Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uAub8Amv9q5QGfJzs31QRej3SdA.roa
File: uAub8Amv9q5QGfJzs31QRej3SdA.roa (raw, json)
Hash identifier: 1i9gobmlyXZL4q//Te8nwoUv7yNb1ZrGwPTRaPkADkI=
Subject key identifier: B8:0B:9B:F0:09:AF:F6:AE:50:19:F2:73:B3:7D:50:45:E8:F7:49:D0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uAub8Amv9q5QGfJzs31QRej3SdA.roa
Signing time: Thu 15 Sep 2022 02:46:31 +0000
ROA not before: Thu 15 Sep 2022 02:46:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.144.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B80B9BF009AFF6AE5019F273B37D5045E8F749D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:d9:d7:f5:cc:36:03:b8:ec:6d:e2:fc:3f:
7a:00:60:14:9d:b0:ad:28:2f:bd:8d:1a:0a:69:1b:
3a:0f:ab:e0:1f:1b:8e:8c:a1:cc:e5:8c:d6:27:c1:
e1:4b:60:77:b3:79:46:ca:98:73:25:e4:2a:27:29:
5d:b7:09:c9:de:d6:42:66:ea:61:3b:92:ad:59:f5:
4f:ba:75:30:9d:c9:49:34:07:f3:5f:c1:3a:5d:2c:
c5:23:41:b0:00:f3:a9:33:2a:ae:41:05:28:e1:60:
06:6a:ac:45:4a:f6:79:31:9d:d7:56:42:85:46:bd:
48:86:54:20:b6:39:ac:8d:d0:55:4d:99:66:f3:ca:
91:30:b6:8b:0c:db:f8:64:40:29:e5:80:35:37:d8:
30:56:4f:fc:81:1f:63:b0:e9:d9:0c:65:c9:9e:ea:
cb:2a:62:0e:91:47:cf:ab:4f:5e:60:86:8f:56:44:
a3:11:f9:35:78:e7:91:30:ad:e0:a1:3e:02:cc:fa:
93:ee:45:90:be:52:61:57:2d:34:8e:ec:a5:27:1f:
99:6a:ad:27:83:64:7d:5d:b4:1c:64:54:68:9f:a4:
44:25:20:1c:a1:e1:8a:a7:cd:4e:1f:38:92:06:12:
4d:ed:30:d1:5e:ba:3a:a3:af:a0:84:30:bb:71:d3:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0B:9B:F0:09:AF:F6:AE:50:19:F2:73:B3:7D:50:45:E8:F7:49:D0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uAub8Amv9q5QGfJzs31QRej3SdA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.144.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:21:27:66:0c:46:51:37:df:1c:b9:2d:ea:2b:00:cd:d6:19:
e9:dc:7b:c2:38:89:75:c7:8c:f4:66:e8:c9:a9:07:7a:0e:1a:
6e:ed:ac:94:3b:02:a0:53:43:d0:a8:be:cb:b4:5a:f7:7e:78:
8a:30:a7:9d:10:1a:55:f9:c5:ef:8e:9a:65:b5:d1:78:ff:62:
03:69:ea:c8:10:d5:f1:1a:a6:57:09:c0:1e:ac:42:03:b4:ee:
dd:66:34:17:f6:fa:18:3a:ea:4b:45:04:c9:3e:bd:db:13:02:
c0:c3:27:c6:fd:26:c0:be:f5:5f:bf:01:63:f7:c0:5d:11:1d:
66:2b:25:aa:3f:71:90:14:23:e3:ce:cb:43:fc:98:2e:11:76:
a8:7b:53:97:5c:a4:16:d3:e5:93:83:9a:f5:91:29:50:b0:89:
c3:0f:c2:26:90:06:47:75:5f:3b:88:96:4c:a1:01:75:6a:83:
37:73:09:0a:23:6a:f1:d8:d6:40:02:88:7e:a8:5f:92:b3:bc:
a4:d1:2e:3b:cf:e5:82:16:ec:b7:15:92:92:d3:26:fd:7e:49:
c8:8a:14:3f:90:81:a1:31:72:79:e8:a6:42:8d:c9:ad:26:c9:
10:91:28:8e:34:15:1c:43:0a:ea:e5:db:fe:94:63:f9:c0:e9:
b6:ef:a4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org