Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aE4bouI_x5dhafXacYeYk1xZnrw.roa
File: aE4bouI_x5dhafXacYeYk1xZnrw.roa (raw, json)
Hash identifier: xjEb4qkWROAgRlJeQg1N6A9V0++u3BVknkhbzYNYq14=
Subject key identifier: 68:4E:1B:A2:E2:3F:C7:97:61:69:F5:DA:71:87:98:93:5C:59:9E:BC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1711
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aE4bouI_x5dhafXacYeYk1xZnrw.roa
Signing time: Sun 07 Feb 2021 12:16:24 +0000
ROA not before: Sun 07 Feb 2021 12:16:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5905 (0x1711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:16:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=684E1BA2E23FC7976169F5DA718798935C599EBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:24:23:0e:28:64:3a:90:59:b9:5a:71:3f:13:
c0:d7:1c:41:02:78:47:db:75:a1:7d:85:12:38:16:
21:d1:60:82:be:fd:27:90:e4:67:d8:58:3b:2b:32:
51:ea:be:8b:9b:a8:98:1b:00:e1:f7:f5:6f:c8:85:
31:ad:82:80:5a:2d:0a:61:d4:bc:5f:ae:e4:e4:0c:
7d:a1:09:bb:fd:b7:70:7b:78:28:52:31:17:03:32:
32:22:9a:6b:85:a5:c0:89:4f:79:26:98:bd:cf:93:
da:ad:36:ac:73:10:f7:98:21:a7:e9:6a:d4:d2:ba:
04:87:76:e8:52:6a:af:aa:6c:29:aa:b4:2b:cb:77:
94:83:72:93:25:65:35:b4:c0:e9:48:9f:00:b1:1b:
5f:23:7d:48:18:59:25:75:7b:7b:23:47:79:62:60:
ef:08:7e:f6:1c:22:d2:14:83:1f:03:69:58:fd:d1:
d1:f6:14:fb:cf:f4:0c:35:11:fb:74:e1:df:8c:d6:
5e:24:4e:a9:a0:05:b1:cf:c0:26:1c:3f:95:7f:3c:
4d:15:7a:91:90:09:40:77:59:f0:09:35:72:08:c6:
ce:04:84:86:1f:92:56:fb:6f:25:b7:13:85:c2:c8:
51:c3:82:56:28:99:a4:93:ed:03:d8:1c:33:e7:e0:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4E:1B:A2:E2:3F:C7:97:61:69:F5:DA:71:87:98:93:5C:59:9E:BC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aE4bouI_x5dhafXacYeYk1xZnrw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.236.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:c6:55:d2:c6:53:2c:e7:24:7a:f1:4f:a3:fc:48:18:c0:d9:
3c:f9:3e:94:39:f6:a6:8b:d9:b4:57:06:9b:a9:87:94:58:a0:
c1:7d:fd:10:25:c1:c4:0f:64:d2:84:e0:16:32:3b:5d:2a:ac:
92:a3:f5:be:e2:d4:83:9b:dc:46:13:4a:ac:7d:12:40:0b:72:
a8:73:cb:91:dd:02:f8:eb:0a:ca:51:b8:b6:73:57:7a:31:44:
02:65:75:8c:77:3f:70:6b:2b:81:cc:5f:4b:c9:b0:e7:ea:26:
d4:a7:92:9f:06:bf:d8:c6:ab:cf:d7:0d:f3:98:7a:16:4d:46:
d3:46:81:bc:9a:65:d4:a7:9a:2a:33:65:43:f8:ac:bd:fd:1c:
06:02:27:61:bb:b1:ff:88:77:44:53:a7:8e:e0:81:06:8e:bc:
10:0c:d5:37:62:03:34:d4:94:58:58:bb:8b:82:f0:61:d4:6d:
7a:03:74:70:23:9c:eb:3d:fc:f0:ea:4e:8a:3d:4b:6b:5c:99:
d7:8b:df:31:7b:1b:2b:6e:43:2b:51:69:dc:46:7a:51:01:12:
d9:8f:bf:5e:ed:18:38:63:c7:07:4b:e7:a5:53:74:06:5e:45:
c4:e8:fa:35:8b:6a:9f:cd:4c:68:db:a2:cc:88:82:49:3f:18:
3e:9f:62:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:23 2023 by rpki-client on console-ams.rpki-client.org