Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hO3JsTEBIb5jvW1BLYsdJmJuqnk.roa
File: hO3JsTEBIb5jvW1BLYsdJmJuqnk.roa (raw, json)
Hash identifier: RK3GCK8ZhENeknBaeTApSpyHebZKDwt7PzG5veD/9Yk=
Subject key identifier: 84:ED:C9:B1:31:01:21:BE:63:BD:6D:41:2D:8B:1D:26:62:6E:AA:79
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BCF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hO3JsTEBIb5jvW1BLYsdJmJuqnk.roa
Signing time: Wed 29 Sep 2021 02:47:01 +0000
ROA not before: Wed 29 Sep 2021 02:47:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7119 (0x1bcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=84EDC9B1310121BE63BD6D412D8B1D26626EAA79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:af:c3:d5:c8:ea:f6:22:67:dc:79:c7:d7:
4f:46:3b:cd:aa:9d:af:82:c8:c5:ac:c6:5a:5e:ea:
b9:2a:04:e9:72:12:38:25:b2:0f:c4:49:01:8b:6e:
bc:87:2d:b4:1c:0b:cb:cb:41:80:39:d5:6e:2b:c1:
a2:63:28:55:1c:1c:a0:c6:05:7a:0f:f7:f8:5f:72:
f2:cd:20:fb:a2:10:9b:3c:b5:27:d1:c4:1c:67:02:
9d:1c:7f:fb:a0:36:1f:95:e9:4c:6f:c9:76:07:ba:
82:c4:a8:c8:3d:20:59:89:fb:07:bb:6a:4e:c0:e6:
72:65:92:6d:10:2b:a9:0c:c7:82:d3:41:77:77:85:
de:6c:8f:55:f7:21:39:3f:28:f8:07:ab:04:e3:a7:
e2:36:35:7b:82:7c:c7:b0:92:fd:af:69:47:6a:f4:
9c:fa:95:ba:c4:c6:3e:9e:20:1c:0b:df:b6:c4:2f:
aa:4a:33:44:91:76:bf:82:ad:b2:c3:cb:f1:09:38:
53:8d:bb:7c:f2:55:00:e0:c3:75:8a:13:fa:96:31:
92:c4:bc:df:ef:f0:41:31:b3:82:24:50:22:30:42:
e4:ce:25:e9:b7:e0:38:a1:82:cd:85:16:5e:c9:67:
19:5a:35:7a:df:fe:29:3f:65:55:ad:ba:4f:8a:26:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:ED:C9:B1:31:01:21:BE:63:BD:6D:41:2D:8B:1D:26:62:6E:AA:79
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hO3JsTEBIb5jvW1BLYsdJmJuqnk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.224.0/22
Signature Algorithm: sha256WithRSAEncryption
39:ca:6f:37:e9:39:3b:55:7e:86:8d:d8:8d:dc:35:6b:df:ca:
8d:c9:69:bd:f2:ec:f9:fe:cf:d6:4a:c6:92:cb:80:ce:f9:10:
52:2d:41:2a:26:73:03:a6:9a:05:b0:b0:9b:fa:9d:2a:2b:30:
ad:78:3f:42:88:4c:fd:94:dd:65:b6:83:b5:dd:e5:e8:e7:95:
8b:41:a6:f7:08:99:d8:76:5b:55:d6:73:91:4f:d4:83:f2:aa:
06:e1:f2:40:a9:2e:e7:12:24:81:c2:40:95:3d:8c:82:2a:e2:
47:32:cf:ed:36:c7:32:c0:51:bc:e4:20:9f:96:06:a8:fe:76:
2e:dd:ee:22:3b:88:8a:d6:fe:18:2c:68:18:fa:58:1b:96:70:
f8:c9:41:ef:d0:77:82:68:92:dd:13:b2:fe:47:ea:5a:e0:6f:
ef:60:c6:b0:7b:b7:23:07:f6:86:c0:5e:db:67:9d:ad:7a:e4:
8c:68:ed:48:10:87:9b:7b:21:4f:f1:87:66:e3:77:28:3c:72:
89:cf:59:3a:ab:49:54:b3:5a:76:77:e0:ba:6f:3a:96:7a:cd:
a1:89:d0:99:a1:87:ad:7d:21:67:dd:a1:72:44:30:15:64:d7:
7a:e0:df:d1:d1:0f:f4:df:59:48:64:88:f7:f4:74:a8:95:b6:
cb:0a:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org