Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z7-2YdauExILz7v7MK7buDrHQk8.roa
File: Z7-2YdauExILz7v7MK7buDrHQk8.roa (raw, json)
Hash identifier: k3bzyI948pVrOFIn909KDT3Pb6BCkcr/I/fvpYO63CU=
Subject key identifier: 67:BF:B6:61:D6:AE:13:12:0B:CF:BB:FB:30:AE:DB:B8:3A:C7:42:4F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A8C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z7-2YdauExILz7v7MK7buDrHQk8.roa
Signing time: Wed 29 Sep 2021 02:45:28 +0000
ROA not before: Wed 29 Sep 2021 02:45:28 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6796 (0x1a8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:28 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=67BFB661D6AE13120BCFBBFB30AEDBB83AC7424F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:7f:44:e2:08:ad:90:53:4a:44:95:48:78:
b3:84:64:ba:de:37:16:26:fa:31:94:ff:61:16:88:
55:6f:f2:13:95:59:48:77:7e:20:a3:90:c7:8a:86:
15:16:12:44:5c:be:cc:cc:7f:c9:26:91:1c:c4:e7:
9d:a3:bf:bd:f9:58:e4:8c:0d:41:1b:85:34:be:7f:
1a:4f:b5:3e:be:03:f3:3f:84:81:ce:23:93:ad:7c:
37:46:91:46:50:99:7c:9a:c0:31:30:67:6e:d0:00:
37:e7:22:f6:87:cf:89:98:8e:e9:b9:32:7c:74:dc:
d2:72:3f:4b:95:b8:d7:25:0c:a1:cb:75:b1:a9:37:
31:5b:0a:4d:39:97:fb:d3:82:cb:0f:11:5f:3b:1f:
95:5a:bb:2b:16:3d:52:bf:fd:5c:6c:39:bf:78:be:
aa:0c:6a:b5:6b:13:15:61:ea:c8:0d:bd:42:83:6e:
6c:5f:95:02:07:30:b3:4c:a5:2d:02:1f:00:59:7d:
27:0a:3e:be:00:d5:64:fd:3a:a5:52:cd:c4:96:4b:
05:03:68:f2:bb:d8:fc:5f:09:f2:47:0c:44:a3:f1:
cc:0c:0e:92:9c:85:ae:ae:ad:1e:b1:c7:00:49:33:
b7:c0:2b:23:47:ce:c4:76:85:b3:57:ea:c6:ad:5b:
bd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BF:B6:61:D6:AE:13:12:0B:CF:BB:FB:30:AE:DB:B8:3A:C7:42:4F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z7-2YdauExILz7v7MK7buDrHQk8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.80.0/21
Signature Algorithm: sha256WithRSAEncryption
54:e9:8b:4f:70:06:ea:69:28:6a:1f:1b:f3:1d:25:b3:a0:f3:
72:8e:fa:f5:1d:04:d2:e4:19:3a:f0:33:88:77:03:78:25:37:
98:1d:83:f9:4e:8f:5a:54:c0:01:e7:09:44:26:fb:4b:84:73:
3d:a5:0e:06:9c:c0:f9:6f:52:d8:fd:8c:11:1a:72:88:c8:f1:
4a:67:20:91:fb:7a:52:e9:8b:8f:0b:72:44:c7:68:2e:fa:a6:
23:0c:4d:9d:42:6a:71:82:93:ac:4f:d2:54:9d:33:15:0c:0f:
a1:a8:31:3d:13:ea:11:b6:7f:79:65:40:99:fb:cf:ba:24:48:
35:da:18:e3:b4:25:1f:19:3d:d8:02:74:ad:be:fd:a8:48:20:
06:3d:15:46:e6:4e:a5:2b:c7:cd:8b:eb:4d:52:55:19:80:72:
87:05:49:a3:7f:f3:2c:38:b4:3c:a9:0d:56:a3:37:bd:d3:5c:
19:2a:3c:44:40:73:23:9d:26:8c:fb:57:40:c6:f0:90:35:ba:
39:56:48:df:da:c4:dc:23:6e:35:13:e5:a4:36:73:ea:05:8f:
7a:21:aa:5c:0d:62:f0:c5:4e:70:63:c0:9d:1a:8e:83:c2:87:
3c:a7:39:81:9d:35:57:0e:7e:c4:32:68:f0:c4:2f:22:6a:97:
de:f1:8c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org