Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XdivX7xWe3ZQCCcA8OmXURDAn3Q.roa
File: XdivX7xWe3ZQCCcA8OmXURDAn3Q.roa (raw, json)
Hash identifier: ULejX+47OhQjHc5nJ7VGgWhRsgEGViPOCWSMCfM224w=
Subject key identifier: 5D:D8:AF:5F:BC:56:7B:76:50:08:27:00:F0:E9:97:51:10:C0:9F:74
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0CFD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XdivX7xWe3ZQCCcA8OmXURDAn3Q.roa
Signing time: Tue 29 Sep 2020 09:54:02 +0000
ROA not before: Tue 29 Sep 2020 09:54:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3325 (0xcfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:02 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5DD8AF5FBC567B7650082700F0E9975110C09F74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:47:71:a3:08:e5:54:cb:a9:ec:ae:4a:f5:
cd:c1:05:f4:f1:5e:6c:fd:54:eb:1f:e1:d0:60:50:
52:a9:71:b7:a8:dd:60:1c:cc:3b:fa:77:a6:ea:e1:
4f:d1:38:a1:81:e0:e3:1f:f7:d2:e2:68:ea:28:52:
4e:cb:e7:e1:9f:b4:63:e7:d4:46:99:ed:9c:5d:64:
34:c1:73:08:b8:24:db:52:00:bd:26:05:2f:d9:00:
20:8a:bf:bb:44:d7:43:b0:77:95:af:6b:97:20:d7:
77:b0:de:9b:40:82:aa:f0:47:b8:63:b6:eb:44:4a:
13:70:e7:7f:27:3e:c1:88:4b:c0:f2:13:9b:97:fa:
f1:61:6b:39:a5:fe:09:9e:09:82:ce:37:12:e6:57:
ae:59:be:9e:4c:c7:36:06:83:25:c9:fa:b6:9d:bc:
d7:93:03:0d:b3:f3:0f:3b:2a:6c:4b:39:0f:53:e0:
21:84:29:1b:67:11:5b:c5:32:b5:20:7e:ca:ca:e4:
39:6b:c9:a9:d8:a7:50:ac:58:d8:ac:a2:3b:e0:9d:
8c:ad:24:3b:d5:b4:b1:24:ec:6d:7b:23:5f:17:3d:
d9:e3:82:12:1b:8f:cf:5a:14:75:e9:f8:20:5d:d8:
01:e6:a4:06:1b:51:1e:4e:06:67:20:d1:68:01:b5:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D8:AF:5F:BC:56:7B:76:50:08:27:00:F0:E9:97:51:10:C0:9F:74
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XdivX7xWe3ZQCCcA8OmXURDAn3Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.80.0/21
Signature Algorithm: sha256WithRSAEncryption
65:51:60:cd:f7:c4:b5:4c:c3:ec:e1:b3:f7:c1:b4:00:0e:cb:
f2:74:0b:7f:79:5b:1b:a5:ef:dc:21:21:f6:c3:7d:6d:71:ff:
6a:50:af:7d:75:10:79:61:a1:09:30:04:8b:9b:3b:04:04:ee:
75:3e:c3:a0:77:f8:84:48:1d:27:5c:c2:c0:7a:c6:88:44:22:
d3:b6:18:1c:3e:56:bf:d0:b3:58:21:b3:19:d3:e1:5c:fe:06:
6f:17:ec:b5:74:87:0f:52:33:93:d8:64:e8:45:53:4f:60:64:
a0:51:5e:90:3b:fd:94:e3:3b:1d:8c:19:c3:a1:ea:ed:6e:ca:
e6:10:ff:86:72:9e:10:04:32:1e:ce:f8:fe:83:8b:b6:af:b5:
a2:1d:74:a5:2b:76:e8:e3:69:2a:31:35:18:ed:62:9c:25:f8:
c4:e3:1e:74:2c:90:ac:4f:88:58:ec:f5:a8:9f:c2:0e:8d:54:
84:21:f2:1d:0d:c3:91:b0:29:d5:a4:ce:6f:ec:03:51:4e:05:
b0:08:3e:25:f9:de:5f:01:84:4e:cc:d5:65:da:0f:a3:00:c9:
96:1d:8a:9f:85:3d:1d:ca:00:83:98:56:4d:03:e9:d6:ce:ea:
e4:9f:b6:55:ab:5a:2c:76:ac:23:73:5c:8a:d9:f0:da:64:c5:
ad:4f:95:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org