Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_PDCIWhRW57KwmNmYx2sqTITUGs.roa
File: _PDCIWhRW57KwmNmYx2sqTITUGs.roa (raw, json)
Hash identifier: z1cwg/YoA8z+AUjc3eu2i6KJYp9J6mk+Xxpf1Algae4=
Subject key identifier: FC:F0:C2:21:68:51:5B:9E:CA:C2:63:66:63:1D:AC:A9:32:13:50:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_PDCIWhRW57KwmNmYx2sqTITUGs.roa
Signing time: Thu 15 Sep 2022 02:52:35 +0000
ROA not before: Thu 15 Sep 2022 02:52:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FCF0C22168515B9ECAC26366631DACA93213506B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:1e:35:92:f0:4e:af:e6:f8:5b:31:90:42:
c3:94:45:ec:6d:d5:db:c0:a5:49:98:bb:d8:42:c9:
23:fa:7e:6d:b7:3a:9d:9c:6b:53:e0:70:e9:52:da:
6a:1c:0c:1a:b9:d0:ae:bd:a0:a6:21:84:fa:f1:b8:
ba:21:f8:03:0b:9f:2f:8e:11:89:ea:61:7b:05:81:
24:81:08:01:1d:1e:28:1e:86:f7:fe:b8:14:d9:b5:
f2:3e:0c:53:42:0d:1a:25:2c:e3:4d:95:f9:10:e9:
13:f4:4b:be:a8:5c:a0:ac:06:63:48:95:15:65:a3:
1e:eb:61:f3:dc:b2:50:22:50:c9:f7:11:e3:3e:12:
4d:86:bc:10:60:08:44:9b:fd:b3:47:c2:bf:c3:6e:
98:a6:7f:16:4a:7e:5a:ce:c8:26:17:49:0a:df:d4:
63:61:6b:c7:d3:51:68:4c:e2:8b:4e:f4:98:5e:85:
2d:e6:f5:9b:6c:2d:57:36:f0:49:e0:8a:d3:08:df:
68:75:58:c8:2d:bc:12:a6:43:d2:f1:8d:64:74:a7:
70:a9:7c:a8:8a:98:c3:f7:21:c3:5c:5c:54:52:8e:
8e:14:14:62:2c:dc:ce:9f:4c:61:41:a2:3b:2b:1b:
7d:66:aa:d9:71:41:59:90:a6:48:27:25:a0:df:ea:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F0:C2:21:68:51:5B:9E:CA:C2:63:66:63:1D:AC:A9:32:13:50:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_PDCIWhRW57KwmNmYx2sqTITUGs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.72.0/21
Signature Algorithm: sha256WithRSAEncryption
20:e9:1d:85:92:7a:be:6b:05:f1:5b:e7:08:81:ea:23:b6:cb:
01:c6:75:93:2f:46:ff:4a:cc:f3:f3:1c:d9:bc:9b:16:e7:a8:
f1:1b:b8:bb:5e:81:9b:66:34:66:e0:80:67:bb:20:c7:2f:a8:
9e:e0:49:58:09:35:07:0b:61:b7:9b:fa:a3:18:58:07:93:9c:
38:f8:44:f7:9b:4d:16:1d:67:b6:29:07:89:40:55:5a:b2:e1:
d1:7b:1b:14:f0:bf:55:77:fc:0b:36:38:04:cc:46:5d:57:99:
e4:8e:22:cf:67:b2:de:6d:d7:35:ae:5a:21:88:12:95:04:59:
5c:6c:02:42:94:27:a1:fd:39:04:e5:62:80:2d:a3:08:78:8e:
34:42:b2:65:cb:23:5b:07:3c:6f:14:b1:f3:fb:27:a8:00:c1:
76:79:21:46:18:fa:2b:66:d0:a8:b9:d9:f5:c3:da:cf:62:6e:
93:85:0a:02:b2:ae:3c:58:40:8c:8c:1b:e1:71:35:a2:1f:14:
cf:6c:df:1d:c4:a4:01:4a:17:96:a3:4e:0a:1f:fa:f4:f0:06:
1e:a7:7a:7c:f0:86:32:fa:12:e8:bd:f6:0c:9a:15:44:5f:d1:
fe:53:ce:13:37:85:9e:20:90:60:62:be:71:3b:d9:83:6b:8e:
ea:b2:72:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org