Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TQ9tk8jZZ4OQGlyKBGoKXrmqH1w.roa
File: TQ9tk8jZZ4OQGlyKBGoKXrmqH1w.roa (raw, json)
Hash identifier: TRu05pb2Od7ajznhnEUsrhegzeKobjElFdvUU8ThGXc=
Subject key identifier: 4D:0F:6D:93:C8:D9:67:83:90:1A:5C:8A:04:6A:0A:5E:B9:AA:1F:5C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0CFC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TQ9tk8jZZ4OQGlyKBGoKXrmqH1w.roa
Signing time: Tue 29 Sep 2020 09:54:02 +0000
ROA not before: Tue 29 Sep 2020 09:54:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3324 (0xcfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:02 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4D0F6D93C8D96783901A5C8A046A0A5EB9AA1F5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:21:ff:8f:19:41:52:ab:c5:8d:78:1c:aa:
cb:a2:c9:27:2a:5f:ad:0b:7b:e2:87:1f:9c:ab:f0:
59:c6:6a:dc:3f:d3:0a:a6:26:2f:49:10:c4:34:e6:
4b:b9:6f:4c:f4:5a:55:bd:02:2b:df:4d:f4:35:05:
c7:e5:c0:6f:ae:f8:6e:61:18:6a:59:ed:7e:7e:44:
67:90:7a:1d:77:db:46:da:50:75:80:75:ac:51:9e:
fb:58:11:77:45:95:97:20:c4:42:69:bc:72:ee:38:
3f:9d:b4:23:5c:2c:ac:77:d8:c1:5b:7d:ef:1d:d9:
99:22:34:a3:65:1b:3f:c9:68:7b:bb:72:46:04:1b:
5c:e2:0b:7e:63:f0:0c:28:07:af:95:2c:bc:d4:cd:
93:2a:0d:7d:80:77:54:d8:66:40:cb:78:50:d1:7b:
49:86:91:5c:fc:a2:10:4c:c9:cc:5a:85:72:02:ca:
83:1d:3d:22:bb:e8:0e:55:76:47:ef:eb:02:62:6b:
5e:f4:5f:e3:e2:b1:15:ba:83:47:ab:68:dd:52:3e:
19:a4:cd:ea:a6:78:aa:1c:0e:c6:3d:e0:25:4b:37:
74:2c:be:95:1a:4b:29:36:3d:21:58:fa:c9:2d:72:
d7:a0:32:d1:a3:67:7b:57:8c:6e:9e:d8:97:2f:bb:
10:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0F:6D:93:C8:D9:67:83:90:1A:5C:8A:04:6A:0A:5E:B9:AA:1F:5C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TQ9tk8jZZ4OQGlyKBGoKXrmqH1w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.64.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:5f:e2:83:64:d9:a9:b9:49:0c:eb:73:dc:1b:f4:0d:11:80:
b8:19:2b:e8:e2:d8:dd:a6:af:aa:bd:e0:eb:db:85:01:59:ef:
48:a3:97:bf:2b:d2:e3:26:a2:86:9b:bf:ce:e4:16:46:8f:b6:
32:ed:19:75:a2:bc:7e:ce:47:79:14:aa:11:f0:f3:cb:cd:b9:
1b:fb:c4:27:49:61:2c:c7:06:42:a9:01:86:d5:b0:fd:05:06:
d6:44:8f:62:7a:d3:be:39:b0:29:52:d2:ad:97:04:f4:8a:2d:
24:00:6d:83:78:53:c8:e4:d1:1d:70:26:0c:e3:ee:76:72:54:
c2:85:47:6c:1a:6c:fc:d3:b1:f1:79:bf:20:34:b9:1f:8c:f0:
47:2e:59:f8:e4:54:b9:de:87:35:45:6e:a1:09:ca:61:f7:c9:
04:da:a6:9c:f8:64:07:d4:44:93:dd:21:c8:30:ba:aa:80:6e:
c8:31:14:76:80:e0:62:72:c1:f9:7c:70:54:df:94:ff:4d:2d:
16:f3:05:f1:43:a4:81:6d:6b:37:42:81:db:5f:2a:15:c0:d5:
9d:1d:d4:27:eb:35:6b:88:f9:d9:80:85:a3:2b:0a:24:00:02:
98:f0:72:89:e0:04:34:9a:82:91:c6:cd:12:63:45:17:fa:ad:
71:a4:fd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org