Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nCvn_lKb_a8RjREhclwHrvmDuvY.roa
File: nCvn_lKb_a8RjREhclwHrvmDuvY.roa (raw, json)
Hash identifier: vXMBi5K3lTfo5D7o0+zePNKF5rEonz+FRe+JpyCPJc0=
Subject key identifier: 9C:2B:E7:FE:52:9B:FD:AF:11:8D:11:21:72:5C:07:AE:F9:83:BA:F6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D67
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nCvn_lKb_a8RjREhclwHrvmDuvY.roa
Signing time: Wed 29 Sep 2021 02:48:59 +0000
ROA not before: Wed 29 Sep 2021 02:48:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.232.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7527 (0x1d67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:59 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9C2BE7FE529BFDAF118D1121725C07AEF983BAF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f1:85:9c:cb:7e:fb:81:c0:78:6e:ce:e4:d8:
84:39:9a:7a:74:f5:68:08:fb:14:d3:c9:4b:f1:11:
90:54:59:29:3b:69:95:c9:49:d0:1f:8e:35:2d:de:
a4:41:10:7c:4a:be:3e:ed:6b:96:04:ff:f4:52:95:
86:49:02:aa:6e:4e:ce:a7:64:58:e5:f8:a7:e0:69:
3e:71:c9:07:46:fb:62:e8:1d:5d:21:f6:52:c5:74:
cf:3d:65:c5:fc:82:e9:ff:47:8e:24:ab:33:55:3d:
2d:17:e9:ad:d4:8c:94:6c:f5:fa:bc:4e:b3:86:39:
f9:26:08:35:8b:41:52:33:bf:e1:51:d2:c2:38:1d:
03:05:b4:b7:b1:51:d2:e2:4c:75:72:dc:79:fd:dc:
ba:6a:32:da:46:e6:4d:55:21:db:94:83:31:9d:d1:
94:01:8e:c3:6c:c5:73:da:e9:1f:b9:e4:da:f3:41:
d1:09:df:66:8c:80:84:0e:86:e1:d2:ed:71:99:3f:
cd:4e:fc:a5:df:cb:b3:69:c8:7d:72:91:e1:19:17:
08:5d:2b:51:fa:79:27:14:cd:4d:09:71:2c:4d:1c:
cd:26:6e:f2:25:1e:17:a5:8a:2d:7a:ff:a7:4a:f6:
30:f4:ea:92:d0:0f:12:cf:e2:44:1a:a4:a6:5a:66:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2B:E7:FE:52:9B:FD:AF:11:8D:11:21:72:5C:07:AE:F9:83:BA:F6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nCvn_lKb_a8RjREhclwHrvmDuvY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.220.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:c0:9a:b7:89:85:f4:69:dd:df:fa:42:5e:78:2a:0a:3a:1b:
9c:34:65:2b:42:98:e8:31:69:96:6e:11:e7:71:d7:73:6e:0d:
ef:8b:ce:72:ff:34:61:de:31:35:d4:50:92:5a:d7:bf:10:48:
d6:9a:67:07:96:a0:f1:79:a4:fa:59:17:4d:50:55:af:21:98:
74:be:63:f0:41:3e:10:85:4d:4f:b3:ae:9e:c8:6f:5f:30:b0:
72:c5:a9:8d:bb:6a:aa:53:92:73:94:77:22:e3:a6:fd:ec:b2:
53:b2:c4:3a:22:b2:91:ac:69:56:e4:17:29:1e:e7:ce:28:ba:
49:4b:e8:3c:c5:d5:93:df:b3:8c:d4:f1:ef:cb:dc:36:e1:a4:
ca:db:97:d1:8c:2a:bf:40:a0:eb:fc:4f:ee:c5:ef:f4:14:0c:
6b:d8:f3:e5:19:0c:f3:cb:36:df:ca:b4:46:69:4d:75:e9:06:
5c:1a:7d:c3:cd:ac:d3:a7:9e:64:3e:81:23:44:9d:b6:84:fd:
46:68:d0:3a:66:92:91:b5:8e:2a:ab:23:70:5c:f1:a1:ae:48:
01:c7:78:47:e5:29:75:bb:81:c2:67:06:2d:e7:48:2f:73:95:
04:8d:61:15:4c:08:20:a3:65:59:d1:60:e0:8b:6e:74:9d:1c:
fd:b4:02:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org