Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XeBxLxLYWZqYBaKyO6xkC0d8Y2M.roa
File: XeBxLxLYWZqYBaKyO6xkC0d8Y2M.roa (raw, json)
Hash identifier: 8ZgZ/f+lCZHz+6h8BQFu4yoZ1p3kwreav+xoP19mHKA=
Subject key identifier: 5D:E0:71:2F:12:D8:59:9A:98:05:A2:B2:3B:AC:64:0B:47:7C:63:63
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F32
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XeBxLxLYWZqYBaKyO6xkC0d8Y2M.roa
Signing time: Tue 29 Sep 2020 09:56:37 +0000
ROA not before: Tue 29 Sep 2020 09:56:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3890 (0xf32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5DE0712F12D8599A9805A2B23BAC640B477C6363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:13:01:7b:0f:a5:40:79:a6:b8:16:49:17:
f6:35:8d:51:18:9b:2f:c6:49:8b:32:c7:65:87:1d:
a4:af:3a:ba:f3:eb:c8:33:8b:90:1e:d4:29:44:61:
f4:ad:6b:8b:27:f3:1e:68:67:55:16:3e:eb:99:f9:
63:39:5e:c9:e8:c3:95:da:43:ac:3d:c7:f2:68:8c:
f6:8f:08:0a:aa:b4:43:00:1f:04:7e:36:bc:23:64:
05:f9:78:fb:da:54:8a:c2:93:4b:0b:d3:f2:ae:f2:
80:8d:75:05:a8:0c:6f:1d:81:6a:92:47:3f:27:81:
3b:f6:0a:81:62:f0:ff:14:ba:b8:03:ac:b2:e6:a6:
20:6c:97:c1:52:1d:86:68:0b:9c:d2:5b:30:b9:d5:
ae:93:cd:50:49:01:04:3a:d8:37:74:76:c7:22:fa:
ed:e8:45:8f:25:e1:03:a2:31:1d:22:18:9e:40:b2:
46:cc:76:bf:54:16:79:7f:e9:76:41:d2:2f:47:79:
5f:99:7a:3e:50:2f:f4:9d:15:f5:c5:8a:50:dc:79:
17:e9:c7:32:d8:15:bf:3e:f0:ea:11:23:07:75:29:
52:f5:f6:09:f0:9a:36:ac:8b:36:5b:af:c0:52:89:
c9:44:72:a8:52:d0:7e:31:33:76:2b:16:75:74:c9:
d4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E0:71:2F:12:D8:59:9A:98:05:A2:B2:3B:AC:64:0B:47:7C:63:63
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XeBxLxLYWZqYBaKyO6xkC0d8Y2M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.36.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:93:a3:29:b0:ed:cb:4c:40:43:8d:c8:d1:9d:1c:35:98:ae:
e8:f7:52:00:84:7c:33:ae:14:01:cb:c5:0e:0b:cf:14:6e:12:
da:b4:7c:5f:ca:9b:5a:42:5f:78:92:38:90:f9:1c:d5:35:ca:
9f:0d:9a:9c:8d:73:89:e4:78:44:ce:7f:48:05:3d:70:81:70:
85:bc:81:f7:50:7b:8f:3e:53:7f:29:2d:25:2a:b6:f5:49:9d:
06:a3:33:4c:28:85:7a:95:7c:05:60:44:02:b1:aa:67:fc:23:
2b:b2:89:ec:a2:36:e2:03:69:2d:e8:fd:ce:e7:4d:fd:14:5f:
e2:90:23:4a:4f:80:85:d2:f1:95:a2:b1:b7:df:2f:80:56:53:
34:35:36:84:8b:54:dc:aa:79:8a:cc:62:97:30:f0:6b:91:b0:
4f:02:2c:14:48:b7:0e:36:0e:84:b8:a0:a9:3a:75:fd:ce:ef:
7e:b9:97:b6:77:05:42:bd:c2:26:8e:77:69:5b:18:6e:41:33:
39:03:ba:31:6e:43:68:51:5b:45:ba:57:4d:a4:90:e0:93:d4:
3c:72:0d:48:05:23:4b:22:05:1b:f1:3a:cf:03:3c:11:9d:0e:
13:6a:d2:ce:d4:42:80:ee:ee:48:c7:9d:5b:2b:df:68:48:dd:
db:58:2b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org