Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lms1h46Un-IzRhrkWMQt_SrrntE.roa
File: lms1h46Un-IzRhrkWMQt_SrrntE.roa (raw, json)
Hash identifier: APTd612RIhHDwz12EvD2ErlT4Ve/LqilRV/yMTJCs+E=
Subject key identifier: 96:6B:35:87:8E:94:9F:E2:33:46:1A:E4:58:C4:2D:FD:2A:EB:9E:D1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C24
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lms1h46Un-IzRhrkWMQt_SrrntE.roa
Signing time: Wed 29 Sep 2021 02:47:24 +0000
ROA not before: Wed 29 Sep 2021 02:47:24 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.232.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7204 (0x1c24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:24 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=966B35878E949FE233461AE458C42DFD2AEB9ED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:7b:44:0c:2e:ee:c7:b0:53:e5:32:1f:9a:
e6:8e:2f:31:f9:22:96:4e:75:16:03:94:95:51:36:
a8:4f:b5:2d:4f:98:4a:dd:4f:e0:2d:94:88:6a:92:
27:a8:ee:79:44:75:1d:2a:86:1e:24:a6:46:eb:08:
c6:e0:dc:70:af:36:57:d1:b9:a8:41:17:05:23:4f:
d1:76:64:33:af:5c:4a:d8:63:4b:c4:6a:54:22:1f:
00:86:80:e1:9f:ea:ba:3f:0c:2d:f5:d2:fc:5f:86:
76:73:7f:1e:01:fd:27:4d:33:be:4a:f2:a5:43:b4:
f8:1d:c2:69:cf:c8:ce:ca:96:f6:f3:11:d6:0b:03:
ac:01:ff:d1:24:95:48:d4:65:75:15:37:77:e7:2e:
60:82:fe:3e:0c:09:30:2a:f6:08:03:3f:e2:47:10:
4f:65:cb:ea:22:92:aa:e4:4d:b4:6c:09:77:0b:aa:
25:9b:4a:1f:53:af:e4:3c:d0:36:1b:c4:cc:cd:3c:
27:1e:b5:85:a5:52:34:16:44:51:13:85:86:65:09:
34:24:42:cc:e3:8e:6d:09:55:b5:ac:3e:af:69:4c:
4d:bb:18:82:1a:94:93:6b:c5:ed:1a:c4:7e:de:3c:
18:0f:6b:e3:15:af:68:b1:ef:e7:15:df:79:b7:6c:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6B:35:87:8E:94:9F:E2:33:46:1A:E4:58:C4:2D:FD:2A:EB:9E:D1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lms1h46Un-IzRhrkWMQt_SrrntE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.76.0/24
Signature Algorithm: sha256WithRSAEncryption
44:04:80:c4:91:c6:39:d8:d1:af:c8:19:be:96:01:2b:2c:3d:
67:31:93:b1:a1:a3:5d:00:47:c0:82:c9:b4:28:ee:28:50:43:
9b:d9:9a:c2:d2:d8:83:05:0d:33:9d:03:a7:ac:0d:1c:4d:15:
53:3d:21:32:d6:16:df:7d:03:ac:eb:3c:95:b5:f7:aa:9b:2f:
01:08:38:19:69:8d:49:6f:52:ec:e7:17:27:ed:9b:60:8e:bf:
74:eb:53:bb:bf:c2:de:25:a1:28:61:46:7e:bb:c2:44:25:16:
c2:5c:18:bc:e6:d8:c0:b0:31:5d:cf:9a:8f:6a:1c:5b:24:49:
47:b8:30:a8:2e:38:5c:61:d7:88:aa:db:ff:92:3b:67:ae:49:
64:30:d6:2c:72:4e:b4:10:5d:cc:a5:78:1b:64:a2:fc:ca:a7:
f3:30:95:e1:e3:26:c8:2d:e9:8e:15:7a:a5:a7:5d:d2:ae:2e:
64:46:da:4a:86:d4:5a:7a:e0:54:fd:d1:22:db:d9:d3:0d:52:
e5:a8:e8:c1:78:16:40:c3:49:b5:dd:98:db:82:54:7c:f1:01:
57:cc:8b:9b:7e:a3:40:6a:39:9b:0a:48:f0:e4:40:18:b8:20:
88:91:58:2a:c7:3f:28:d2:dd:6e:38:3a:ec:03:7c:cd:b7:75:
c4:9e:a4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org