Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cvZPpTYmH-MwARCw8uYyOReIHFI.roa
File: cvZPpTYmH-MwARCw8uYyOReIHFI.roa (raw, json)
Hash identifier: aVek8RtkDRGinwJl+G+83l7XhnVfZ8D6mQejxXR3VL0=
Subject key identifier: 72:F6:4F:A5:36:26:1F:E3:30:01:10:B0:F2:E6:32:39:17:88:1C:52
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A81
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cvZPpTYmH-MwARCw8uYyOReIHFI.roa
Signing time: Wed 29 Sep 2021 02:45:25 +0000
ROA not before: Wed 29 Sep 2021 02:45:25 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.232.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6785 (0x1a81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:25 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=72F64FA536261FE3300110B0F2E6323917881C52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:35:ff:46:1e:57:6d:7f:9a:60:b0:d5:44:
16:71:37:8b:fd:2e:66:98:53:d6:04:ce:51:97:98:
14:23:71:ab:9e:9f:26:51:b1:25:14:ba:3a:a6:29:
8d:b1:60:aa:bd:24:06:b5:b6:6f:74:8c:11:24:0f:
7b:5a:88:b7:c6:8b:7a:3e:1b:0f:39:a4:5f:0a:79:
dc:08:ab:59:d6:e2:10:f6:75:46:fa:33:1d:c2:90:
04:a9:ab:d7:33:a3:de:5c:86:9c:f1:4a:80:25:9a:
87:93:27:f4:86:a2:14:b4:bb:da:22:10:ac:6f:97:
d0:28:8a:1c:f8:d2:7e:c0:01:e5:68:99:3c:4b:61:
0a:2a:4d:8a:93:a8:47:e1:e2:7f:f7:64:ea:7a:19:
98:24:46:72:4a:64:e5:34:3c:d2:89:92:ed:90:6e:
fa:52:b2:61:37:58:3b:f8:c9:d8:30:2d:6f:c8:be:
9e:f0:ef:2a:13:13:d5:44:93:e0:54:2a:4d:a0:68:
e8:8c:7f:73:a4:6b:ed:c8:52:97:cf:06:b5:b6:d6:
24:c7:92:c0:fd:6d:db:87:38:4d:d2:41:fa:38:2a:
45:54:3f:fc:a8:f7:eb:b3:19:0c:de:6e:bb:48:4e:
bb:36:2c:cd:33:56:47:84:80:b0:b3:16:f0:88:8d:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F6:4F:A5:36:26:1F:E3:30:01:10:B0:F2:E6:32:39:17:88:1C:52
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cvZPpTYmH-MwARCw8uYyOReIHFI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.48.0/21
Signature Algorithm: sha256WithRSAEncryption
25:15:8f:67:11:e9:d5:3e:dc:53:cc:bb:99:f7:09:11:b3:8d:
65:28:aa:3d:8c:b6:0b:07:b2:84:4b:c0:bb:0f:4c:1d:fd:a4:
75:0c:73:59:d9:5c:92:de:2a:0f:8a:7a:61:f0:bc:c5:b4:0e:
50:9f:d2:d2:7e:e9:94:90:d6:19:44:75:ae:f8:dc:57:8c:87:
72:34:e9:9d:d0:1a:02:d7:39:f0:fc:2a:30:b9:14:c8:0f:15:
81:8d:ef:0d:c4:1e:c2:19:46:71:07:6d:40:2f:54:67:d4:91:
cb:aa:a7:a0:f8:30:f8:96:a2:20:82:dc:21:28:44:ad:d4:77:
f6:ef:81:ac:f9:07:fe:8f:ce:6d:06:f7:08:d8:55:fa:f2:6e:
cb:a3:91:e1:59:b8:b8:55:e4:d1:b1:95:e1:53:df:b9:38:f9:
8f:fb:c7:c7:ce:09:65:03:e6:e9:d9:1b:0a:77:5d:65:96:5d:
05:5a:47:f9:f9:f8:a2:7e:5b:e6:56:a5:2d:79:24:88:f2:c7:
5d:e9:53:e6:f1:44:08:90:31:5e:0f:3e:1a:63:a4:48:f2:bd:
f2:26:9b:17:d6:a1:15:66:04:07:07:f8:25:11:0d:85:9a:86:
c9:92:f2:1f:d2:39:dc:01:dc:6e:c0:b2:a0:1b:f0:f4:30:5b:
30:9a:7f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org