Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vf6Lm_rp_Y6ThOxJDTYgSKMpXAo.roa
File: vf6Lm_rp_Y6ThOxJDTYgSKMpXAo.roa (raw, json)
Hash identifier: hXDsbIPQHUPk0z5M14ahjn/fhC2WMgrFEu0m5F22RE0=
Subject key identifier: BD:FE:8B:9B:FA:E9:FD:8E:93:84:EC:49:0D:36:20:48:A3:29:5C:0A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 16EF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vf6Lm_rp_Y6ThOxJDTYgSKMpXAo.roa
Signing time: Sun 07 Feb 2021 12:15:26 +0000
ROA not before: Sun 07 Feb 2021 12:15:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5871 (0x16ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:15:26 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BDFE8B9BFAE9FD8E9384EC490D362048A3295C0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:e6:25:4b:80:58:b7:27:62:a7:c2:48:25:
63:98:40:bc:a7:7f:6b:dc:bd:75:ad:55:6c:ce:66:
69:83:e5:31:31:33:3e:d0:f2:db:7d:e4:f2:a1:bf:
e4:db:b1:e0:5e:dd:2d:46:8e:82:0d:48:ec:61:35:
a5:d9:0d:6e:d5:c6:b4:ba:1f:ce:01:b1:5c:3f:2b:
d6:17:cb:94:f7:1b:4c:84:b5:fd:d8:d6:7a:be:d2:
38:43:0f:e1:52:06:ca:c3:50:59:39:35:96:cd:df:
04:94:78:f9:98:65:66:35:c7:2f:26:ae:f9:25:ca:
aa:1d:aa:65:df:ab:54:8a:f5:ac:5f:7e:83:06:0d:
a9:ee:73:8e:4f:f7:e8:5b:32:3b:0a:8e:81:7f:95:
fb:11:95:a9:9a:7f:a2:73:11:73:6c:3b:43:cb:b1:
9b:e4:2d:70:e8:ad:87:74:32:35:15:dd:e3:cb:42:
f3:7d:5c:0b:34:c8:30:d6:6e:f9:92:b2:5c:f8:31:
eb:de:06:3d:9e:64:84:d6:4f:9a:4f:b9:ae:17:02:
86:a6:90:30:48:0e:66:7e:9b:80:ee:52:1c:b5:2b:
e5:bf:16:d8:04:83:10:d1:31:8d:a1:79:4c:b9:e1:
33:6f:3f:dc:59:a9:45:14:41:19:80:9b:bf:89:5f:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FE:8B:9B:FA:E9:FD:8E:93:84:EC:49:0D:36:20:48:A3:29:5C:0A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vf6Lm_rp_Y6ThOxJDTYgSKMpXAo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.44.0/22
Signature Algorithm: sha256WithRSAEncryption
46:51:61:8d:d4:83:34:10:29:9f:a3:76:ce:cf:68:7e:b6:7b:
ce:9c:ff:2b:9e:c5:9c:52:cf:f1:d5:af:7c:06:43:21:0e:8b:
0b:a3:61:f7:45:d2:e3:de:b6:a9:4b:04:db:ae:db:c1:fc:3b:
84:8a:4b:31:07:46:08:e5:f4:78:f2:55:b9:d1:3e:8b:86:a3:
df:62:ef:6b:ea:a4:e3:7e:da:d7:a6:63:c4:0b:be:b7:a5:a3:
c4:9e:eb:06:52:65:d0:3b:58:26:1f:5f:85:71:57:7e:2b:23:
cd:7c:79:0e:97:d1:ac:cd:bc:2e:ba:29:53:16:57:97:9f:be:
76:9b:58:5b:6f:7e:4d:f0:15:3c:e9:94:7d:73:1e:91:40:66:
e4:df:8e:85:b5:b5:ac:dc:72:6b:13:63:15:be:2b:ce:b0:e5:
83:1b:15:22:a6:09:11:e6:a6:83:49:77:af:ba:39:f1:d0:4f:
01:d2:8c:1e:ba:48:da:f2:f7:b2:12:70:35:29:68:de:c1:fb:
9d:8b:de:5b:2f:3e:8e:9a:7d:74:58:4c:24:84:0e:9f:ab:2f:
65:7c:61:8a:5f:bf:b7:95:84:9c:d0:f5:41:5f:8a:3e:23:b7:
dd:64:be:55:0c:db:ee:d3:ca:20:6d:83:0c:94:60:cd:66:38:
88:d4:4f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:30 2023 by rpki-client on console-ams.rpki-client.org