Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WWeFnp9Ga6BZdD_dJCnu7ycLwTU.roa
File: WWeFnp9Ga6BZdD_dJCnu7ycLwTU.roa (raw, json)
Hash identifier: YFmfcPUGuEtoIWJhWQMqb2olAsZwIiJDiQnoCIAg/z8=
Subject key identifier: 59:67:85:9E:9F:46:6B:A0:59:74:3F:DD:24:29:EE:EF:27:0B:C1:35
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 183F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WWeFnp9Ga6BZdD_dJCnu7ycLwTU.roa
Signing time: Sun 07 Feb 2021 12:27:36 +0000
ROA not before: Sun 07 Feb 2021 12:27:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6207 (0x183f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:27:36 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5967859E9F466BA059743FDD2429EEEF270BC135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:10:3c:e3:d8:11:56:c9:a2:5f:f1:df:3f:
46:cd:74:30:dd:17:4d:2c:ae:a0:7e:5a:18:2f:72:
72:fc:74:c1:5d:2c:cd:da:61:33:7f:fd:af:2f:91:
ed:52:27:81:df:25:46:44:f6:ae:3e:fb:c2:7e:d8:
50:3f:dc:f1:ad:0f:89:05:14:d1:bf:e3:dc:e7:e2:
a7:31:41:a8:a9:67:77:6c:49:a3:36:8e:a0:c5:83:
16:2c:46:9d:55:2b:a5:6f:af:8e:66:29:e6:ea:ba:
88:03:ed:63:f6:78:a2:60:70:a3:75:d3:e9:21:da:
7b:34:5b:76:d4:35:0e:4f:7f:c8:1c:9f:88:67:9e:
d2:13:85:ae:1c:55:9a:c2:3c:07:07:e7:32:a7:d7:
64:75:95:f9:b2:f2:ff:a7:29:27:d6:2b:d4:7a:78:
e0:83:63:9b:ce:82:b5:ac:16:5c:d8:12:a2:87:0b:
87:9a:92:50:b5:7c:c0:ac:72:cd:f8:fc:57:12:2a:
7f:52:90:cd:19:b6:ca:17:6b:1c:18:81:37:38:c1:
cf:a4:ab:2a:b7:dd:01:4f:79:69:48:16:8a:bb:60:
cd:19:d5:65:c3:c3:ce:4c:a9:0c:65:64:79:c7:a2:
f1:4f:82:26:bb:b0:80:90:44:3e:ff:7c:94:b1:82:
1f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:67:85:9E:9F:46:6B:A0:59:74:3F:DD:24:29:EE:EF:27:0B:C1:35
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WWeFnp9Ga6BZdD_dJCnu7ycLwTU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.248.0/21
Signature Algorithm: sha256WithRSAEncryption
70:e6:3b:b6:01:18:04:c8:ca:15:90:e9:1c:4a:1e:9d:5d:f9:
73:c2:75:ed:8d:8a:f8:e8:ae:bb:63:19:10:25:e2:b3:bf:a4:
7c:0a:1a:5a:2a:81:2b:1d:af:df:c4:cb:d0:1d:35:1e:af:70:
6b:a3:e2:c0:bd:fe:9b:dd:00:a2:5a:e9:46:4f:fe:e3:6c:c9:
cf:50:b3:14:be:8c:d4:56:ae:e1:75:a6:7c:dc:1c:0a:da:5c:
54:83:30:4b:b4:c2:20:ad:5d:86:c2:90:9f:dc:62:50:f2:52:
fe:2e:26:7c:45:81:02:50:05:8e:e9:b6:d8:67:54:52:05:54:
bd:19:6e:a2:3e:c3:47:55:b1:ed:b9:81:c9:1b:03:06:ef:5b:
13:3e:bb:13:4a:83:6d:b4:7f:eb:82:9d:9c:3f:b6:c4:3d:bd:
79:69:4a:5d:bc:63:5b:76:0e:7a:3c:e7:c6:6f:a5:87:1c:a0:
89:07:6e:fc:c2:90:03:53:4a:24:94:23:7d:d2:f7:2d:4a:d1:
28:d4:07:26:88:2f:b6:11:ea:c3:6f:f7:35:63:49:ae:9e:01:
0f:c9:cb:46:2a:7e:c8:b5:33:48:61:65:23:1b:8e:29:62:6b:
20:64:48:8a:a5:dd:ae:5d:e4:6f:ca:02:97:b6:68:e2:3c:f2:
fb:be:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org