Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dp_XOjyNq_Ouz0iaL4LCm23gJ-E.roa
File: dp_XOjyNq_Ouz0iaL4LCm23gJ-E.roa (raw, json)
Hash identifier: YpzcAV+IPN9c/ml/rOZ8H5GjfqVsCzDWfby5Om0dgLc=
Subject key identifier: 76:9F:D7:3A:3C:8D:AB:F3:AE:CF:48:9A:2F:82:C2:9B:6D:E0:27:E1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EA6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dp_XOjyNq_Ouz0iaL4LCm23gJ-E.roa
Signing time: Tue 29 Sep 2020 09:55:59 +0000
ROA not before: Tue 29 Sep 2020 09:55:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3750 (0xea6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:59 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=769FD73A3C8DABF3AECF489A2F82C29B6DE027E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:a6:2b:12:ad:99:40:cc:5e:33:d3:4a:bc:
35:17:1a:3f:2c:98:42:c2:43:c7:0d:1c:01:40:e1:
e3:59:54:18:ec:e0:b9:22:3a:fe:8f:da:08:78:03:
12:37:77:44:d3:92:33:70:7b:ac:66:fd:be:99:5a:
f0:ed:34:33:2d:40:fc:07:d9:b6:c7:f0:49:82:71:
1d:e6:88:a1:b8:d7:11:9a:56:94:a1:2b:18:d0:f6:
23:0d:ab:d0:35:c3:0e:d3:ff:23:eb:27:e6:64:84:
08:bc:fa:51:d3:8e:25:aa:b2:b7:ac:24:08:34:dd:
7d:6b:93:7c:a7:9a:ae:24:6a:8f:22:19:e2:18:f9:
e0:1a:f1:2b:89:55:50:22:89:c8:d2:36:dc:69:64:
29:70:72:a7:c0:7f:85:55:f3:6f:02:65:44:f2:af:
3f:e3:6f:dc:a7:df:59:07:0e:0f:6d:08:e6:38:00:
7a:1a:d0:08:f7:f4:1e:4a:38:09:0e:c1:90:56:68:
3a:d9:a0:cd:f2:1c:6d:74:8e:cf:b4:66:7a:f4:a9:
bd:48:3c:6a:91:90:95:4b:8b:21:0c:b7:9b:29:98:
b9:44:f6:4b:c6:ff:16:4d:cf:e0:a3:e3:30:36:db:
9b:4c:37:73:12:fc:f3:25:a6:9c:1b:4b:ba:4a:cf:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9F:D7:3A:3C:8D:AB:F3:AE:CF:48:9A:2F:82:C2:9B:6D:E0:27:E1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dp_XOjyNq_Ouz0iaL4LCm23gJ-E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.204.0/22
Signature Algorithm: sha256WithRSAEncryption
68:d6:32:d4:65:df:6c:6b:c9:dd:6f:5c:91:5d:ab:f2:fb:ec:
5e:c8:0b:3c:8a:f7:13:ee:ec:10:a4:6a:9c:2c:d5:3d:55:ef:
a1:29:a4:d0:cb:19:c7:56:b3:d6:de:29:c2:ee:ce:c3:4a:01:
b5:f5:6e:21:2b:ba:fb:93:be:a5:54:a6:d4:84:e5:08:b3:de:
6a:bb:f0:cf:9b:84:61:c6:6b:7f:85:06:18:14:00:0f:2c:80:
d1:34:af:61:de:cc:e1:ba:df:2e:0b:d5:20:58:c1:c9:be:14:
79:7f:27:b0:d5:c4:10:40:fa:91:83:06:5d:97:db:ae:69:05:
00:87:b8:1b:04:f9:2c:31:38:ee:5b:b5:12:20:b8:7d:26:a3:
95:fa:14:c4:41:2f:86:f7:b7:89:ed:15:99:d9:1e:91:73:60:
ce:15:80:99:a4:d5:cc:e3:9e:c5:1c:34:af:e2:44:be:c3:e9:
fb:e1:32:35:04:f9:ff:a3:f7:d2:cc:08:85:27:da:b0:22:c4:
b4:23:cd:8c:46:b5:db:3e:1a:4a:e2:8e:05:43:6f:ab:14:da:
e3:e7:63:67:c6:a6:bf:3e:31:89:aa:a0:ea:bf:8e:72:ec:d0:
12:a2:ba:17:89:14:24:25:81:ac:6c:7f:25:4e:b2:ad:73:04:
a8:b0:c3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:36 2023 by rpki-client on console-fra.rpki-client.org