Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v3UsfsztJJdHwtw-AsrdedQH_1E.roa
File: v3UsfsztJJdHwtw-AsrdedQH_1E.roa (raw, json)
Hash identifier: 3Q0ru88vzv9zAV66zRe2skb42F3e2gXpmCA7BONOIk4=
Subject key identifier: BF:75:2C:7E:CC:ED:24:97:47:C2:DC:3E:02:CA:DD:79:D4:07:FF:51
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1763
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v3UsfsztJJdHwtw-AsrdedQH_1E.roa
Signing time: Sun 07 Feb 2021 12:18:51 +0000
ROA not before: Sun 07 Feb 2021 12:18:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5987 (0x1763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:18:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BF752C7ECCED249747C2DC3E02CADD79D407FF51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:b7:37:73:4d:a8:23:ef:a8:bb:00:69:27:
4b:f9:83:97:0c:24:8d:33:51:ce:17:d1:03:5e:1a:
41:a2:61:00:6e:23:73:54:f0:09:e7:aa:5d:7b:59:
f9:b9:57:eb:76:81:b3:17:eb:05:eb:25:68:b1:a7:
83:19:9a:c7:67:25:25:4a:f2:b8:38:37:37:72:31:
c8:f5:b9:c4:29:2e:d5:9c:22:73:f9:9e:e4:2e:bd:
94:04:84:9e:08:4a:1b:e2:0d:90:b5:ab:1a:06:b5:
cc:3b:5b:7e:cf:ab:1a:ea:6b:7a:b2:5b:0e:85:10:
d5:63:7d:ef:dd:39:bb:99:99:40:4b:97:08:f2:09:
fe:99:e8:12:1f:a3:f1:db:0b:e3:c0:8b:65:f1:76:
62:ef:58:97:5e:23:87:28:91:f6:d5:d8:cc:50:f9:
ab:4f:db:07:e4:5a:77:f1:56:78:28:e7:02:1d:f8:
3a:2c:40:8a:83:ca:68:85:ad:d6:a8:ae:47:e0:c7:
cb:eb:cc:7c:91:35:50:b9:32:63:90:16:b6:54:d2:
00:18:8e:48:60:ec:1a:33:9c:a5:a6:96:9d:af:55:
6b:b8:08:6b:a1:9c:b7:9f:53:11:6b:d0:81:33:5c:
a3:90:04:ea:f6:99:ec:c7:dd:6e:5c:b9:7c:dc:94:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:75:2C:7E:CC:ED:24:97:47:C2:DC:3E:02:CA:DD:79:D4:07:FF:51
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v3UsfsztJJdHwtw-AsrdedQH_1E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.16.0/21
Signature Algorithm: sha256WithRSAEncryption
32:ce:b4:84:9c:9d:56:ab:40:30:38:89:fa:6c:7b:d5:9f:57:
86:50:be:80:99:d5:7c:62:f9:73:20:41:dc:ca:47:01:21:7e:
02:5a:78:6e:ae:8d:08:60:20:ba:53:0d:e0:7f:75:e9:f9:de:
1f:bf:ac:21:02:38:52:af:ee:d0:eb:dd:09:0f:46:72:d0:6b:
ff:7b:e8:07:2e:38:08:a9:3c:cb:52:16:ce:8d:1a:06:9f:73:
81:9e:22:fb:fb:02:95:14:8a:5d:f4:e4:12:f0:b8:d4:4f:1d:
55:fa:c8:62:ea:4e:8f:06:29:29:47:30:e3:5d:7d:48:50:d4:
0d:70:e7:ea:e0:81:2b:e5:47:b3:84:ce:50:04:17:48:af:e1:
d8:17:9a:82:8c:0e:01:3b:74:8e:c7:05:ed:36:ba:73:c7:60:
0d:9e:c5:fe:0c:95:c8:56:43:7f:26:36:90:96:38:93:d0:4f:
fa:c0:aa:82:16:20:8d:f1:84:4b:08:35:41:f5:64:d3:43:88:
55:47:c4:6e:df:6a:22:fb:42:ee:1f:60:05:4a:85:d7:1f:ec:
34:e2:57:aa:e0:47:49:c4:6b:32:de:77:6a:0d:fe:19:b4:24:
55:cd:19:a3:02:a7:2d:c8:17:d2:7f:62:ca:33:8b:5b:61:2d:
a5:61:8c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org