Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wq_su3Bbpz0gJiVcxVE5TpAS3TA.roa
File: Wq_su3Bbpz0gJiVcxVE5TpAS3TA.roa (raw, json)
Hash identifier: NSobIcglBnbctNW8zdb1y8ZRWY4FPmqzJ/yzgk1J9kc=
Subject key identifier: 5A:AF:EC:BB:70:5B:A7:3D:20:26:25:5C:C5:51:39:4E:90:12:DD:30
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1859
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wq_su3Bbpz0gJiVcxVE5TpAS3TA.roa
Signing time: Sun 07 Feb 2021 12:28:33 +0000
ROA not before: Sun 07 Feb 2021 12:28:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6233 (0x1859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:28:33 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5AAFECBB705BA73D2026255CC551394E9012DD30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:64:f2:9a:70:58:89:70:6d:77:a9:54:77:
d1:95:cb:d7:bb:4b:ff:15:2e:69:37:f6:b1:ae:c3:
3c:48:75:2c:cf:fa:e0:eb:2e:cd:cd:f0:1d:1b:a3:
17:fb:8f:43:a0:cf:7e:91:1f:60:c1:48:8e:48:2d:
62:8a:7d:5e:15:64:5c:24:33:9b:0a:7d:f4:91:50:
cf:53:02:5b:4e:47:84:fa:5f:73:bb:93:bb:a0:8e:
eb:f8:00:3a:36:50:c8:ab:f5:45:9d:e4:e6:ee:e8:
ee:0f:04:1f:5b:a3:27:7b:90:67:53:fd:99:5e:98:
16:cb:47:a2:f5:55:f5:05:97:23:67:20:9d:70:02:
57:37:8e:96:31:18:4c:fb:59:20:ce:b0:4c:2f:99:
5c:7e:9b:c2:bf:34:47:da:9b:bf:08:c1:40:28:8e:
01:fc:43:6a:80:30:71:d1:24:3e:0d:94:6e:49:d9:
57:67:41:28:32:59:8e:01:08:14:92:96:57:57:f0:
d3:bc:48:83:b5:10:94:c6:d9:b1:76:4b:37:8d:3a:
35:d2:a2:3b:df:32:25:00:ab:be:5e:1b:d5:51:93:
75:1d:39:9b:88:3b:48:0f:22:68:b4:25:0b:55:54:
11:06:62:9d:74:70:4e:f7:23:f9:b5:19:04:65:49:
c6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AF:EC:BB:70:5B:A7:3D:20:26:25:5C:C5:51:39:4E:90:12:DD:30
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wq_su3Bbpz0gJiVcxVE5TpAS3TA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.60.0/22
Signature Algorithm: sha256WithRSAEncryption
00:92:aa:45:39:40:20:df:1b:2c:a5:63:a2:bf:d6:62:d1:8e:
e4:a2:28:f2:b7:45:01:6b:09:cf:6b:66:2b:42:00:c3:43:51:
86:05:b4:0c:dc:e2:c8:c8:d7:72:3b:6f:04:51:96:4c:ad:54:
b5:a6:f9:e9:00:bf:5d:46:61:70:0f:54:06:eb:2e:0f:7a:29:
de:2a:20:10:a4:98:ac:3a:a7:f1:4f:e9:7c:d0:4d:91:c6:43:
57:0f:b1:68:88:b0:c9:50:18:2a:65:65:75:a0:a9:16:a0:f8:
08:c0:af:9c:cb:6c:bd:dd:3c:c7:5c:73:a6:ca:f9:dd:2a:32:
95:16:01:a0:1e:e0:5b:0e:0e:3b:e4:7d:b0:33:d6:2f:5e:ad:
90:75:73:a5:9e:04:0a:76:cb:fd:43:8c:25:a9:85:fb:48:64:
5e:93:35:50:b2:4d:69:4f:fe:9b:9b:c7:a9:bf:65:34:9f:a3:
aa:b0:79:8b:6c:02:b4:7a:ed:cc:57:bd:47:61:39:14:ed:03:
1e:d5:01:85:44:9b:97:cb:0e:03:ba:a8:5a:d5:6d:1a:84:69:
cb:d8:0f:f4:c2:1f:c0:31:c2:d7:65:51:15:2b:93:d6:89:0c:
a9:62:88:4a:46:ad:f9:ba:63:7e:68:ab:e5:71:a8:f5:74:e1:
44:49:d0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org