Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YuUWGnr0ReNrm_J-HruCXpVFkHs.roa
File: YuUWGnr0ReNrm_J-HruCXpVFkHs.roa (raw, json)
Hash identifier: ylIDm5IQNOa/SSdPrJLxpokzwzeR0HyQsLlLIycQK8s=
Subject key identifier: 62:E5:16:1A:7A:F4:45:E3:6B:9B:F2:7E:1E:BB:82:5E:95:45:90:7B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F1F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YuUWGnr0ReNrm_J-HruCXpVFkHs.roa
Signing time: Tue 29 Sep 2020 09:56:31 +0000
ROA not before: Tue 29 Sep 2020 09:56:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3871 (0xf1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:31 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=62E5161A7AF445E36B9BF27E1EBB825E9545907B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e9:d7:aa:d4:f3:1e:f1:0d:29:2c:07:cb:12:
bc:84:9c:53:86:88:6c:21:b7:c4:3a:4a:e4:26:3c:
15:d9:1b:3a:df:cd:0a:5d:53:28:b6:e6:ed:df:69:
a9:00:3c:d5:46:7b:d3:b4:24:f9:0b:17:a6:23:31:
c7:c6:2a:f0:7c:14:3b:af:38:1d:86:f8:24:3b:5a:
ca:22:22:8a:4c:90:12:5b:91:3f:20:14:b0:e5:cb:
69:58:08:b7:f9:be:bd:e5:39:83:2f:20:85:67:0c:
29:78:a4:79:34:ca:7e:28:02:c0:22:3a:08:f6:1e:
45:22:b5:65:b9:6b:d8:e8:26:fe:87:ed:9e:fa:f0:
94:98:af:00:12:f6:3e:9a:fa:57:a0:a6:0c:79:c4:
0b:37:d6:a4:2f:7f:4f:f2:3a:e9:c9:66:58:aa:de:
cc:ab:47:6e:d0:ce:db:68:49:b0:93:85:07:00:2c:
38:d4:97:42:5f:91:b8:89:3f:0a:83:64:d6:4c:ae:
96:ca:4a:1b:2c:4f:e8:9a:5a:24:3a:2c:ab:17:15:
e7:e9:3f:03:a8:cb:0b:49:00:a3:e1:47:ef:07:c7:
87:42:20:45:d4:91:22:6c:19:dc:db:74:47:7d:69:
b7:d3:b4:ab:23:44:d7:b4:5f:bd:84:02:d2:bd:a8:
21:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E5:16:1A:7A:F4:45:E3:6B:9B:F2:7E:1E:BB:82:5E:95:45:90:7B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YuUWGnr0ReNrm_J-HruCXpVFkHs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.216.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:7e:a9:3e:1a:4e:ff:58:15:7e:a8:32:7d:11:e7:0a:d7:54:
7c:cc:51:c0:94:c1:06:39:0b:20:50:62:2a:69:fc:c1:19:7c:
ec:01:a6:ef:89:1c:2b:79:cd:53:25:e4:ba:75:e9:0f:64:15:
26:66:00:01:49:e5:27:26:cd:ac:03:4c:e7:a5:92:c2:5d:fb:
c7:0e:26:83:06:eb:77:a9:a2:ff:0a:0c:e7:86:c8:05:0c:8f:
d0:6d:4c:c0:eb:d8:a7:bc:d6:13:9f:f9:78:a0:62:fe:dc:7a:
58:e5:85:7f:61:53:80:2d:9f:0f:cb:1b:77:98:aa:40:8b:21:
60:b3:4c:7c:34:b4:b3:0f:a0:26:e0:a6:97:08:bd:e2:f6:0d:
a0:76:97:f0:3d:cc:e4:13:fc:68:47:8f:ab:22:e7:79:aa:19:
4f:58:8d:6c:49:5e:1a:79:55:67:f2:3c:67:f0:4d:e7:9e:08:
01:f2:93:44:a4:4d:8c:dd:72:75:a0:8a:f4:eb:74:31:a8:7e:
a9:68:87:fa:e7:ac:ad:ec:d3:c9:8f:91:20:17:04:7a:f5:cd:
97:e3:46:d2:df:52:dd:89:1f:20:a4:e5:31:0e:b4:24:c7:23:
43:38:5b:3a:ba:78:9d:89:4d:40:51:7a:dd:37:bb:56:0f:72:
2a:b8:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:22 2023 by rpki-client on console-ams.rpki-client.org