Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eUmQNd2B3566-shaRzGuVA7vgsA.roa
File: eUmQNd2B3566-shaRzGuVA7vgsA.roa (raw, json)
Hash identifier: 4O2BTa9C0uMbC7NbFQeC9pzXUk2DJ4TCgdfB9NU1xoU=
Subject key identifier: 79:49:90:35:DD:81:DF:9E:BA:FA:C8:5A:47:31:AE:54:0E:EF:82:C0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14A5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eUmQNd2B3566-shaRzGuVA7vgsA.roa
Signing time: Sun 07 Feb 2021 11:59:28 +0000
ROA not before: Sun 07 Feb 2021 11:59:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5285 (0x14a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:59:28 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=79499035DD81DF9EBAFAC85A4731AE540EEF82C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:f5:ee:14:59:21:0a:61:5d:14:76:78:72:
0c:30:93:9e:62:e4:0f:1b:ee:4c:31:48:1a:95:7c:
eb:c5:11:9f:07:ee:19:c6:14:a4:33:3f:f8:d2:57:
ff:d7:88:7d:cd:b5:77:ff:86:c0:9d:cc:e6:94:17:
9c:10:21:62:bc:0c:f2:5a:73:c7:be:3c:c6:b6:73:
de:ac:5b:0b:bf:22:87:2f:f8:9e:89:33:ea:27:7d:
70:aa:66:6b:34:ce:53:ae:91:30:f8:75:5a:4e:fd:
e6:6a:22:5c:27:9e:f8:67:61:d3:15:78:f3:61:0e:
c4:4f:1d:c3:c7:26:c1:4e:17:6e:f3:67:69:93:d4:
66:9a:e3:bf:8c:d9:a2:04:68:c3:b2:15:a1:fe:c3:
e0:0c:46:10:b7:fa:f8:6b:db:b7:b7:23:6d:c8:a3:
07:20:b5:bf:19:e9:4c:35:89:af:83:9c:20:0c:46:
fd:47:e7:a0:c4:19:14:c2:57:85:64:bd:6a:97:a8:
24:92:9b:07:da:8e:f5:b6:4b:f7:dd:28:df:a5:6c:
3b:07:e2:7b:3b:86:b5:cb:52:b2:63:16:d1:d8:02:
d8:51:dc:78:6d:0a:c6:a4:2d:26:e5:be:6e:18:72:
ad:8e:42:9c:15:a9:cb:c2:25:db:a6:be:57:c7:20:
b9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:49:90:35:DD:81:DF:9E:BA:FA:C8:5A:47:31:AE:54:0E:EF:82:C0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eUmQNd2B3566-shaRzGuVA7vgsA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.108.0/22
Signature Algorithm: sha256WithRSAEncryption
45:99:44:52:3e:2a:b7:ea:f9:dc:8b:b5:5f:a1:17:27:74:91:
42:28:15:80:a4:24:87:8a:96:72:8a:af:ef:95:2e:b2:57:1f:
23:d4:d8:4a:0b:47:39:46:00:d6:a9:16:0c:d4:79:03:98:0e:
9e:19:bc:5b:20:a9:e5:63:1d:02:de:89:2a:f6:20:62:e1:35:
cc:f9:72:2b:ff:68:a4:60:4f:dd:34:b2:59:8b:15:dd:2a:ce:
64:05:da:37:5a:88:ec:46:6a:0b:d2:cd:3d:82:4f:fc:ce:25:
9b:b4:b9:90:e9:28:ed:ed:49:34:56:f4:67:94:aa:7e:1f:88:
c2:d7:eb:1d:7d:cf:37:09:f0:b8:b9:c7:44:46:fe:e5:da:84:
67:e9:3b:cc:c4:69:88:c2:73:d9:41:ba:c0:49:f7:ca:b2:00:
cc:be:6a:5c:c9:9b:d9:b6:3a:6e:9c:a8:64:60:58:b3:a8:c3:
7b:c3:aa:f8:97:8e:cb:60:11:49:50:71:00:32:bd:86:26:88:
12:37:dd:f4:8f:b0:e1:86:e9:5b:4a:81:7b:b0:89:e0:f5:f0:
71:67:56:8c:e1:b9:cd:20:89:84:a2:62:0b:6b:88:6e:2f:8f:
cf:c8:32:a6:1b:0a:8c:eb:23:37:84:5e:22:57:1a:4a:f0:e6:
85:4a:25:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org