Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gCZtcUZWYyyprn5m01onmECSO4M.roa
File: gCZtcUZWYyyprn5m01onmECSO4M.roa (raw, json)
Hash identifier: FIbouUkfpKiFeL1m9jSAOuQK710n49A1rp5TMttX8As=
Subject key identifier: 80:26:6D:71:46:56:63:2C:A9:AE:7E:66:D3:5A:27:98:40:92:3B:83
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1849
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gCZtcUZWYyyprn5m01onmECSO4M.roa
Signing time: Sun 07 Feb 2021 12:27:58 +0000
ROA not before: Sun 07 Feb 2021 12:27:58 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6217 (0x1849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:27:58 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=80266D714656632CA9AE7E66D35A279840923B83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:b6:de:e8:56:c8:5b:04:0e:b6:aa:97:9a:
b6:23:f6:d7:26:86:5c:41:8d:05:0b:5a:6b:12:5a:
a7:1e:02:ac:74:83:d6:59:8d:65:97:49:80:ac:13:
14:3e:df:58:44:9b:c2:c4:98:52:e6:6f:80:a5:a4:
46:00:d5:ab:ab:4d:74:29:dd:fd:f7:84:da:09:a7:
89:ce:2c:e4:2b:26:3a:5d:48:53:14:8f:2b:4b:49:
0c:4b:4c:9a:8f:b9:40:0e:be:de:c2:22:9e:af:23:
6c:9b:10:56:54:31:78:6f:1f:11:6a:d1:3c:82:c9:
95:d2:78:1e:b8:22:09:b0:96:de:a3:9b:71:ba:f8:
1f:1c:19:6e:7b:80:01:16:8a:18:96:e2:18:cf:3b:
d5:38:9e:1f:38:65:30:52:e5:76:e9:8e:98:b8:06:
7a:86:cb:0a:ec:c9:b0:2a:ef:ed:aa:4e:09:9e:2c:
92:2b:45:46:35:b8:b4:00:e8:e1:d1:97:f8:57:ae:
16:d5:73:f8:56:24:72:f6:2d:c2:41:32:32:18:28:
13:4e:b5:4b:64:d5:fa:0d:7f:8f:4a:fc:86:43:d6:
10:7b:cd:41:0e:49:e2:36:63:21:0e:fa:84:ab:be:
7e:e3:49:bf:f7:9e:d5:32:89:f2:f6:1b:84:fa:fc:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:26:6D:71:46:56:63:2C:A9:AE:7E:66:D3:5A:27:98:40:92:3B:83
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gCZtcUZWYyyprn5m01onmECSO4M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.245.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ee:c9:aa:f8:e1:9f:95:2e:57:19:bf:e1:18:e6:00:52:82:
d0:fb:56:06:c9:9b:39:f6:b5:9d:f9:fc:3e:65:ba:0a:3c:df:
0f:20:19:60:b3:41:e3:68:6d:f7:e6:3b:93:9a:3f:cf:d6:23:
8d:2d:9b:bf:7f:fa:28:7e:90:64:41:1a:02:13:62:fb:e0:0c:
cf:d2:4f:ed:14:21:f6:af:ab:a2:cf:03:e4:91:a5:27:68:30:
97:6b:61:0e:48:2b:cd:d2:b5:3e:8e:1f:75:c5:4e:31:bc:be:
6a:73:07:97:8a:28:33:d7:06:00:3e:8c:fc:56:07:da:49:75:
0e:a0:8f:6d:8a:62:21:f2:eb:e0:29:9b:ec:ef:c4:53:35:cd:
2d:e6:c1:6d:d2:45:ee:65:83:70:f9:fc:89:29:38:ba:2b:37:
89:16:dd:be:25:26:73:00:ab:e4:37:76:6a:ab:94:c4:85:5c:
49:4d:4b:29:4e:47:dd:a0:4b:f3:43:e3:60:5c:cb:c8:72:9e:
c6:05:cc:ba:45:bb:7c:47:b5:a8:3e:89:2b:88:cf:b3:d6:1d:
df:e5:a6:38:e4:fd:e5:29:03:ce:cb:8d:f4:2c:44:f8:d2:bf:
0f:cd:50:bb:bc:e0:22:2e:92:6b:25:d7:91:1b:5b:27:9f:4b:
96:7b:3a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org