Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rw8-cw_B5Kfg44HmB8v76kYODb4.roa
File: rw8-cw_B5Kfg44HmB8v76kYODb4.roa (raw, json)
Hash identifier: +Jc/r8y3XTty2X+xbjekNoV9M7pf+esmwMVFglLsKhI=
Subject key identifier: AF:0F:3E:73:0F:C1:E4:A7:E0:E3:81:E6:07:CB:FB:EA:46:0E:0D:BE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B20
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rw8-cw_B5Kfg44HmB8v76kYODb4.roa
Signing time: Wed 29 Sep 2021 02:46:11 +0000
ROA not before: Wed 29 Sep 2021 02:46:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6944 (0x1b20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=AF0F3E730FC1E4A7E0E381E607CBFBEA460E0DBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:29:69:3d:6a:4d:b2:6b:38:f2:3f:4a:65:b6:
f8:77:e9:c5:04:74:8f:32:48:11:e4:06:06:d1:f8:
9e:5a:1e:26:93:ff:00:95:4e:a0:27:63:1c:bd:de:
2f:21:e8:2b:b6:9f:6c:be:12:2b:20:9f:76:74:11:
05:46:88:2e:82:9c:2f:97:10:d2:cb:b2:82:a7:d5:
9f:58:2d:e2:11:11:80:c6:f7:da:26:0d:e6:15:3a:
77:ac:2f:4f:dd:d9:17:34:36:5e:59:44:43:2b:3c:
d4:74:77:59:93:ab:2c:0b:97:3c:46:48:4b:1e:1a:
f1:d5:21:f4:4c:41:a5:9c:5d:9f:2c:36:56:99:c6:
ed:88:42:2d:cc:12:39:20:7b:ed:87:22:a7:ec:ef:
a0:e2:d9:c8:a9:c9:4d:60:8c:03:df:04:cb:06:74:
da:80:31:18:5b:fb:47:f5:d5:c5:04:1e:e7:bb:06:
61:ce:75:29:4d:39:2d:05:1b:4b:46:69:e1:a4:1f:
19:d0:e1:63:50:5e:f1:1c:55:25:84:fa:52:fb:65:
69:8a:ef:51:7e:2c:21:e1:f0:4a:44:45:60:2b:74:
d2:9f:9f:0b:18:df:42:ff:9a:3a:48:83:f0:cc:98:
50:a3:11:4f:21:10:1a:25:d4:d1:c2:86:6d:4c:86:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0F:3E:73:0F:C1:E4:A7:E0:E3:81:E6:07:CB:FB:EA:46:0E:0D:BE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rw8-cw_B5Kfg44HmB8v76kYODb4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.252.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:35:f1:92:18:bb:aa:9c:80:32:da:84:28:09:d7:7a:cb:9b:
a6:52:46:5c:ad:a1:c7:dd:b1:77:aa:92:5e:fe:54:41:c2:00:
03:6b:fb:ed:60:6b:97:f0:f2:37:06:95:aa:2e:da:91:0e:15:
21:21:81:84:a6:c4:09:aa:6d:15:3d:45:bf:08:f7:7b:e1:0a:
97:ca:82:3b:08:c8:2c:1c:34:a4:cd:85:46:94:d4:bc:a7:79:
07:65:39:20:ce:c9:26:5c:50:05:c9:e7:77:a6:52:af:14:1c:
4b:87:46:ca:c8:1f:57:5d:e4:9d:84:71:66:53:f7:43:53:02:
56:a5:10:ab:8f:d4:18:03:45:93:0e:e0:85:1c:76:7c:05:44:
56:72:e3:32:69:4a:cc:1d:70:0f:39:94:c1:59:f5:eb:96:1e:
3d:9c:35:d1:db:6f:2a:00:c1:1b:05:9d:2d:01:95:28:b8:6f:
a4:07:6d:63:1c:8a:e7:39:cf:dc:9b:80:c6:89:60:57:65:b3:
2d:cd:98:76:e2:17:ce:65:93:c1:92:0f:dc:78:58:6a:44:de:
be:b7:f8:1c:45:a4:79:a9:01:78:0a:b4:bf:1f:0e:a8:24:55:
77:25:7e:cb:74:70:69:15:62:b8:31:bb:77:2e:ab:06:a3:6f:
df:d9:40:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:41 2023 by rpki-client on console-fra.rpki-client.org