Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WxkhOfIwv5z-3T9SIA7tgCo5Xhk.roa
File: WxkhOfIwv5z-3T9SIA7tgCo5Xhk.roa (raw, json)
Hash identifier: lnyRAZ/gfbyhZg2KQeUdC9mkB2tB3wC++WVKnaDUxNM=
Subject key identifier: 5B:19:21:39:F2:30:BF:9C:FE:DD:3F:52:20:0E:ED:80:2A:39:5E:19
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WxkhOfIwv5z-3T9SIA7tgCo5Xhk.roa
Signing time: Thu 15 Sep 2022 02:46:10 +0000
ROA not before: Thu 15 Sep 2022 02:46:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5B192139F230BF9CFEDD3F52200EED802A395E19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:de:c7:ac:9e:8d:3a:81:b7:e6:3a:44:7d:
1b:27:5a:9c:2e:f2:c0:ea:c6:cf:25:b7:41:bb:a7:
5a:03:91:6b:e0:ca:30:6a:40:68:69:cf:d2:3f:4b:
49:91:e2:12:02:30:db:86:9a:76:81:36:53:eb:07:
42:e2:88:62:46:d1:30:f0:ec:2c:aa:47:79:92:d8:
9f:ba:43:77:ba:57:43:a5:62:40:15:87:24:b6:cc:
d9:03:ba:84:d2:33:50:69:6f:58:80:93:50:8c:3b:
e8:3f:98:f8:68:99:6d:bf:bd:05:7e:be:35:09:d1:
19:4c:33:dc:6b:c2:27:e8:cc:04:0d:c1:f5:17:aa:
81:8a:ea:4c:1c:23:9d:55:76:3a:b8:94:1c:84:01:
14:84:bc:d6:0b:36:81:26:1d:44:94:a7:8d:78:58:
b3:2b:4b:e8:77:96:81:28:97:da:d8:61:85:fe:e9:
a1:32:74:e7:c7:8c:10:3a:aa:43:76:00:01:e1:1c:
26:7c:18:ec:b0:a4:ec:98:26:a0:57:7a:b1:c8:de:
b9:a5:f4:98:61:74:6c:22:1e:b5:2f:3a:da:5e:fe:
fd:b5:0c:39:1d:15:d0:a2:d5:53:23:cf:10:11:b9:
36:27:19:91:96:65:33:08:e0:11:3e:da:fd:0f:da:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:19:21:39:F2:30:BF:9C:FE:DD:3F:52:20:0E:ED:80:2A:39:5E:19
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WxkhOfIwv5z-3T9SIA7tgCo5Xhk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.88.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:b7:1c:29:a6:9a:d9:1c:4e:e0:f5:be:6f:74:df:97:7f:74:
7c:03:bc:88:fe:72:3e:63:36:87:5e:a0:37:3c:0f:d0:ab:1f:
5c:1b:1c:a3:69:b2:80:99:34:7d:99:23:43:82:cb:d1:cb:16:
dc:c8:49:96:e5:9c:53:06:17:54:05:99:59:c8:27:f5:e0:f1:
5d:9b:5c:9a:c8:a8:32:3a:0f:58:6d:b6:e8:e9:07:ca:96:ce:
4b:5b:2a:8d:e5:71:69:c6:e0:17:a0:c4:6d:ce:96:e7:c2:4f:
d9:bb:6b:93:a2:aa:30:33:6a:8e:6e:6f:c6:77:1f:8e:7f:cf:
19:11:03:48:82:57:05:dc:75:40:c9:be:56:76:3e:47:8a:e3:
8f:b2:ad:a6:9f:37:06:19:dd:b8:7b:c2:6d:ae:03:cc:ce:4d:
91:48:a7:e2:ab:c4:ee:51:46:48:68:0f:17:5f:0c:27:7f:ff:
fe:f3:b0:54:7c:a8:f0:52:e7:a4:e8:0a:1f:26:90:05:2a:17:
71:7f:8a:f6:f2:f5:d8:82:88:56:91:91:51:53:4a:6d:09:14:
af:f7:7a:be:ef:46:1d:e3:4d:9e:2d:80:cb:72:9b:00:8b:d4:
09:4a:45:e0:5b:7e:dd:ca:59:d9:15:d4:e5:90:09:11:3b:16:
92:e9:63:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org