Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/asDA1gCv9gkaCUbyHwqleyAnFHI.roa
File: asDA1gCv9gkaCUbyHwqleyAnFHI.roa (raw, json)
Hash identifier: lB0DV+IM5eVAXSb1APlxTcOxRtl6wD+59YpNdaq6qHU=
Subject key identifier: 6A:C0:C0:D6:00:AF:F6:09:1A:09:46:F2:1F:0A:A5:7B:20:27:14:72
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CCB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/asDA1gCv9gkaCUbyHwqleyAnFHI.roa
Signing time: Wed 29 Sep 2021 02:48:12 +0000
ROA not before: Wed 29 Sep 2021 02:48:12 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7371 (0x1ccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:12 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6AC0C0D600AFF6091A0946F21F0AA57B20271472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:d8:bc:ed:f8:42:c9:a4:dc:41:b1:56:19:
ca:35:0a:9e:f2:ab:8e:73:48:ee:be:cb:fc:69:25:
dc:e9:50:aa:19:df:a6:80:a8:e1:bb:f2:12:90:e0:
aa:58:d2:24:85:e6:5e:04:85:bf:83:5c:d0:ab:8b:
75:25:96:fd:05:0e:de:f6:94:6f:ca:bb:b8:d2:fb:
0d:97:55:cb:90:3f:96:a6:e7:aa:8f:f9:d0:3e:c1:
1e:c5:a1:16:de:b8:0a:0c:a1:66:9f:7f:45:f5:dc:
c4:d9:8e:f4:5f:a2:36:49:ef:91:93:b8:1b:f0:12:
ff:ae:d2:05:81:62:a6:57:c4:cb:54:07:a3:4b:86:
53:2f:7e:dd:ca:88:06:9a:43:f9:c1:ee:97:07:46:
3d:a2:c2:56:b2:7a:2d:46:86:ec:d6:e0:8a:a4:8c:
1b:ac:d4:e0:33:b4:8c:1c:ad:6e:ca:5e:cc:78:ab:
d5:5e:e9:89:11:bf:83:02:06:4e:d3:a5:a2:69:af:
9d:a0:04:7f:58:ab:52:75:fe:dc:cc:67:a0:9b:0c:
49:3d:af:a1:26:4d:b2:24:77:62:d5:ff:5b:4a:38:
c2:41:3c:ec:9f:f5:32:17:17:37:01:28:94:95:8a:
32:d6:d1:a4:7c:2c:82:55:1d:82:ac:05:3f:d8:12:
26:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C0:C0:D6:00:AF:F6:09:1A:09:46:F2:1F:0A:A5:7B:20:27:14:72
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/asDA1gCv9gkaCUbyHwqleyAnFHI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e7:a4:8e:be:d3:06:b0:1a:18:82:b5:8d:ef:8e:44:69:c4:
d7:82:28:7f:d0:8f:eb:db:08:d4:fd:95:ae:e5:5e:bc:fd:2f:
44:20:06:6d:b7:e2:85:31:3f:a8:c5:9e:86:e4:2a:ad:ae:9b:
9c:4c:55:61:6c:bd:bb:39:27:f1:4a:b7:14:85:22:55:3f:9b:
1b:ff:f6:93:14:5b:cc:2a:00:e2:e6:cc:da:8e:92:7d:b8:da:
40:f9:be:33:ac:62:ea:cd:9f:01:33:4d:5e:5e:fa:e1:f4:f7:
5c:3f:ac:5c:29:88:f5:38:4b:a4:3e:77:be:42:df:34:1f:b5:
e1:22:9b:54:59:cb:5c:ed:5c:ef:c3:f9:f2:23:9c:67:88:27:
02:82:a0:72:ca:a6:0b:e4:af:20:cb:c9:29:03:55:3f:d9:18:
6a:83:70:b0:50:57:39:3d:33:32:66:57:71:4e:df:33:1f:99:
87:69:87:c8:1f:1b:3a:c6:a4:83:51:98:65:d8:7b:08:f4:18:
9f:ba:ff:c5:53:43:4f:f4:8b:f4:10:77:5f:cf:c4:c5:b4:cb:
bb:1c:b2:6e:ce:58:8b:62:cd:e3:82:66:70:53:ff:82:00:93:
a5:32:aa:0e:f9:ef:b6:88:93:9f:ea:75:81:0b:b8:21:62:64:
dc:e9:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:35 2023 by rpki-client on console-fra.rpki-client.org