Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UkEuPWkTkBtbQ5RXXSlh8MXrxq0.roa
File: UkEuPWkTkBtbQ5RXXSlh8MXrxq0.roa (raw, json)
Hash identifier: w7oJGZFlrjur+JBMHYUvJCxXpQJgNWg/uEltHKUfaxY=
Subject key identifier: 52:41:2E:3D:69:13:90:1B:5B:43:94:57:5D:29:61:F0:C5:EB:C6:AD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1933
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UkEuPWkTkBtbQ5RXXSlh8MXrxq0.roa
Signing time: Sun 07 Feb 2021 13:06:28 +0000
ROA not before: Sun 07 Feb 2021 13:06:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6451 (0x1933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 13:06:28 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=52412E3D6913901B5B4394575D2961F0C5EBC6AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:a5:62:d5:39:b7:92:54:87:20:13:c7:7e:
7c:f4:2b:ad:a7:ed:b5:f0:1c:c8:3b:5a:9e:93:9d:
dd:3e:d6:be:2a:e8:99:bf:ff:e3:c8:94:0d:41:38:
5b:13:a3:d2:66:b0:ae:15:04:c8:76:88:3d:f4:fa:
d5:77:5c:aa:2c:49:ae:63:02:ab:ab:01:11:c1:19:
01:10:49:24:13:b0:c2:48:01:a8:6a:01:45:49:52:
1e:21:b0:a9:f2:a0:9e:a3:8b:31:a2:20:3f:fa:77:
d4:4c:3d:96:02:62:c0:d5:bc:e1:66:04:bc:b4:0e:
75:f5:c6:23:a8:21:4d:e0:b7:03:b5:86:45:c5:37:
5f:21:1a:2c:c6:d4:ca:f9:e9:97:67:23:51:d2:f1:
f2:a2:8b:30:c5:53:d7:2a:fc:27:80:90:47:37:bb:
a4:5e:25:9a:8b:42:00:2f:5d:ff:b9:36:ac:48:4d:
38:b3:51:2f:64:75:82:4b:d8:fc:c4:43:2b:c9:ce:
59:64:3d:18:1d:5c:52:35:cc:2a:76:c9:98:68:4d:
d2:6c:9b:37:b5:93:f7:e9:9f:ee:eb:4e:90:52:8a:
ab:77:47:76:23:5a:55:84:3b:a2:29:b7:83:fa:6e:
ff:0f:31:a8:21:cb:01:ea:47:a1:72:f3:6e:02:7e:
ff:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:41:2E:3D:69:13:90:1B:5B:43:94:57:5D:29:61:F0:C5:EB:C6:AD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UkEuPWkTkBtbQ5RXXSlh8MXrxq0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.192.0/22
Signature Algorithm: sha256WithRSAEncryption
60:f2:a8:5c:3f:3d:34:1b:0c:a0:ab:9d:03:49:78:51:cc:b4:
3d:d9:f8:8b:54:ad:a5:22:58:63:07:14:e3:ec:a8:11:10:a5:
f1:7d:97:b5:08:df:99:d7:64:96:6f:3e:ca:05:8c:ec:5d:0b:
74:7a:3f:dc:a1:cc:54:65:34:7c:dd:14:7e:c7:3c:ee:4b:41:
99:9e:14:cd:7d:db:ce:6d:e3:dc:ac:42:bb:02:e8:6d:77:ef:
0c:4e:6d:f4:a1:40:b0:7b:db:a8:57:63:5d:be:63:f1:51:46:
f1:fe:e6:21:97:cf:d5:42:32:48:1e:bb:82:f8:51:31:a6:ab:
77:9f:1c:73:db:dc:ea:e7:47:0b:cf:de:81:c5:af:fa:94:d6:
95:cb:8f:be:57:0f:2a:ac:6a:63:18:d9:57:d4:da:e0:e7:e4:
f9:d0:0a:b7:76:97:57:b2:b9:ff:08:1c:28:ea:7e:e6:6c:78:
f6:90:d8:ad:51:4d:f1:1f:03:bc:0c:e4:2e:26:77:07:68:b3:
da:09:88:68:89:ca:51:45:52:f3:df:95:b7:96:20:e0:bd:26:
b4:94:f0:6b:51:f4:24:1e:0a:b4:f3:a0:77:85:0e:fa:7e:15:
a5:c5:c5:05:0d:13:cb:ad:45:10:30:40:21:23:dc:d0:fa:77:
57:7b:f0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org