Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TblRjP-xjX7axCvowjiz3UeJhs8.roa
File: TblRjP-xjX7axCvowjiz3UeJhs8.roa (raw, json)
Hash identifier: +rvLN1yhm1bGA8I8uiyFdOIvAmZ/rRf3B19j4r0QtJI=
Subject key identifier: 4D:B9:51:8C:FF:B1:8D:7E:DA:C4:2B:E8:C2:38:B3:DD:47:89:86:CF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TblRjP-xjX7axCvowjiz3UeJhs8.roa
Signing time: Thu 15 Sep 2022 02:53:51 +0000
ROA not before: Thu 15 Sep 2022 02:53:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4DB9518CFFB18D7EDAC42BE8C238B3DD478986CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:4a:88:a0:bf:a0:81:c8:73:a4:38:09:03:
dc:8c:a6:88:99:d4:bc:67:8d:f9:29:a4:5e:3c:84:
ae:14:7b:a8:58:77:c6:13:5c:e9:a0:c0:36:e6:bc:
4a:61:d2:5b:c1:8c:d3:59:b0:59:fa:0b:fd:a5:30:
21:b8:4c:a1:56:5a:36:41:5a:12:bf:42:f2:2e:a2:
cd:34:96:ca:3e:c6:df:bd:09:3e:64:47:67:03:77:
10:38:62:c0:d5:45:13:a8:cd:9c:3d:ed:18:0e:84:
7a:fb:41:1b:55:41:98:1c:c6:55:47:ad:1b:13:92:
d3:a6:fd:ea:b8:46:c6:2e:b9:dc:70:a2:8e:43:09:
fc:4e:1c:58:ac:78:0b:27:0b:2d:07:33:22:30:49:
d9:34:36:c0:0b:11:bd:2a:31:26:31:62:cd:0c:22:
85:f9:10:91:30:46:19:9b:a9:a5:ad:8f:e7:d5:dd:
0f:d2:2e:9d:ce:bb:ef:dd:d6:79:c4:40:c4:52:5e:
99:ba:65:3b:d8:24:4c:9f:61:9b:7c:62:9b:93:1e:
4a:fc:1c:8f:45:94:cc:6c:36:a7:f6:94:eb:f2:ec:
c4:6f:e8:74:a5:53:49:74:89:85:44:ce:f5:e5:54:
ac:14:32:0c:f1:53:e5:07:29:23:8e:37:11:f8:fd:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B9:51:8C:FF:B1:8D:7E:DA:C4:2B:E8:C2:38:B3:DD:47:89:86:CF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TblRjP-xjX7axCvowjiz3UeJhs8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.200.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:dc:c6:c3:57:aa:bc:5f:a7:b4:ba:2b:f6:7f:91:8e:d5:ac:
d2:79:ec:7f:79:65:23:67:2a:c1:f1:6d:55:2d:01:7c:1b:1f:
fd:79:09:86:ae:3b:7d:22:dd:13:e7:5a:e8:d4:fb:d9:8a:46:
32:a5:fc:2f:a9:f0:d2:a6:22:81:9a:ab:40:bf:0d:f8:ae:fb:
5e:bd:f6:5f:89:a3:1b:50:4d:c8:f8:8d:68:a2:e0:6d:63:6d:
49:1e:b6:e7:f5:80:8f:3c:5f:f7:50:26:70:52:70:7e:e6:71:
0e:ed:c9:51:f2:40:30:7b:64:27:91:50:3c:c5:be:7c:12:52:
86:68:cb:f3:2d:cd:74:fe:da:ca:3d:3b:23:e8:44:cd:34:2a:
72:d4:ed:5c:12:89:40:24:55:b2:2e:50:03:ca:40:32:b0:8f:
1a:cc:45:90:49:5e:14:90:fd:2c:22:9f:e1:f1:54:fb:c8:51:
1c:7e:05:5f:8a:62:b5:98:8c:b2:2d:29:95:36:41:4e:82:be:
76:23:d8:ab:b4:ac:89:c6:22:67:28:ec:1f:5f:76:8c:10:85:
9b:00:69:c3:50:0d:f1:85:61:3a:6f:90:99:56:54:49:05:72:
aa:c9:dc:d3:1f:06:36:bc:9a:72:ca:92:7b:38:5d:33:17:97:
84:a1:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org