Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/atNlbBJmQV_1oHv-7oK_9SQaYgs.roa
File: atNlbBJmQV_1oHv-7oK_9SQaYgs.roa (raw, json)
Hash identifier: AthC2upgvIN0pNU9NM9yrX2O1pKaSoCp94IhNkEGJM0=
Subject key identifier: 6A:D3:65:6C:12:66:41:5F:F5:A0:7B:FE:EE:82:BF:F5:24:1A:62:0B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D0C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/atNlbBJmQV_1oHv-7oK_9SQaYgs.roa
Signing time: Tue 29 Sep 2020 09:54:07 +0000
ROA not before: Tue 29 Sep 2020 09:54:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3340 (0xd0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:07 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6AD3656C1266415FF5A07BFEEE82BFF5241A620B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:65:77:63:0e:21:5c:3e:30:e3:81:d4:01:
82:b1:fb:67:b4:d0:99:57:a1:b3:cd:8f:b0:3e:5e:
db:cf:fe:e2:23:51:61:5b:ea:25:2b:1f:13:ad:ae:
c6:e5:f8:46:13:64:b4:83:5f:7a:3e:80:d7:cc:47:
f4:52:af:a3:ee:05:16:55:7b:04:98:11:95:72:b9:
4d:89:da:12:d3:9b:d0:b2:d4:ec:dd:89:49:d3:63:
69:90:85:d9:1d:c3:b2:b8:be:7b:78:21:0d:44:a2:
92:a6:78:80:a4:65:44:64:1d:c8:bc:fe:f7:ca:5a:
2c:71:54:e7:df:b0:8e:81:26:3b:81:37:20:a2:99:
55:f0:54:20:94:19:0c:90:af:1b:87:17:e9:a9:2e:
cd:03:da:ef:ec:b8:9f:99:e2:02:eb:4e:06:d4:f3:
23:8d:6c:44:67:b8:4c:23:6c:ed:6d:89:39:d2:14:
ba:30:fb:e2:8a:8d:0f:4c:58:8e:26:47:81:81:58:
9a:75:8b:97:c8:1c:14:35:d2:27:53:92:71:53:2c:
d4:27:37:1a:5a:71:02:7d:d1:31:02:d1:29:3f:aa:
a2:cf:a3:c2:18:c0:b4:28:cc:b2:fe:03:80:a8:5c:
88:a8:ea:09:25:42:eb:0a:6b:83:0a:a2:ef:8c:be:
07:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D3:65:6C:12:66:41:5F:F5:A0:7B:FE:EE:82:BF:F5:24:1A:62:0B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/atNlbBJmQV_1oHv-7oK_9SQaYgs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.96.0/22
Signature Algorithm: sha256WithRSAEncryption
18:29:23:d7:ad:b7:d2:45:d9:f0:c9:c7:e6:d5:7e:c8:db:b0:
96:22:91:ed:60:bb:a5:f0:ea:17:09:ad:4b:f3:ad:41:8b:5f:
66:3b:d2:44:45:43:49:dd:a6:01:e8:75:50:d3:09:a6:f9:66:
a1:f3:43:58:79:92:51:9a:a8:c5:44:e7:54:08:87:9f:76:63:
19:fb:71:a5:92:9a:4f:df:b6:0e:ca:ad:3f:41:2f:6f:ad:eb:
aa:ca:4b:8b:4a:c1:d4:84:24:0e:86:d1:0e:16:84:19:a9:9b:
f1:a7:87:c8:1a:d0:7c:7e:fe:0d:20:f3:77:36:ee:87:19:a7:
9d:54:a5:3e:a6:b6:a7:c3:cb:b5:49:48:72:3a:e4:cb:46:a9:
58:b0:1b:53:1a:ae:e2:97:23:e2:f7:8e:63:cf:f6:1a:b2:12:
f3:76:44:a8:7d:b9:c0:ba:0b:b7:34:13:40:14:9c:29:04:6c:
26:c1:94:4a:19:ba:e3:76:7c:a0:c9:da:a1:c0:99:32:35:6a:
b7:0c:2e:6c:88:94:d8:62:e1:a5:f5:39:9a:4e:7e:a5:4c:60:
98:ac:57:88:b8:31:6a:a3:c9:12:3f:7d:d8:5a:5f:9b:95:0e:
3c:b8:54:bd:b9:18:fa:90:70:3c:c4:13:db:46:98:56:0d:44:
63:ad:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org