Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jFXVT4zUqldBDKvcB6yHWpde9uo.roa
File: jFXVT4zUqldBDKvcB6yHWpde9uo.roa (raw, json)
Hash identifier: MgDnbkkdQ6JJIvK0jtKGC/WDfPSlrS6adF0rWGq4hHc=
Subject key identifier: 8C:55:D5:4F:8C:D4:AA:57:41:0C:AB:DC:07:AC:87:5A:97:5E:F6:EA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14F1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jFXVT4zUqldBDKvcB6yHWpde9uo.roa
Signing time: Sun 07 Feb 2021 12:00:45 +0000
ROA not before: Sun 07 Feb 2021 12:00:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.252.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5361 (0x14f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:00:45 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8C55D54F8CD4AA57410CABDC07AC875A975EF6EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:e3:3e:22:18:d4:74:6d:1c:72:0a:34:72:
72:c8:7a:28:35:8b:b2:42:c0:5a:1c:c3:61:bc:dc:
1a:be:ab:3c:b2:07:a2:e3:1e:e5:35:39:44:18:11:
da:92:68:8f:e5:7d:2f:53:04:6b:d1:f3:13:1f:18:
28:f6:e3:af:d2:98:b8:c5:8c:e6:ea:64:ea:af:11:
52:98:fe:4d:12:12:c0:d8:58:03:54:a0:a4:08:b1:
60:69:77:d4:d8:cc:e6:a8:50:e7:1c:67:48:7c:bd:
37:1b:36:33:9b:ab:31:95:72:77:65:bb:f7:a8:e5:
0f:16:20:20:97:8c:5c:c2:61:e7:da:cd:f4:7a:66:
7b:9d:58:fa:d9:26:d7:7a:5e:f6:ef:c8:81:14:86:
d3:ca:4b:0e:37:80:a2:59:b9:db:49:96:d5:fd:a6:
b3:67:87:72:13:bd:e1:9a:f2:7a:a3:c8:be:1b:50:
ca:2b:30:fe:30:93:4e:64:74:08:43:04:d0:ad:f2:
53:a2:00:85:15:6b:78:61:18:2e:ff:9c:ca:79:24:
57:b1:c5:26:c0:ae:76:20:61:b7:1c:df:c7:30:3b:
e2:4f:3a:40:de:b4:ac:e1:25:ae:f9:95:11:33:46:
ab:7f:cd:a6:4f:1b:6a:41:58:05:70:0f:68:33:d6:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:55:D5:4F:8C:D4:AA:57:41:0C:AB:DC:07:AC:87:5A:97:5E:F6:EA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jFXVT4zUqldBDKvcB6yHWpde9uo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:5e:f8:4d:42:2f:06:35:93:9a:bd:55:ac:b1:87:ef:43:21:
90:91:98:d2:95:ba:8c:58:ae:04:d8:92:bb:40:4b:fb:7b:6e:
14:0d:b2:4e:21:c7:55:6b:24:13:9f:c7:eb:8e:e5:4f:4f:36:
71:eb:03:1e:e4:ac:52:7f:83:df:d4:06:54:ea:a0:90:a7:be:
e1:59:0f:6a:cd:44:70:91:ac:f0:fb:d4:4a:56:08:e4:f1:87:
bf:96:36:ec:d2:d0:6d:45:00:2e:f8:72:b5:41:82:9e:d8:17:
44:73:8e:4c:4e:b3:80:42:4d:5e:38:30:8c:d3:5b:5b:d2:d0:
cf:db:20:1b:ea:a6:48:08:bd:8b:ce:68:9d:2d:81:76:53:1e:
f4:30:48:d3:ab:82:a1:1a:35:9b:8f:ad:21:f9:22:20:fd:ae:
45:41:f4:06:2c:d6:0d:f4:65:82:37:ea:99:be:51:5a:ed:c9:
1b:2f:04:c1:66:8a:18:e2:89:23:7d:3f:cf:da:cc:7f:f3:2f:
a9:e4:c0:ea:02:0b:5e:c6:68:1f:f9:7e:8c:af:14:34:07:90:
0d:78:84:d9:19:0c:da:87:57:92:39:b5:86:06:0d:52:f2:9b:
60:b0:3f:8d:92:ea:0a:7c:34:c5:4e:fe:d7:cb:b9:5a:47:73:
01:4d:f8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org