Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XIDRe-lySAFRO-pjloQQVRWUUe8.roa
File: XIDRe-lySAFRO-pjloQQVRWUUe8.roa (raw, json)
Hash identifier: aLTib6HZTMRyCeO9TFN2kzZNeEYApLWbR933r9X1RAA=
Subject key identifier: 5C:80:D1:7B:E9:72:48:01:51:3B:EA:63:96:84:10:55:15:94:51:EF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0CF6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XIDRe-lySAFRO-pjloQQVRWUUe8.roa
Signing time: Tue 29 Sep 2020 09:54:00 +0000
ROA not before: Tue 29 Sep 2020 09:54:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3318 (0xcf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:00 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5C80D17BE9724801513BEA6396841055159451EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:1d:f5:6d:ac:cc:36:e4:db:cc:69:47:2f:
9c:6d:84:62:27:e5:22:ef:9c:00:45:b3:c5:8e:1e:
f1:4b:84:2e:3c:b7:59:2a:6d:57:d7:a9:78:b5:d4:
05:16:a8:ef:b4:07:22:3d:47:44:6f:9d:73:d3:29:
f7:26:dd:36:b3:55:48:4f:e4:cb:3f:ce:e0:17:2a:
9f:0b:4c:ac:c4:3d:7c:80:08:05:d7:58:40:68:4b:
18:b8:95:07:b0:45:f0:91:ef:4a:7c:27:66:27:67:
19:00:8d:1e:05:f7:df:9d:90:b6:54:f3:7c:7b:5e:
e5:d7:80:b5:c1:54:d8:9b:0e:a2:c1:d3:3a:e0:3d:
71:50:8b:ec:fb:91:da:88:31:72:5e:f5:d3:0b:5b:
1e:1d:0c:96:04:c0:65:46:9d:39:e2:b2:93:a1:1b:
3d:a2:10:9c:ef:af:fb:f6:59:e0:12:14:8f:a1:00:
ac:49:ab:19:30:92:94:8e:69:9f:15:5d:7a:c0:8f:
70:ed:ce:da:7f:b5:85:d1:66:cc:04:b0:0a:5e:b4:
9a:af:24:31:c6:da:8f:75:ab:3e:f3:1a:ea:38:c1:
ac:07:2c:aa:92:1f:15:45:67:8c:0b:48:19:b4:0e:
b9:68:63:b7:a2:51:1d:d1:8a:a2:b3:fe:73:e8:6a:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:80:D1:7B:E9:72:48:01:51:3B:EA:63:96:84:10:55:15:94:51:EF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XIDRe-lySAFRO-pjloQQVRWUUe8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.80.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:f7:6e:49:6e:d7:89:71:93:16:27:b7:50:ca:46:da:0a:cd:
70:bc:c2:ba:6f:69:6a:43:86:a4:ac:80:40:4c:94:54:e7:83:
10:43:c5:7f:4b:af:3d:ea:26:e9:f1:0f:9f:b5:e6:4e:78:4f:
1f:84:54:05:72:f1:fc:bf:70:46:4a:6d:8e:4f:2b:ae:73:7f:
4f:ef:66:c4:0a:bc:eb:91:32:f1:5b:17:bb:9c:73:4a:e9:f2:
29:7f:15:d9:01:6a:0c:6a:96:d8:63:53:4c:c9:56:63:5f:8b:
79:c5:ea:e2:4a:59:7a:69:19:24:16:d5:04:6b:a2:f7:88:75:
44:99:4c:1c:30:af:75:30:b8:f6:b1:ae:e7:b4:19:69:1b:bc:
6f:b1:c5:7b:02:e1:26:34:c0:bc:e8:ca:ff:e8:df:14:12:e6:
9b:90:b3:70:1c:37:a1:29:c1:3a:cc:14:42:5a:b0:ea:74:ed:
76:50:bb:f9:8c:69:02:3e:4c:3b:5e:67:22:28:24:12:cf:4a:
00:d5:ca:79:81:f6:84:33:17:07:92:03:44:f3:db:61:d5:ba:
be:4e:8b:52:c4:fd:9e:9c:7f:26:62:34:63:70:a3:81:40:e5:
74:8d:51:e4:b1:8e:05:71:8c:43:bb:72:e5:bd:53:6a:79:ac:
27:27:95:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org