Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XCsREoBvAaKY56mSPAVXAIUxvIc.roa
File: XCsREoBvAaKY56mSPAVXAIUxvIc.roa (raw, json)
Hash identifier: PaGTN4rqty4i4ew5BcGsYh8fzH6Qy7M/19qBEUks9sE=
Subject key identifier: 5C:2B:11:12:80:6F:01:A2:98:E7:A9:92:3C:05:57:00:85:31:BC:87
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XCsREoBvAaKY56mSPAVXAIUxvIc.roa
Signing time: Thu 15 Sep 2022 02:44:43 +0000
ROA not before: Thu 15 Sep 2022 02:44:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5C2B1112806F01A298E7A9923C0557008531BC87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c1:a4:0a:bd:c0:19:e8:2a:d0:41:9e:42:61:
10:20:07:86:8a:4a:6f:a5:5d:9b:ff:2d:42:51:dc:
13:2a:26:71:45:1c:a5:93:f1:4f:fb:fe:e4:4e:ca:
a6:4d:1e:79:f1:d8:30:b9:75:a7:40:17:ab:cc:fe:
92:cf:20:98:7e:19:95:4e:1e:25:10:7c:0b:e9:06:
37:19:2a:3d:c8:32:3f:5a:f0:6c:18:8a:c8:1a:d2:
b5:7f:2f:8f:a8:59:c3:f1:39:08:e9:73:50:e0:84:
2c:2c:f3:76:1f:38:8a:d4:3f:5c:07:af:ac:8b:a7:
16:0e:5e:11:a3:05:20:eb:9f:8b:3d:f6:ca:22:1f:
6f:2d:c2:10:4e:b7:47:79:ce:5e:44:d6:d9:11:66:
e1:c9:ad:3d:15:18:7f:f4:a2:7a:27:cc:71:6c:5b:
f6:1a:80:90:ca:32:de:16:33:1c:20:db:85:3b:b8:
3e:5b:3a:72:3d:2e:5f:0f:87:a6:ae:ab:f1:03:af:
3b:b4:11:c1:70:26:cb:1d:29:2a:10:66:66:ca:ef:
c7:7c:f0:d6:27:7e:4d:d4:ff:77:bb:c0:b8:a2:0c:
b7:3a:71:8f:01:08:a3:79:a4:7f:37:36:23:c8:83:
93:fc:c1:8a:2a:1a:f7:fb:48:49:32:52:95:2f:79:
a0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2B:11:12:80:6F:01:A2:98:E7:A9:92:3C:05:57:00:85:31:BC:87
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XCsREoBvAaKY56mSPAVXAIUxvIc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.88.0/21
Signature Algorithm: sha256WithRSAEncryption
56:52:92:48:e6:51:94:44:36:a9:7d:9d:48:33:0e:61:15:c4:
09:94:d6:47:3f:e0:ad:0a:3d:aa:4b:b2:78:bb:a9:b5:02:b1:
f6:3a:99:e3:f2:ce:d2:ca:71:49:ae:3d:36:fc:f1:29:01:d6:
19:8b:88:80:ed:cf:04:f4:0e:e7:f3:96:1b:72:3b:5d:79:e1:
fb:ab:92:64:2a:2c:37:98:b0:a5:9f:88:5e:47:97:80:6f:b1:
82:4a:a7:19:3c:15:74:b8:76:4c:6e:cd:04:87:2d:0b:7a:ce:
4c:05:76:ec:35:78:71:7a:69:f4:ab:95:3e:a0:0c:54:55:03:
a5:e4:b9:4a:10:24:82:7f:3e:94:29:60:12:36:7f:6a:19:dd:
73:c2:0a:fe:b5:7e:06:13:97:3c:9d:3f:5a:8d:be:65:33:8d:
fb:d6:0a:90:42:ca:4c:fb:a2:8b:c4:d8:89:ca:6b:dd:c1:db:
54:74:d8:6a:f8:d4:05:6f:36:07:37:09:9b:53:e2:04:02:b8:
ba:a8:35:f5:c6:c0:d2:03:d8:bc:ce:af:c6:62:db:f4:43:35:
c0:af:c8:bb:d4:1f:b7:67:b8:1d:b8:17:c3:ac:da:7e:b5:6d:
16:96:c6:f1:3f:fc:d4:e1:37:87:5e:6d:40:5e:77:06:f1:c2:
01:38:67:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org