Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a3r9v8-SS3bf9Ym17KGDafU5mY4.roa
File: a3r9v8-SS3bf9Ym17KGDafU5mY4.roa (raw, json)
Hash identifier: wGSs6Vu1QJPgB65qRtLzxGezbPEV0tCVC2NcpNkqN+0=
Subject key identifier: 6B:7A:FD:BF:CF:92:4B:76:DF:F5:89:B5:EC:A1:83:69:F5:39:99:8E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A8E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a3r9v8-SS3bf9Ym17KGDafU5mY4.roa
Signing time: Wed 29 Sep 2021 02:45:29 +0000
ROA not before: Wed 29 Sep 2021 02:45:29 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6798 (0x1a8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:29 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6B7AFDBFCF924B76DFF589B5ECA18369F539998E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:2d:9f:fe:24:1f:0b:a7:da:a6:95:bf:34:
09:e4:c6:07:6b:b2:2b:50:47:53:f1:f1:0f:68:65:
4a:65:55:34:88:ad:70:12:55:0b:7f:e8:41:eb:4f:
82:37:62:1d:1b:ee:41:69:41:31:f1:b9:89:8b:05:
80:5c:fc:b9:5a:c6:ff:3e:e9:21:61:48:03:be:6e:
0f:86:d3:16:18:66:c3:b6:b1:38:c9:c7:f7:80:de:
c0:c2:72:a7:c6:40:ba:df:c6:23:2d:85:50:7e:29:
8b:ca:cf:a5:26:9d:ee:b3:49:e8:6b:b0:fb:23:01:
6f:ee:4e:40:48:9d:6b:15:e8:f2:48:ea:c3:ab:34:
82:87:17:6b:1b:7a:c5:97:8e:4f:cb:ad:67:fd:b0:
c8:95:c8:56:1d:17:93:b8:f4:c6:41:4f:95:0d:ea:
49:7c:92:27:fb:5f:43:0d:70:45:85:71:e0:05:1e:
af:8e:d7:ce:61:3b:04:c3:3c:26:f3:f3:a6:69:49:
da:45:fb:0e:34:0e:3c:74:03:92:34:36:de:8a:3b:
6e:59:bc:26:fd:21:5e:7d:c7:16:c9:69:0e:70:4d:
9c:a5:3c:1a:fa:fc:81:5d:ab:1f:56:7b:6e:99:34:
85:9a:32:fb:d1:dc:f2:77:b8:d5:67:0c:35:7a:b2:
9e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7A:FD:BF:CF:92:4B:76:DF:F5:89:B5:EC:A1:83:69:F5:39:99:8E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a3r9v8-SS3bf9Ym17KGDafU5mY4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.88.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:65:93:4d:b1:78:59:03:0d:6e:f0:c1:d0:a8:8f:be:2e:21:
3b:d9:0f:9f:bb:a9:70:22:47:11:fc:65:58:72:83:6d:80:ba:
c8:85:47:b2:55:0a:b0:d2:b5:59:58:92:98:24:1d:0b:84:c3:
15:0f:ae:ea:29:1c:88:52:0d:3d:c0:2a:46:e4:ad:91:d2:cf:
27:97:55:22:f4:ce:28:66:b8:8b:08:3d:0b:d9:4b:51:78:6e:
f5:a8:08:53:96:f1:1f:06:8a:13:06:f2:5b:46:0c:3c:d2:5e:
34:f1:19:8f:58:fc:87:ce:17:11:84:6c:56:1c:43:97:18:30:
6b:7f:89:e6:86:bd:8e:95:fe:bb:89:20:1c:17:ad:52:b7:80:
60:35:4d:f9:aa:77:89:a0:b5:d8:6d:78:c2:bc:4d:27:e8:7d:
29:a2:39:d1:d8:5b:2a:b5:2d:ef:5f:e7:b9:78:20:f4:23:d3:
0e:d7:18:9d:2e:54:34:4c:37:75:c2:a1:d8:00:f8:f8:65:b4:
3d:a7:7d:7e:4b:f2:aa:a9:ee:ba:82:98:59:ba:1c:4b:6f:1f:
29:5b:02:1b:8f:80:8f:fb:57:77:4c:f6:fc:9e:50:ae:31:2e:
b2:ef:29:83:1d:7e:dd:95:38:cb:f4:28:5e:7f:46:3f:09:aa:
de:97:7a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org