Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nN6ij1uFGyhR76uwi3QfkmbuKPY.roa
File: nN6ij1uFGyhR76uwi3QfkmbuKPY.roa (raw, json)
Hash identifier: 8FDH3AKDiiDYKz/kAMlSrONxZP3fBpzsuRT6CS8ORho=
Subject key identifier: 9C:DE:A2:8F:5B:85:1B:28:51:EF:AB:B0:8B:74:1F:92:66:EE:28:F6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 193B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nN6ij1uFGyhR76uwi3QfkmbuKPY.roa
Signing time: Sun 07 Feb 2021 13:06:49 +0000
ROA not before: Sun 07 Feb 2021 13:06:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6459 (0x193b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 13:06:49 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9CDEA28F5B851B2851EFABB08B741F9266EE28F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:46:3c:82:ff:f1:ef:15:df:23:83:cd:08:69:
a7:c3:9b:59:35:01:3a:f7:26:27:ba:32:e2:ae:86:
97:90:e3:e1:b0:16:8c:5f:4d:c3:0e:a6:80:b4:a6:
66:46:ea:3f:9d:ef:15:f5:9e:85:45:00:3d:3c:df:
4d:01:30:2f:75:02:15:3f:72:a5:0f:a7:50:89:d2:
14:d5:ee:61:a4:8f:e7:ea:5c:15:92:08:41:0b:fb:
9b:8f:00:3c:a0:16:da:61:18:97:25:30:89:13:ef:
83:de:8e:48:54:b1:53:37:be:c3:3f:cd:ea:79:0d:
00:62:09:47:06:6b:2b:0c:00:4f:0e:dd:7b:aa:c2:
df:32:37:fb:95:4f:b0:99:9b:6e:55:88:06:fd:bc:
8e:09:e4:49:a0:ad:26:e0:e0:c1:3a:58:aa:6f:3b:
e0:67:cc:22:50:c8:84:b1:62:35:d2:d2:80:73:8a:
15:cc:54:4a:1a:24:87:0a:d2:51:a3:7b:c8:c5:b6:
d5:4a:79:00:a0:52:d8:89:a7:cd:98:25:00:26:4f:
17:09:39:81:18:f9:69:46:77:6f:94:01:6e:9a:d0:
0a:c8:66:b8:6f:29:fd:1d:5e:e5:21:f8:42:33:2d:
7c:b5:84:25:52:f0:73:b8:09:92:4f:34:28:ae:9a:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DE:A2:8F:5B:85:1B:28:51:EF:AB:B0:8B:74:1F:92:66:EE:28:F6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nN6ij1uFGyhR76uwi3QfkmbuKPY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.244.0/22
Signature Algorithm: sha256WithRSAEncryption
97:bd:48:15:6a:16:dd:76:4e:12:70:ed:c3:71:72:72:fa:84:
c8:eb:89:4a:bf:51:b2:a6:ba:43:23:5f:eb:d2:38:d4:56:97:
fd:23:ca:0b:a6:3e:09:b0:15:16:1d:6f:a9:a9:73:cf:02:a7:
12:e3:4d:a3:d5:0a:c7:d1:a9:79:5c:35:07:8b:9a:90:e2:8a:
c0:23:00:ae:6e:f2:b4:18:47:9a:bc:f4:f0:c9:08:fb:42:34:
80:fa:5b:eb:7f:51:57:64:ba:67:fc:99:aa:7c:6d:07:67:17:
0f:6f:b3:29:5a:c3:f1:22:45:ab:be:1d:c7:34:f6:3d:df:d7:
78:87:06:e3:26:58:e3:f0:d9:5a:e1:ad:f2:c9:1c:d3:d9:61:
f4:4b:46:89:f2:bc:96:30:f3:d3:ec:9b:33:4f:8f:4f:ad:e1:
54:7f:37:3b:c9:99:46:cc:b9:30:9a:bf:9f:a8:c1:76:40:4d:
ec:e8:96:85:28:e2:5c:a4:42:8c:90:0d:c9:42:42:31:45:75:
89:f6:a0:76:71:c2:21:92:fa:5e:ea:17:47:ac:97:97:42:69:
f0:ae:6f:58:68:a5:9a:ca:6b:c7:a1:ff:a6:76:5b:9a:7d:95:
ec:27:40:af:ac:2e:59:ff:52:cb:f8:74:ca:d0:a8:57:b4:09:
86:63:97:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:39 2023 by rpki-client on console-fra.rpki-client.org