Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fnKonBfnDn9Kc5ibL7VJYiF2aSo.roa
File: fnKonBfnDn9Kc5ibL7VJYiF2aSo.roa (raw, json)
Hash identifier: Namf2Qky7M/qzmrVe507iH5p5efhduPAJuE0xs2If+0=
Subject key identifier: 7E:72:A8:9C:17:E7:0E:7F:4A:73:98:9B:2F:B5:49:62:21:76:69:2A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E99
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fnKonBfnDn9Kc5ibL7VJYiF2aSo.roa
Signing time: Tue 29 Sep 2020 09:55:56 +0000
ROA not before: Tue 29 Sep 2020 09:55:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3737 (0xe99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:56 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7E72A89C17E70E7F4A73989B2FB549622176692A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:e4:6b:74:19:e0:42:9a:7f:59:d0:f0:00:
40:da:b0:f2:6b:43:1e:bb:45:f2:e5:3f:4f:7d:27:
83:4b:a4:c9:d5:f8:ec:3d:56:ac:84:5c:fa:aa:d1:
a3:1f:27:b8:f5:e4:f7:64:b8:58:60:84:dc:19:54:
f9:9c:a6:d7:f6:ab:09:6c:f0:66:f1:ff:62:11:4a:
6d:d9:d0:f3:81:c2:f0:d9:5f:cb:e9:09:46:fb:a9:
52:9f:9d:68:c1:4b:6c:2e:9f:4c:20:ad:cd:8f:bb:
3f:fc:ea:c6:f3:d8:9f:bb:b3:86:ed:c5:2c:7c:59:
a2:bd:1f:94:b7:2a:ed:ea:14:1d:99:0d:12:68:0e:
85:e6:55:08:aa:b8:a3:4e:a8:a8:30:ae:47:15:5b:
f3:be:8d:65:a6:8c:5b:23:79:5c:47:55:58:bc:6f:
c5:61:6b:e9:a4:a1:e9:42:d0:55:ef:9a:b1:1e:b6:
81:a7:66:06:77:ac:48:9e:a1:da:36:f8:9b:8f:2d:
b2:5b:d0:62:bc:7d:ca:3f:17:46:fb:a8:3b:15:f5:
5e:4f:2a:12:b5:95:ca:fa:48:69:d1:13:31:db:2d:
44:5b:36:8e:21:15:7d:20:b0:cb:20:65:45:98:da:
61:65:fc:98:55:5a:3c:56:2a:aa:da:58:ef:f1:a4:
dd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:72:A8:9C:17:E7:0E:7F:4A:73:98:9B:2F:B5:49:62:21:76:69:2A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fnKonBfnDn9Kc5ibL7VJYiF2aSo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.52.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:1d:4d:4f:e0:37:45:bb:cc:4e:b6:81:45:bc:d8:3c:3c:b9:
05:6e:d1:32:05:4e:04:5a:76:db:3d:c5:46:e8:0d:1b:7d:c7:
40:4a:e7:d9:c7:32:b2:a0:38:6a:90:dd:d9:cb:1f:24:84:6e:
11:76:be:f0:5c:30:80:f4:48:b5:37:03:b1:22:a4:ea:62:06:
81:ae:62:c3:0b:e4:13:ed:03:1b:b3:ec:2c:ff:d4:c0:03:80:
70:3d:00:37:3e:2a:26:e9:fb:fb:99:84:67:06:9b:4a:9a:91:
92:10:1f:77:f1:2b:58:5c:bf:30:84:e3:41:d2:15:ba:0c:72:
15:52:b1:50:ab:e8:55:cd:b8:d6:46:ee:07:f7:37:06:88:77:
09:0a:81:64:90:38:64:79:c6:3b:01:8e:ba:ea:92:78:a3:0b:
d3:3d:9a:b6:d2:8b:b5:95:4b:bd:43:89:6b:31:b5:ba:bd:41:
cd:34:28:79:ee:2c:e1:7d:45:18:72:3a:d7:59:16:73:27:cd:
bb:8d:c4:a2:5d:53:a7:8c:8d:8b:fe:73:d1:38:89:f6:cb:57:
90:93:b1:e2:8e:06:7c:15:4f:6a:40:f3:c9:31:a3:ed:0d:c5:
02:ea:b8:51:6b:03:a2:c7:22:8b:c8:fe:7d:56:f4:94:23:ae:
2a:55:a6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org