Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bJpbYeSLDTlfZlYQgoov1eLdqnw.roa
File: bJpbYeSLDTlfZlYQgoov1eLdqnw.roa (raw, json)
Hash identifier: yxuLOWmeNq2j60TL4Kl+x4t9qJXv1XP2tTuYzdU9ro4=
Subject key identifier: 6C:9A:5B:61:E4:8B:0D:39:5F:66:56:10:82:8A:2F:D5:E2:DD:AA:7C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 17C5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bJpbYeSLDTlfZlYQgoov1eLdqnw.roa
Signing time: Sun 07 Feb 2021 12:23:26 +0000
ROA not before: Sun 07 Feb 2021 12:23:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6085 (0x17c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:23:26 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6C9A5B61E48B0D395F665610828A2FD5E2DDAA7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:7b:d9:83:fb:d1:47:4e:9d:1e:74:ca:c8:
b6:4e:94:55:cc:89:46:f6:2a:00:92:24:12:b7:b8:
5f:f8:ed:40:c4:5e:82:15:59:2a:56:28:6a:b4:54:
ff:5d:ba:b7:ae:1b:b6:6a:3d:45:b6:d3:a9:75:42:
ad:a0:36:bb:02:55:1a:e9:23:24:41:63:70:e6:6b:
b0:ad:c8:3c:24:1d:72:33:ba:f8:a2:64:5e:9a:e0:
fa:cb:c5:f9:db:83:97:cb:65:28:fb:60:2b:68:86:
46:1c:0d:58:07:dc:38:29:16:f2:39:8d:b1:7e:8d:
34:bf:cc:27:f4:5c:26:bc:f4:c5:a2:b6:59:11:6a:
97:0c:72:df:9e:f1:86:1e:2a:7e:c5:11:59:66:26:
2c:f6:ef:df:2d:92:44:5e:e4:17:72:db:65:12:b8:
96:3f:73:d0:65:61:8a:b2:84:f0:53:71:97:c0:42:
c4:4a:c2:40:7e:5e:e7:be:07:ab:c2:f8:b4:e9:49:
ec:71:c3:42:5e:eb:f0:83:cb:45:69:37:c5:a3:82:
21:11:ed:3e:e3:d9:78:e5:ad:e4:a1:d2:04:ad:55:
48:a1:ba:53:14:29:f2:0b:6d:65:7a:99:37:c0:44:
bd:98:29:41:e8:95:43:1a:be:8c:e5:f5:7b:f3:3b:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9A:5B:61:E4:8B:0D:39:5F:66:56:10:82:8A:2F:D5:E2:DD:AA:7C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bJpbYeSLDTlfZlYQgoov1eLdqnw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.178.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1e:44:67:12:28:9e:ef:b6:0f:e9:93:ff:37:49:a3:5f:88:
03:5c:96:9c:4b:c9:c3:17:40:e2:10:22:40:96:74:a6:1e:48:
3e:d2:04:6d:54:28:24:b0:f9:c3:05:fc:0c:a6:92:5f:71:09:
19:33:f1:93:f4:e0:b1:83:28:33:cf:31:f2:40:55:3a:94:53:
40:d2:e5:c7:c7:ea:55:b0:0d:8a:18:bd:a1:bc:f3:ba:44:2d:
10:e7:13:c1:4f:5f:e9:9a:51:b6:c0:0b:76:e9:43:38:9f:84:
2d:e1:90:eb:b7:a2:82:f6:70:7d:a9:8c:50:6e:a7:cc:39:5e:
45:38:05:f8:62:ff:bf:c5:e4:2e:c5:b6:e7:0a:ac:0b:1c:59:
df:6b:2d:b3:8d:c5:39:95:72:5e:3a:d4:6e:c6:a8:45:e2:32:
f2:45:12:ff:5e:77:f3:e2:25:eb:de:93:63:c4:c3:d9:38:a8:
53:1b:c5:b2:13:24:94:85:37:1b:bf:d8:82:be:ac:2a:cc:42:
b7:82:a6:b5:0d:b8:13:82:83:73:a4:12:43:c6:3e:e9:a2:d4:
76:9e:e3:e0:87:fd:29:e3:91:42:00:ed:74:08:86:f5:fd:39:
28:1a:dc:1c:b0:70:ea:d9:8b:f7:27:fc:df:8b:c9:a5:c6:9b:
da:23:b5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:23 2023 by rpki-client on console-ams.rpki-client.org