Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tRvUwNJHF4D-JczugJFqtUG6w7k.roa
File: tRvUwNJHF4D-JczugJFqtUG6w7k.roa (raw, json)
Hash identifier: 58GE5Jlsyb1UCmCsWKj11N1ecABV66OAJfXWr7e3qbs=
Subject key identifier: B5:1B:D4:C0:D2:47:17:80:FE:25:CC:EE:80:91:6A:B5:41:BA:C3:B9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C8C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tRvUwNJHF4D-JczugJFqtUG6w7k.roa
Signing time: Wed 29 Sep 2021 02:47:54 +0000
ROA not before: Wed 29 Sep 2021 02:47:54 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7308 (0x1c8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:54 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B51BD4C0D2471780FE25CCEE80916AB541BAC3B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:4e:d0:be:da:f6:3d:ae:9d:41:e5:88:27:
29:46:d6:5f:a2:d9:9d:88:fb:94:24:c2:89:e9:6f:
25:ea:66:c0:0b:4d:5e:a5:31:b2:b5:28:fc:7b:9d:
0f:da:bd:30:32:1d:5e:46:92:b5:d4:12:d1:28:33:
96:86:d5:51:4d:cb:d1:94:c1:99:1d:3d:1f:9c:e2:
a0:ec:8c:4b:e7:67:7c:bb:21:d3:99:2d:26:22:b4:
bf:8f:29:34:30:c7:fe:c3:31:47:b2:e0:61:1b:89:
c9:83:9e:ba:b0:de:40:30:36:18:d6:d8:c6:d6:6b:
c3:03:10:bb:cd:50:78:d9:15:9b:86:e6:b3:98:76:
06:8b:4a:71:57:66:01:aa:79:23:89:ec:b5:02:c6:
9d:cf:60:37:cd:41:7e:ed:d3:5d:72:95:48:1a:38:
5f:1f:62:8a:22:36:2e:7c:02:96:61:e8:52:8f:45:
5c:fa:24:82:ab:2d:26:83:c9:13:b4:37:fa:21:1a:
61:b8:a7:12:5b:3c:d6:16:13:86:56:89:f8:2f:25:
95:81:9d:cf:44:e8:c3:07:db:84:af:8c:c4:ad:6d:
a3:78:a9:eb:68:21:0b:54:32:71:9c:68:f1:a0:65:
f0:a7:76:7e:3f:19:1c:3d:6c:9b:9f:5c:10:3d:a8:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1B:D4:C0:D2:47:17:80:FE:25:CC:EE:80:91:6A:B5:41:BA:C3:B9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tRvUwNJHF4D-JczugJFqtUG6w7k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.188.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:9e:4b:64:ac:0e:82:d4:09:68:12:8c:4d:b9:80:ce:f4:c6:
b5:fd:80:c2:45:4c:37:35:06:57:29:98:ef:24:07:02:f0:d5:
2a:c4:94:0b:b6:8d:c3:68:fa:52:12:23:96:22:87:bb:ee:f8:
1d:f1:c4:01:72:6c:91:f4:28:1c:01:ec:2e:19:08:57:19:fe:
80:31:70:c7:27:a7:8a:8b:95:5e:b6:99:d8:5f:56:69:aa:37:
58:f3:d6:51:b2:9c:54:ce:8d:cd:30:6f:2c:01:1f:38:88:0a:
8a:60:d2:73:b3:2e:8b:19:83:3f:15:36:bb:50:37:8d:bc:c2:
6c:35:8f:c7:7f:18:05:98:b1:f3:ff:38:22:de:d6:67:20:6e:
ad:a4:73:ed:47:29:5a:8d:69:28:e2:64:0c:e6:9b:bf:9c:48:
83:40:e7:e3:66:43:a2:b1:0d:6c:8c:0a:88:9a:08:de:b6:55:
2b:ec:7c:3f:46:6b:27:15:ff:4d:41:a1:32:2f:f8:5d:eb:73:
39:95:3c:74:a6:19:31:90:c3:98:35:6d:22:9f:de:c9:6c:33:
75:3f:f1:47:1b:d1:f9:96:89:56:2d:b3:25:70:39:d5:7d:eb:
4a:11:4f:75:77:ab:a1:f0:41:52:34:2e:da:e7:67:f3:4d:69:
1e:80:bc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org