Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hvm7B1BkGTJshT0tmKS6fXgIJag.roa
File: hvm7B1BkGTJshT0tmKS6fXgIJag.roa (raw, json)
Hash identifier: bKm4Aa2MznsCcAO/tyrHFYUhXu4FtZnFlKL5gLp0WZw=
Subject key identifier: 86:F9:BB:07:50:64:19:32:6C:85:3D:2D:98:A4:BA:7D:78:08:25:A8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A71
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hvm7B1BkGTJshT0tmKS6fXgIJag.roa
Signing time: Wed 29 Sep 2021 02:45:21 +0000
ROA not before: Wed 29 Sep 2021 02:45:21 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.232.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6769 (0x1a71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:21 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=86F9BB07506419326C853D2D98A4BA7D780825A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:84:b9:97:e1:4a:8b:7d:45:cd:62:73:77:
02:3e:a7:7f:ed:2b:09:48:25:f5:2a:d6:66:ac:b7:
78:96:c2:5c:b7:f1:10:f9:34:80:f8:cc:95:65:2a:
ce:fd:3a:8a:a5:e8:3a:26:48:e4:57:05:1d:a0:25:
9e:c6:27:7f:c2:c7:57:38:f6:00:f0:55:f8:cd:07:
40:39:69:15:19:f9:8f:6b:3b:26:f5:66:e6:b3:1c:
2b:ea:a7:6d:e2:79:2b:52:bc:cd:9c:6c:00:56:1f:
37:4d:24:44:87:54:cd:e4:1d:14:e8:aa:1d:de:ea:
d8:a1:73:c4:4b:ca:af:bb:81:c1:33:21:5b:07:b2:
b0:7e:d7:e9:67:22:8f:18:bc:9f:ea:3a:45:e0:46:
2e:c1:b3:15:ba:cb:22:1e:84:a6:1e:8c:0e:c7:02:
b9:a6:75:ec:dc:4e:92:d4:4f:da:30:74:9c:a1:d6:
9d:1b:c6:1a:4a:0a:ae:5c:87:46:ca:61:38:8c:c8:
73:6b:39:9b:04:04:86:84:8b:ca:44:48:85:86:36:
3b:63:74:86:80:ec:8b:ad:4e:74:f5:6a:96:9c:a9:
b6:57:45:0b:59:33:fc:49:51:63:a3:69:18:07:7b:
e7:1c:75:0a:d3:93:89:59:d1:b1:77:90:cb:a8:f5:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F9:BB:07:50:64:19:32:6C:85:3D:2D:98:A4:BA:7D:78:08:25:A8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hvm7B1BkGTJshT0tmKS6fXgIJag.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:ed:48:0a:6f:f0:03:66:5f:48:51:d1:f7:6e:ea:54:0f:9d:
ba:d1:cb:66:19:df:b4:8b:2b:36:04:36:05:4f:1c:ed:bb:ac:
32:2d:bd:f8:3b:31:bf:ad:05:01:ec:c6:2b:cb:b3:ad:be:3f:
28:af:0b:60:00:a4:32:03:e8:56:01:65:ac:7b:94:27:9f:c9:
6a:4e:9d:87:68:e6:a6:f9:f7:f5:ee:7b:ce:89:08:ef:fb:f5:
07:46:dd:31:75:6f:55:2c:0f:42:43:5b:c0:81:d3:14:01:92:
d2:46:80:45:5a:97:e5:92:2b:bd:5b:88:6e:83:f4:6d:a3:1d:
f3:c5:f8:0a:57:f7:4d:01:45:17:a3:5b:82:30:d8:36:db:64:
9d:3b:8c:7c:4c:b3:ce:76:4d:d2:39:1f:65:18:17:b5:aa:a1:
56:c7:e0:7c:3f:70:a6:94:38:10:bb:76:90:15:b0:6e:5e:c8:
4b:a5:ca:d4:40:fb:84:22:6d:ff:43:30:36:13:14:85:70:bc:
0c:3a:43:a4:1d:c5:ea:a7:22:8c:47:c9:5c:26:7f:08:d9:4f:
d5:87:66:da:7f:0a:32:20:cd:ce:d6:18:67:1c:a2:6c:85:f0:
f4:2b:06:c4:8f:6a:82:48:7e:ed:92:db:01:1d:fe:93:09:42:
8e:c7:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org