e6:91:fc:0a:75:86:9b:9c:75:88:7a:64:c8:fd:9b:
0e:15:d0:2a:ad:61:d6:15:7c:cf:73:d5:52:f9:27:
d0:9b:78:82:40:7d:a0:6d:b4:d4:21:a4:48:93:c5:
03:b4:51:29:b7:a6:10:16:41:97:41:34:af:04:28:
ea:1a:1b:ff:75:d7:70:e5:0a:72:5b:1b:fe:09:e2:
e5:a7:5f:28:76:fe:3c:80:b5:e6:bc:2a:bd:d4:d7:
08:64:fe:90:89:9a:dd:ef:c8:6a:c4:7e:a3:14:bb:
d1:ef:4e:09:8c:ae:88:e9:f1:2f:fd:80:5b:92:80:
5e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:90:A0:36:B5:76:DB:CF:A7:4B:30:52:4C:53:5D:71:13:6C:DB:73
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TJCgNrV228-nSzBSTFNdcRNs23M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.196.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:d7:1a:e2:cd:18:b0:8e:5a:c2:b3:b8:f3:d1:6f:a2:e0:14:
74:ca:be:2b:9d:55:6c:2d:9b:fd:ea:5a:fa:83:a2:50:b7:9a:
5f:94:f5:3a:63:79:cf:ee:dc:34:18:a0:90:87:cb:79:c2:b7:
83:02:6c:86:45:7f:00:2f:00:47:84:9d:95:26:39:5a:b8:a6:
06:08:27:65:04:86:e3:0d:28:0d:d1:01:6a:b3:e4:9a:4a:3f:
71:c4:85:9b:14:82:55:39:e3:9d:e5:a2:a4:50:2e:f5:67:e9:
41:69:bb:da:e0:e3:10:a1:50:38:3f:32:96:7f:fe:ed:31:97:
f7:98:4d:30:18:ff:f1:3a:f1:55:94:7b:dc:f7:d6:f7:ad:62:
5c:c1:74:94:45:3a:a7:66:9e:e2:ca:ad:b7:2c:17:0c:98:7c:
45:87:aa:17:4f:8d:9a:f0:c3:c5:b6:ed:9f:f4:58:97:86:e2:
0c:a4:51:70:e0:72:5c:da:d7:9a:6f:01:2e:0e:1c:71:5c:fe:
8a:00:33:45:1a:5e:f2:3c:f9:3c:f8:f9:15:02:1b:21:68:41:
38:e5:92:71:bf:82:3a:67:56:f2:10:ef:6a:74:39:57:02:fb:
b6:24:58:73:84:7f:ce:c1:75:2c:ce:b9:f6:db:a4:5c:c9:a6:
39:89:cf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org