Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kpCdnWil8jiKKC2l0USwpBUJ6cc.roa
File: kpCdnWil8jiKKC2l0USwpBUJ6cc.roa (raw, json)
Hash identifier: 80ZnL2okcWjyrZj44PbJ3FTeDMPNirzS0EMOXdBMh1U=
Subject key identifier: 92:90:9D:9D:68:A5:F2:38:8A:28:2D:A5:D1:44:B0:A4:15:09:E9:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 16F5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kpCdnWil8jiKKC2l0USwpBUJ6cc.roa
Signing time: Sun 07 Feb 2021 12:15:36 +0000
ROA not before: Sun 07 Feb 2021 12:15:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5877 (0x16f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:15:36 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=92909D9D68A5F2388A282DA5D144B0A41509E9C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:c2:0c:f9:7a:93:32:a0:3f:2c:92:94:03:
b1:93:3f:3f:be:5b:e7:24:54:46:c7:eb:bd:e7:f1:
63:f4:d8:6e:b8:1e:a6:8a:3a:a6:c4:58:77:31:7a:
7a:3b:49:69:0d:18:ed:57:d1:96:75:02:74:ec:e7:
f9:29:9c:6f:50:e3:20:0f:82:c8:f2:97:0c:07:98:
73:53:b0:b0:95:70:12:3c:2e:f5:39:77:20:a9:a5:
b6:27:7d:64:d3:8c:af:f0:98:56:d8:c7:01:c6:aa:
ad:78:29:71:3f:45:64:08:1f:42:14:1c:0d:6d:a9:
e7:81:10:3b:83:61:94:6a:53:42:74:aa:08:3b:a1:
95:53:ad:41:14:de:c7:3d:8f:87:60:f4:68:9c:de:
51:25:38:9e:4f:d8:ff:c0:60:0a:c2:79:62:09:d7:
2a:58:93:9e:ac:d0:b6:55:dc:62:c0:dd:12:6b:6d:
2c:13:1c:c6:f0:7f:00:e3:ac:f0:cc:04:37:5d:e7:
f2:d4:1d:0c:92:26:64:ce:05:f5:b6:4c:1e:2e:84:
16:cf:ff:90:d2:1e:b9:c5:30:fe:70:22:15:cc:c4:
d8:81:ed:7c:ac:8d:59:7f:11:d7:23:39:32:f8:7e:
d8:3e:c3:f9:f6:7a:8c:4e:4f:21:7f:18:30:7d:62:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:90:9D:9D:68:A5:F2:38:8A:28:2D:A5:D1:44:B0:A4:15:09:E9:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kpCdnWil8jiKKC2l0USwpBUJ6cc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.56.0/21
Signature Algorithm: sha256WithRSAEncryption
99:dd:a2:d7:b8:37:25:07:85:43:f7:c0:26:cb:6d:13:c8:4c:
d6:03:d0:ce:9d:7e:d3:d2:7c:94:b6:d3:ba:58:39:2b:a7:a2:
56:a0:f9:50:54:80:44:e0:47:25:f3:e9:e2:67:2d:e3:76:fc:
57:c0:c5:63:b4:81:52:8d:92:07:97:4e:91:63:20:42:df:43:
f0:47:3c:29:44:5c:ee:45:78:c0:37:4e:36:94:bd:e6:66:15:
24:f3:a4:71:b2:bc:28:1b:ed:ce:1c:1e:98:68:cc:b1:90:9b:
72:13:ef:ed:8b:64:5f:37:58:8b:8f:38:53:fb:6c:9e:db:93:
03:11:84:70:88:24:a5:9f:91:79:d3:b8:e6:ea:45:35:3a:d0:
79:d7:e2:0e:23:94:dd:ab:7d:01:20:61:93:4d:bf:28:20:c6:
39:d7:68:a5:6e:82:17:bf:ce:a0:80:59:12:93:dd:da:4e:37:
e1:b7:4d:db:f3:9f:86:0c:af:79:1e:53:e4:dd:48:0c:ef:11:
93:50:9a:b4:a7:60:fc:b4:98:7d:64:ee:51:a4:ee:f0:93:77:
2b:11:08:d4:f3:ae:32:ec:6f:20:30:95:a5:25:00:4b:33:69:
f5:ab:84:c6:be:67:08:ce:94:09:3d:15:08:c7:d6:b2:ab:ba:
34:cf:82:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org