Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZzdG3FE4AbaawTzgGGLsYUwRg9s.roa
File: ZzdG3FE4AbaawTzgGGLsYUwRg9s.roa (raw, json)
Hash identifier: 1KR6XCCjNkrt+uoaHjUY00vwNxlymWPeHIWtbILrse4=
Subject key identifier: 67:37:46:DC:51:38:01:B6:9A:C1:3C:E0:18:62:EC:61:4C:11:83:DB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F06
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZzdG3FE4AbaawTzgGGLsYUwRg9s.roa
Signing time: Tue 29 Sep 2020 09:56:25 +0000
ROA not before: Tue 29 Sep 2020 09:56:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 118.232.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3846 (0xf06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:25 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=673746DC513801B69AC13CE01862EC614C1183DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:9a:65:29:ba:18:ee:06:d6:1a:06:a0:ec:
44:5b:d4:6f:7e:f4:40:fb:ae:0c:1a:cc:b7:06:82:
04:54:44:06:03:b9:69:f5:d3:ea:96:4c:72:18:d4:
0a:5d:a0:db:5e:23:81:8c:90:e2:2f:a0:e2:d5:f5:
2b:6e:c4:04:d2:54:98:6b:5e:45:bf:d4:45:3d:4b:
e8:96:6f:81:e8:15:2b:58:99:40:f9:20:99:6e:cf:
f7:ff:01:e4:df:fc:6d:8d:47:bf:61:b7:b9:53:e0:
9a:16:5d:bf:46:51:84:80:85:f9:62:ee:ca:59:32:
5a:3b:42:ed:4b:89:3b:75:bd:df:c0:58:01:41:67:
f5:b7:34:c5:b1:64:72:23:27:3d:98:82:1c:ee:89:
29:d6:17:28:8b:8f:b2:3c:e0:01:b9:2c:be:0e:d4:
38:fd:3d:3e:98:49:d8:c9:3f:95:b9:ca:9a:7b:2b:
60:c8:99:b5:4c:41:a5:05:b7:17:ba:4f:0d:b5:97:
59:bc:cd:b2:d4:08:a7:f1:1e:a3:45:96:5b:0c:20:
14:c0:00:5e:ab:9e:87:6e:ab:1c:fc:d1:e3:27:79:
2b:4b:4f:b6:28:c3:f1:fa:58:e0:86:0c:63:5c:76:
4b:37:88:f4:b4:cb:fb:45:ad:9d:59:91:8a:3d:84:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:37:46:DC:51:38:01:B6:9A:C1:3C:E0:18:62:EC:61:4C:11:83:DB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZzdG3FE4AbaawTzgGGLsYUwRg9s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.160.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:c9:97:cd:5d:c2:0e:08:f8:3a:8e:b9:a5:76:55:8b:5c:05:
88:0f:a2:f8:6e:34:a2:12:d1:11:cd:b8:8c:48:b3:1a:94:71:
ab:0b:65:ef:65:05:7b:45:71:9a:c7:7e:b0:a9:e0:6c:dc:bc:
98:49:f0:43:a7:35:89:c1:f9:20:fd:21:19:76:e1:f9:01:08:
6b:a9:37:f4:23:2f:4e:de:bd:e0:88:61:d6:3a:2e:ee:61:b0:
12:24:65:5a:60:d7:5c:ed:cb:1c:16:e7:8e:d6:15:9d:7a:1e:
40:3a:d4:f9:c9:80:c3:01:93:12:15:4a:43:66:fa:8a:50:a2:
80:cf:71:2e:fe:4c:19:05:c3:97:87:ad:50:82:d2:11:b0:64:
dd:ca:b0:85:ea:41:73:7c:e3:3a:47:81:90:3a:d7:2d:bd:00:
4f:f2:47:0e:e1:69:ed:bd:d3:d9:22:c9:2e:e8:06:cc:4c:96:
6b:0b:5e:92:e5:f9:c5:65:00:9b:9f:88:cc:a0:91:0d:b5:de:
e0:6c:73:d8:5f:0b:d8:6c:1e:a5:25:c9:9c:88:e4:79:20:c8:
b8:c5:60:6e:98:bb:05:f6:25:a4:7b:a9:fc:d7:5f:32:df:0a:
7d:2a:a5:27:be:8a:4b:9d:c2:9c:fa:a9:ed:51:0c:64:3a:37:
67:52:d4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org