Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YO_XNi3n8W_9IFZJ9bYlbj9fa1Y.roa
File: YO_XNi3n8W_9IFZJ9bYlbj9fa1Y.roa (raw, json)
Hash identifier: a8AOjO0oXnoRKQCw3uSmsjnYvHIoN9zn8QZZpVF8Y4c=
Subject key identifier: 60:EF:D7:36:2D:E7:F1:6F:FD:20:56:49:F5:B6:25:6E:3F:5F:6B:56
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CBC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YO_XNi3n8W_9IFZJ9bYlbj9fa1Y.roa
Signing time: Wed 29 Sep 2021 02:48:08 +0000
ROA not before: Wed 29 Sep 2021 02:48:08 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.232.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7356 (0x1cbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:08 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=60EFD7362DE7F16FFD205649F5B6256E3F5F6B56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:5d:13:52:87:30:af:7d:ff:d8:76:34:8b:
90:00:ff:12:7c:43:a2:46:00:1a:31:de:cd:42:eb:
04:91:72:01:8c:69:cf:9f:6b:32:2b:ce:44:7b:13:
38:ee:e3:74:88:47:d7:58:32:32:7a:44:27:61:93:
5c:27:68:43:db:b9:26:d6:ad:fa:3a:f4:de:4f:83:
49:44:cd:82:be:e4:06:cc:0f:54:6c:a8:ae:b1:52:
05:8c:28:da:f4:ff:dc:b7:13:8b:84:a5:86:1a:82:
f4:16:25:4d:70:81:45:c2:3f:9d:8a:4a:8e:91:ea:
8e:ed:9f:97:d0:10:dd:54:98:f6:e5:e2:67:09:db:
8b:5b:18:9e:f9:92:69:13:64:fe:13:7b:91:ac:ed:
bc:40:83:f1:6c:7a:b8:56:87:ab:92:69:d5:72:c0:
95:74:e3:b8:83:83:79:c7:ab:2d:85:26:5c:a1:1c:
76:c7:a3:6c:54:9e:53:83:4e:44:94:3e:4d:75:73:
fc:9a:02:1b:64:cc:95:24:23:1d:9d:7f:42:70:4d:
61:e5:73:14:80:b6:3a:a2:9a:ef:70:6d:e9:29:01:
f2:6d:18:f6:73:9b:32:7e:69:33:dc:9c:98:40:ac:
be:f3:db:56:78:e2:08:d0:a3:6e:fe:93:f6:43:51:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EF:D7:36:2D:E7:F1:6F:FD:20:56:49:F5:B6:25:6E:3F:5F:6B:56
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YO_XNi3n8W_9IFZJ9bYlbj9fa1Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.168.0/21
Signature Algorithm: sha256WithRSAEncryption
af:49:87:41:5b:5e:94:7f:99:24:c9:b3:ce:9f:da:9b:fd:cd:
cc:b4:65:ab:f3:fe:d2:b8:5a:31:0b:13:cf:9e:5b:8b:97:89:
54:00:a6:4a:a7:17:03:76:23:f2:de:38:71:7d:e8:37:71:3c:
ba:41:c7:32:81:43:76:56:bb:92:7b:ee:54:35:4d:f9:74:55:
af:9e:55:94:c8:a9:ef:96:ad:69:69:61:ee:55:f5:fb:31:f1:
bf:47:26:0d:c7:bc:27:4c:15:51:cb:88:57:92:5c:17:46:14:
63:1c:db:eb:30:38:de:98:2f:da:fc:71:5f:80:2b:8a:b0:6f:
8c:1c:e7:56:b3:b8:e7:21:d9:6c:c8:b3:c9:c0:fe:51:f0:e4:
e6:14:3c:6a:45:32:33:7d:c6:38:e4:6b:8f:a1:2f:b2:ab:fa:
82:fe:b6:ec:da:4e:b5:2e:e1:1d:fc:5c:5e:b6:78:8d:77:30:
74:f8:ed:7e:ca:a7:de:e4:3b:ef:19:c3:ee:26:f7:13:a1:88:
74:54:24:c6:5a:f7:85:54:f9:3e:91:13:30:5a:2d:28:58:59:
91:fd:b0:09:54:c2:d7:17:7f:ea:b4:75:5c:75:12:60:35:f5:
db:86:13:e7:e5:04:b0:8d:72:31:40:d0:ea:91:3e:d5:e6:b6:
dd:f3:3d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:34 2023 by rpki-client on console-fra.rpki-client.org