Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hptCsyfM2z5Suer2WYegc5AiXdQ.roa
File: hptCsyfM2z5Suer2WYegc5AiXdQ.roa (raw, json)
Hash identifier: LonijalxfQa/jP3fV4B6sW+0v0tHrL5ildGMuGrsXEU=
Subject key identifier: 86:9B:42:B3:27:CC:DB:3E:52:B9:EA:F6:59:87:A0:73:90:22:5D:D4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15A9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hptCsyfM2z5Suer2WYegc5AiXdQ.roa
Signing time: Sun 07 Feb 2021 12:05:49 +0000
ROA not before: Sun 07 Feb 2021 12:05:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.120.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5545 (0x15a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:05:49 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=869B42B327CCDB3E52B9EAF65987A07390225DD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:19:65:98:8f:0f:5e:9d:38:cf:7a:e3:21:
d2:35:ec:cd:b8:55:ba:71:76:ad:1f:aa:83:41:62:
e9:e3:98:1c:ba:87:57:cf:f2:5e:0f:9b:77:e2:a4:
fb:c6:2b:b6:14:36:29:1e:92:cf:4a:fa:a8:b8:11:
e5:00:22:ee:80:90:9a:7f:45:34:8d:86:b7:63:1a:
98:af:50:d2:1e:b4:9c:8f:5a:d7:c7:eb:0c:2b:15:
34:43:79:7a:a3:be:3f:c1:c3:39:d9:60:4d:b4:38:
2c:85:05:b0:ec:17:9a:2c:e7:7d:de:4a:82:68:23:
18:e8:a1:3f:d4:ec:9e:fd:c6:b8:70:6c:0e:ad:40:
06:52:05:87:6c:b7:dc:90:3e:71:eb:42:03:59:55:
38:43:7d:4a:7b:02:e4:b6:94:52:37:ca:69:90:6e:
e5:4a:71:2c:9c:d9:d3:02:a2:74:39:39:31:1f:09:
7e:c0:1f:63:d3:98:62:9d:6e:24:8e:5f:f8:d1:3b:
c7:52:b2:69:a7:7a:c7:89:15:0a:51:3f:b4:ab:4e:
4c:0a:40:5f:1d:0b:35:82:0e:65:c5:42:08:d4:fe:
f3:1d:30:18:19:73:e5:ac:d1:95:fd:aa:e0:2a:54:
f3:6e:a7:ec:e1:1f:5e:4c:33:39:e3:20:f0:80:ea:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9B:42:B3:27:CC:DB:3E:52:B9:EA:F6:59:87:A0:73:90:22:5D:D4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hptCsyfM2z5Suer2WYegc5AiXdQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.120.0/23
Signature Algorithm: sha256WithRSAEncryption
15:40:6b:47:7d:d8:d3:d9:ce:63:bc:a6:c2:e5:62:b6:67:7d:
86:9b:e2:16:9b:99:05:b8:c1:60:09:c8:5a:f8:aa:ab:87:7e:
0d:6f:63:c8:9f:c5:f2:9c:21:85:47:7d:8d:5b:a6:d7:1e:24:
51:25:88:a4:29:bb:91:00:35:bf:62:c7:14:1c:24:b9:8e:e0:
c2:1e:ec:2d:6c:d3:a1:85:8f:c5:bd:b3:f7:9f:22:bd:6c:03:
52:ed:cc:9b:f0:d1:f6:8e:71:c2:af:d0:d8:95:87:4b:6d:0e:
24:fb:af:ca:74:f4:77:20:ca:86:0f:a2:7d:26:95:a2:d5:58:
2a:70:55:0f:31:be:b5:59:be:0f:87:4b:fc:73:75:e6:d6:56:
2f:89:3a:0f:b5:c7:c5:2f:fc:a0:66:a1:56:c8:db:ed:16:78:
d4:13:6f:3b:0d:53:73:e6:b2:96:b8:10:3e:17:d2:ee:9b:54:
4f:90:1b:03:35:fd:92:30:66:34:72:9f:03:90:28:3d:0e:b8:
75:3f:94:ab:e7:60:00:a3:51:9b:47:63:f3:08:7a:96:75:57:
1b:de:5f:c7:14:e1:50:b6:2a:3c:7b:58:46:1a:b2:26:a7:b3:
4c:cb:80:3c:54:98:0b:4b:41:bf:f2:18:42:e8:54:b5:9c:57:
a9:9b:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:37 2023 by rpki-client on console-fra.rpki-client.org