Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zizj0fvH2U7q2XBTtei_aHWll8E.roa
File: Zizj0fvH2U7q2XBTtei_aHWll8E.roa (raw, json)
Hash identifier: 9ybeshdyALnKzNvEmVqiShgLu8MtRstQm7e3LHUTn5U=
Subject key identifier: 66:2C:E3:D1:FB:C7:D9:4E:EA:D9:70:53:B5:E8:BF:68:75:A5:97:C1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 176B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zizj0fvH2U7q2XBTtei_aHWll8E.roa
Signing time: Sun 07 Feb 2021 12:19:06 +0000
ROA not before: Sun 07 Feb 2021 12:19:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5995 (0x176b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:19:06 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=662CE3D1FBC7D94EEAD97053B5E8BF6875A597C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:95:00:2b:95:74:88:0d:76:34:8a:e0:73:
4c:87:e5:65:05:76:8b:39:a4:9a:35:c4:ad:46:51:
bd:04:49:0a:aa:75:cd:81:bf:12:a8:64:b3:0f:45:
55:12:14:ef:32:2c:45:74:98:9b:f5:b6:16:c5:90:
da:39:33:02:0c:3a:ad:68:6d:40:10:95:ce:a1:80:
d0:d9:9d:63:7c:e2:ce:f9:cd:66:c1:72:46:28:c9:
44:22:f4:67:9e:2d:89:25:3f:09:ea:8e:a6:2a:53:
8b:8d:b0:c9:a0:f7:00:8c:f7:35:ad:78:29:62:98:
5f:79:7e:7a:13:ae:14:0d:8e:c7:98:f2:d9:67:3d:
e3:ee:7a:3b:fe:83:3f:a5:76:6d:d6:cb:71:3c:08:
b0:ca:df:91:e1:54:ef:32:3a:bf:8b:f9:d1:b8:3e:
87:20:75:0d:a6:52:19:df:07:21:e8:6e:c4:ce:12:
8d:65:f4:d1:11:4c:99:d4:71:ce:7f:d8:f8:f1:0b:
0a:4d:42:0a:00:d9:a7:48:e6:62:f7:69:80:a1:42:
0a:dc:3b:f6:89:98:13:3f:61:0c:8e:7d:31:2e:18:
67:20:8c:92:49:88:a7:f7:7a:15:30:11:92:bd:d5:
93:c5:49:a4:8c:05:85:57:bb:77:e0:d4:c3:cb:f3:
f5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2C:E3:D1:FB:C7:D9:4E:EA:D9:70:53:B5:E8:BF:68:75:A5:97:C1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zizj0fvH2U7q2XBTtei_aHWll8E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:c8:97:2a:3c:b4:e3:e8:e4:49:95:6f:83:d8:97:50:25:39:
68:cf:a1:75:61:6a:18:df:74:78:81:ff:ff:70:14:d0:31:09:
f7:67:05:7d:cb:ed:70:96:e9:e4:38:4a:a9:0f:1f:4a:51:54:
3c:c0:d9:c5:b9:74:b9:05:e0:55:9e:ed:cd:c9:f7:c8:47:ec:
6c:e5:0e:6c:81:3e:70:f2:80:07:18:9c:7a:bf:93:b4:ce:d3:
21:cf:57:d3:4b:d3:87:91:a4:79:34:d5:63:17:81:bc:d9:a6:
f8:6f:82:f2:c9:a3:12:62:9b:7c:98:0c:60:7f:94:87:5f:02:
99:63:ef:18:52:6a:97:dc:40:cf:f4:33:e9:85:91:d2:fc:f7:
17:bf:bc:a0:dc:2e:18:69:29:17:83:59:3a:10:f2:98:67:db:
d2:82:e9:cd:66:d2:a2:c1:9c:43:40:4d:65:0a:24:65:bc:2f:
90:7e:0d:84:b3:4b:fb:dd:fb:cf:13:25:1e:ba:08:27:26:11:
53:63:cb:20:00:c8:eb:58:e7:5c:b2:52:fb:16:ab:0a:36:ce:
14:7c:37:c3:55:77:de:84:bc:03:0c:8c:c8:b4:71:44:fb:fb:
3b:e9:23:bc:80:06:80:aa:27:4b:b5:2d:0a:1c:dd:56:59:6f:
c0:4d:7f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org