Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hve3viJ9rHlAl-Vo2mLvohRiIC4.roa
File: hve3viJ9rHlAl-Vo2mLvohRiIC4.roa (raw, json)
Hash identifier: XLqQ8Vdgo2hmQF7aIM7lVW++2tTadrpzbSIiWwmOb9A=
Subject key identifier: 86:F7:B7:BE:22:7D:AC:79:40:97:E5:68:DA:62:EF:A2:14:62:20:2E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1769
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hve3viJ9rHlAl-Vo2mLvohRiIC4.roa
Signing time: Sun 07 Feb 2021 12:19:02 +0000
ROA not before: Sun 07 Feb 2021 12:19:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5993 (0x1769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:19:02 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=86F7B7BE227DAC794097E568DA62EFA21462202E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:76:45:44:84:ce:c1:3a:6b:58:ee:35:c1:
73:b3:ca:db:cb:48:36:8b:11:24:83:20:92:96:ab:
ad:da:cc:d1:6b:3f:ec:61:44:d4:8c:ea:5f:47:28:
a4:1e:b7:82:12:77:24:d2:af:86:c2:90:70:99:2e:
9e:3c:31:fe:7b:ac:26:16:f8:7f:aa:a3:06:2b:4c:
33:06:e6:12:a8:d3:bf:da:cd:ba:8a:33:ee:19:a8:
fe:71:79:1a:da:ac:17:4f:94:62:b9:bc:8d:a8:3a:
38:e4:85:d3:90:05:d9:bd:99:73:a6:d9:35:ed:62:
5c:c4:84:b2:02:05:97:d8:d0:94:5c:98:52:2f:37:
83:98:fb:4b:63:e0:27:40:73:45:79:9c:66:5c:1a:
da:8a:3c:7c:13:8c:84:50:02:cb:74:b4:31:07:9e:
18:40:c0:50:bf:11:6b:95:2a:ad:de:d6:07:20:ae:
8c:34:77:34:4e:26:d2:ab:95:89:2b:75:91:86:a4:
72:61:25:8d:d8:37:ec:a5:97:1f:99:86:23:4a:55:
2c:6b:b0:df:20:7f:f2:21:d6:e4:5d:10:43:08:1f:
cc:d5:3b:36:b0:dc:b8:41:c7:7f:db:e7:f1:2a:45:
66:5d:27:77:cf:d1:79:c7:f1:72:86:e5:27:a0:f9:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F7:B7:BE:22:7D:AC:79:40:97:E5:68:DA:62:EF:A2:14:62:20:2E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hve3viJ9rHlAl-Vo2mLvohRiIC4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.244.0/24
Signature Algorithm: sha256WithRSAEncryption
78:49:9e:65:bf:c9:d8:b7:34:a4:93:1f:ce:9c:88:6a:f0:89:
97:34:9d:b3:75:af:c5:a2:de:c0:3c:d8:ce:74:2b:5d:60:6e:
bf:74:ef:a0:93:60:35:70:68:49:3a:4d:04:bd:f8:51:e3:f3:
e6:b3:c1:62:15:1b:77:f6:eb:08:bf:7e:45:9f:63:8b:b9:75:
7d:d7:5a:e8:7a:51:b7:a7:c8:db:f0:1c:9f:d6:7f:c7:dc:1a:
80:9e:5c:b2:6f:23:e9:e8:cf:5f:ea:51:d6:87:b8:ea:4c:40:
00:23:80:78:09:2c:55:8b:86:73:c9:19:38:e8:36:16:8b:4b:
4e:47:ad:4b:6a:6e:0c:4e:af:55:c5:7f:c1:78:7d:6b:06:18:
e9:2e:81:24:3b:04:5b:93:0f:e1:76:0f:e9:e5:a4:1b:09:78:
b8:17:91:c5:5f:c5:e7:60:70:71:67:d9:ed:25:8e:92:90:f7:
3d:3e:bd:c1:9f:1a:f9:5a:16:3e:6f:dd:2c:0d:e5:20:79:ee:
63:33:d3:1f:61:49:3e:26:02:c4:a9:57:5f:9a:a1:1a:29:f2:
8e:3e:f9:e6:ee:e7:5b:6f:07:b8:79:5b:4a:3c:5e:6b:da:92:
fe:4e:11:37:93:a0:08:79:8b:0c:1a:c4:2f:ce:95:9f:95:19:
3c:0e:d7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org