Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U7a5bwCBefhjN9aZBrKWOTuza_w.roa
File: U7a5bwCBefhjN9aZBrKWOTuza_w.roa (raw, json)
Hash identifier: ncEYZs2Ct2wRQ6U7bAHZ7WWCgwbjbagIBtMjwNqrs5g=
Subject key identifier: 53:B6:B9:6F:00:81:79:F8:63:37:D6:99:06:B2:96:39:3B:B3:6B:FC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14A1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U7a5bwCBefhjN9aZBrKWOTuza_w.roa
Signing time: Sun 07 Feb 2021 11:59:24 +0000
ROA not before: Sun 07 Feb 2021 11:59:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5281 (0x14a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:59:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=53B6B96F008179F86337D69906B296393BB36BFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:d9:71:9a:ea:a9:ec:d6:87:a4:8f:a5:0c:
8e:c8:fc:8b:93:3d:ba:90:21:ff:e4:7e:b9:49:15:
52:21:56:08:96:be:d0:ac:eb:b6:d7:03:e5:ce:7e:
53:5d:5b:6a:b8:1b:0b:7b:70:b0:03:85:9e:ff:63:
bc:57:d4:b8:1c:de:15:cd:5b:e5:dc:1d:83:50:5e:
74:03:ee:80:60:09:a8:40:8f:ed:36:9c:21:60:4a:
35:fd:f9:30:e0:0d:00:86:fb:6f:b4:65:71:84:8f:
35:6d:90:b4:fe:ca:76:0e:09:c0:d8:6e:c0:89:bd:
a2:2e:17:77:da:62:68:76:e3:d5:28:36:ef:07:6a:
87:d8:b8:8f:66:02:f3:a2:ed:bd:82:32:79:f3:03:
d3:9f:f6:c8:3e:b8:d3:23:07:95:a2:e9:97:72:db:
25:bb:83:33:29:bb:f3:5f:a6:59:24:9e:dd:30:3e:
9f:78:bb:7a:d2:28:8d:0a:d0:a7:7a:51:c7:85:2a:
7b:d0:e5:cc:2a:8c:80:81:e0:84:a6:d7:a2:f3:a7:
15:19:ff:8b:da:7b:d0:3a:e0:c3:d9:56:af:2c:c1:
ed:24:7c:01:e5:6e:bb:34:9b:fb:02:99:cc:38:0e:
54:98:39:88:96:79:18:ce:f8:a8:d6:cf:ca:9f:25:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B6:B9:6F:00:81:79:F8:63:37:D6:99:06:B2:96:39:3B:B3:6B:FC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U7a5bwCBefhjN9aZBrKWOTuza_w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.102.0/24
Signature Algorithm: sha256WithRSAEncryption
10:07:5f:f2:f5:9a:c7:82:4b:71:2b:06:2d:4a:0b:15:3b:26:
f4:7d:9c:f5:9a:cf:cd:5c:79:49:65:d1:c5:c7:15:62:5a:dc:
f1:cc:68:a0:91:d9:22:53:ee:a9:12:08:35:15:37:a8:39:8f:
31:49:4d:08:d9:b4:0f:6f:f9:7a:fc:bf:21:d7:61:0f:84:94:
00:5d:12:5b:5c:88:48:bc:c1:8a:c4:d5:3c:dc:29:aa:09:8b:
19:65:0d:c9:11:e7:6d:ce:75:6b:30:57:da:fe:a0:d7:dd:48:
e6:21:30:e2:9c:09:72:d6:e1:85:f4:77:ec:b9:7d:2d:34:e1:
75:96:5b:a2:5d:21:70:c1:f4:11:dc:dc:4a:4b:21:a5:be:03:
e9:5b:a4:4b:88:21:a3:73:16:10:6e:4d:1a:69:03:13:1d:c3:
47:82:d6:51:3e:af:9d:c2:89:39:7d:c0:f7:f6:ae:24:b0:29:
d1:3d:a0:87:bf:eb:e5:d4:12:0e:67:48:ed:4c:09:0e:2c:78:
39:0f:94:d0:15:c0:e8:88:83:d7:de:a0:19:71:e6:72:dc:44:
a0:2e:9f:d1:cf:dc:4b:06:58:a4:79:e0:2a:4a:c0:ae:76:e9:
93:74:14:c7:7f:56:0d:f0:e4:af:31:80:e6:0d:b3:da:d8:9b:
0b:07:5f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org