Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XtFbZ8YTw7RDmT5s7eKCcuZbTx4.roa
File: XtFbZ8YTw7RDmT5s7eKCcuZbTx4.roa (raw, json)
Hash identifier: JTrKPII/gOmbNTb3jJ1C/WuWbuikS7NoOfcEdeRsJxo=
Subject key identifier: 5E:D1:5B:67:C6:13:C3:B4:43:99:3E:6C:ED:E2:82:72:E6:5B:4F:1E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DDD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XtFbZ8YTw7RDmT5s7eKCcuZbTx4.roa
Signing time: Tue 29 Sep 2020 09:55:05 +0000
ROA not before: Tue 29 Sep 2020 09:55:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3549 (0xddd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:05 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5ED15B67C613C3B443993E6CEDE28272E65B4F1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:1b:2d:78:8e:f5:24:d6:48:d8:67:4a:c1:
c0:0d:3b:ad:c4:ff:a7:bd:9a:f4:29:88:30:6d:68:
7e:ab:73:df:bd:fc:2f:68:27:81:04:db:13:f1:22:
4d:4d:87:85:f2:34:e6:61:06:6c:36:4c:00:55:db:
67:8c:72:b0:44:3a:fc:de:da:73:2a:c8:c2:63:81:
ce:1b:af:5a:ec:6c:9d:c7:2b:05:5e:b9:74:56:5e:
d5:24:e9:af:d7:c1:01:bb:4b:e4:b6:5b:1d:a7:83:
07:1a:ca:c0:f9:17:fd:c5:32:1c:20:0b:d4:08:d3:
a0:f6:9e:59:a8:76:f6:b7:16:32:1b:02:3e:84:ee:
53:82:71:06:f2:56:76:43:b8:ca:1e:ac:ed:70:c7:
5a:ad:11:43:96:bf:fc:32:04:b8:dc:54:00:2c:27:
97:fe:b1:37:fd:6f:4a:62:60:3e:30:46:14:58:16:
24:9d:45:7f:72:f1:a8:af:b4:76:34:74:75:d5:b8:
43:b7:74:63:08:a2:55:33:a9:46:85:04:be:2a:d9:
66:82:97:a1:5c:d4:fa:bc:34:2e:a0:43:85:68:b2:
9f:19:14:ba:a7:0a:7d:9c:28:67:60:2a:61:7f:00:
ec:75:89:95:8a:b5:0e:6f:db:4e:1f:4b:72:88:44:
40:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D1:5B:67:C6:13:C3:B4:43:99:3E:6C:ED:E2:82:72:E6:5B:4F:1E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XtFbZ8YTw7RDmT5s7eKCcuZbTx4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.160.0/21
Signature Algorithm: sha256WithRSAEncryption
76:88:f0:44:5e:ad:2b:d4:77:80:b5:ce:a9:b1:c1:e7:6d:73:
44:85:e3:25:aa:c1:1c:6a:cc:f9:b4:ed:03:64:34:03:df:00:
8b:bd:d5:f9:03:d0:39:7b:12:35:7b:21:a1:8d:ba:3b:3e:53:
ce:4d:32:35:08:e4:bf:eb:b3:68:b7:2e:94:01:8a:33:56:4f:
b0:44:6a:7d:f7:79:34:f6:c7:f4:ac:13:8e:03:27:82:fc:da:
3f:52:aa:ee:cb:4c:f8:78:ea:ad:38:fe:4d:c2:e4:52:49:78:
ac:58:82:41:05:f3:22:03:0f:2d:6a:e5:07:53:23:64:f5:51:
2d:2a:b3:e8:48:2e:c5:d5:77:e6:57:c3:66:21:e6:6f:c3:f4:
22:0a:4d:ca:54:47:4d:68:71:fb:f9:ba:00:73:bd:e4:b2:f0:
5a:eb:0a:0d:c8:ed:f5:1a:38:da:35:65:bc:07:d8:99:ac:e4:
28:12:32:00:8d:0e:6f:97:f8:11:0c:ef:bd:c7:73:0a:5d:8c:
b9:12:38:7c:4f:74:ba:fc:d8:b6:b6:ef:14:b3:45:62:73:12:
9b:a9:76:12:4d:57:e4:48:04:5d:56:12:88:b9:e2:97:8c:04:
21:63:f7:16:23:30:21:72:41:be:48:e1:dc:69:f6:73:3f:28:
09:a0:a4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org