Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_o6ASpmCXNXM-_9zZYZhBOdD_Xc.roa
File: _o6ASpmCXNXM-_9zZYZhBOdD_Xc.roa (raw, json)
Hash identifier: HbU9dFjoYe8ROrk+T+vlo9Z7icswZYxnYO6vpLFGseA=
Subject key identifier: FE:8E:80:4A:99:82:5C:D5:CC:FB:FF:73:65:86:61:04:E7:43:FD:77
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1707
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_o6ASpmCXNXM-_9zZYZhBOdD_Xc.roa
Signing time: Sun 07 Feb 2021 12:16:07 +0000
ROA not before: Sun 07 Feb 2021 12:16:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.208.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5895 (0x1707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:16:07 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FE8E804A99825CD5CCFBFF7365866104E743FD77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:15:e8:59:68:b5:69:00:6a:72:b5:a2:aa:
e4:c6:76:7c:f9:33:bf:42:47:c8:84:c1:a3:2d:cc:
c2:4a:3c:3a:39:0b:85:3e:fc:f8:7c:5f:59:e2:4f:
b2:0d:cf:56:88:b2:22:6d:d2:5c:ce:e7:27:30:8b:
30:fd:04:93:26:f1:04:b6:0f:87:8e:f4:e5:71:a7:
c0:13:8f:3d:c0:fa:2d:ea:76:7f:fd:dc:7d:05:bd:
a3:e7:14:4e:04:2d:5c:a6:1c:e6:c1:bf:8e:f0:2e:
99:5e:f6:84:55:5d:40:8a:d2:44:e8:5c:c3:27:43:
85:62:44:07:5c:83:b9:d3:cf:89:59:3a:44:53:c2:
71:d0:49:5e:e8:2e:96:12:33:35:34:ae:85:72:c1:
9b:95:4c:48:0c:3d:5b:a6:2f:e8:3a:40:0d:e6:3e:
d8:5b:cc:ed:ca:26:cf:b1:dd:01:44:e3:7c:92:b1:
bd:8b:f9:bb:40:cb:f8:6b:03:73:91:99:53:8c:eb:
a8:a9:0f:82:e1:11:46:15:b3:89:15:cb:58:18:79:
a8:5a:a3:c2:80:e4:b1:52:c2:92:d7:73:71:90:9f:
66:e4:17:ae:8b:aa:fb:a1:5d:0c:8a:be:a1:7e:01:
db:24:93:a4:11:47:b3:c7:19:32:90:0d:ee:98:b5:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8E:80:4A:99:82:5C:D5:CC:FB:FF:73:65:86:61:04:E7:43:FD:77
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_o6ASpmCXNXM-_9zZYZhBOdD_Xc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.208.0/23
Signature Algorithm: sha256WithRSAEncryption
55:f3:64:1a:dc:66:18:10:f4:96:96:76:a1:9a:00:f0:58:b6:
2f:c9:ce:53:71:e0:25:e1:f3:c8:fd:cb:37:a4:a1:86:dc:07:
56:78:fb:94:34:b3:27:3b:93:e0:64:a8:5a:13:78:99:2b:d8:
2e:b2:6d:38:4c:7b:44:af:12:61:2b:89:77:d2:5e:c0:87:ff:
a6:bd:d0:7a:3f:37:38:5f:9b:27:55:3c:a0:d0:09:f4:1f:a3:
36:55:31:3a:b0:76:39:41:14:79:34:43:1e:26:c6:a5:4d:43:
03:49:15:f5:bb:ab:b2:db:c4:1a:c2:01:f2:31:48:0a:f1:77:
8d:54:b0:6c:73:1d:76:e7:52:b5:ea:8e:3d:8c:ee:59:1c:03:
10:71:1b:63:4a:e1:61:e1:e2:cc:1f:87:1c:0e:06:21:d6:0f:
44:c1:a3:df:74:a1:ed:ce:a1:f4:63:12:9c:2f:7b:1c:7d:a2:
a4:69:42:0c:16:79:e7:0b:ba:bb:a6:b5:4a:06:dc:fe:6d:94:
26:b5:3a:b0:c3:cd:8a:ad:ce:e6:b6:af:95:72:be:8b:73:2c:
56:51:c3:19:1f:e6:84:ed:0c:b9:d2:ac:92:f1:ad:ac:8e:bc:
07:f5:7a:75:a9:6f:c1:c8:80:ca:b9:1f:8d:58:33:2f:56:9e:
97:18:78:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org