Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vwOr9tmh5b9G46w4cXJHXRJo9W8.roa
File: vwOr9tmh5b9G46w4cXJHXRJo9W8.roa (raw, json)
Hash identifier: CQgukXI9HKvc3xRfL33xR1xuqiHp7Az91qB8UkW07gA=
Subject key identifier: BF:03:AB:F6:D9:A1:E5:BF:46:E3:AC:38:71:72:47:5D:12:68:F5:6F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14ED
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vwOr9tmh5b9G46w4cXJHXRJo9W8.roa
Signing time: Sun 07 Feb 2021 12:00:40 +0000
ROA not before: Sun 07 Feb 2021 12:00:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5357 (0x14ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:00:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BF03ABF6D9A1E5BF46E3AC387172475D1268F56F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:94:e2:2e:af:cf:80:3c:28:00:c8:df:ac:
33:e3:4f:d4:b4:b4:60:01:cf:6b:b1:41:a8:31:ec:
09:4e:ec:99:84:92:aa:9d:3d:c1:68:4a:d9:48:91:
5d:3c:8e:0a:cf:eb:32:59:ab:b7:be:e6:c9:d7:c3:
d3:bf:cf:b8:ae:7d:73:46:05:4d:ba:5e:70:54:63:
72:40:37:3c:96:a4:b1:76:ec:79:f0:95:c2:0c:04:
aa:ab:58:ca:4f:7d:ec:bc:a4:ba:d3:a2:f9:d3:18:
1d:b2:54:8e:0c:2b:12:7d:1e:6d:64:2c:ce:8b:74:
63:d0:79:d7:69:28:62:8e:73:76:2b:14:83:1d:bd:
e2:7c:31:d1:d0:0b:ef:08:0a:82:ee:b0:4f:d9:f5:
ce:52:63:a1:74:5e:6d:82:26:66:4f:49:01:f1:db:
5f:95:c8:73:06:95:9c:93:a2:e4:38:88:4e:bb:5f:
14:bd:37:7e:e0:58:c4:83:55:04:63:bd:78:23:dc:
84:f6:4a:5c:a4:4f:90:59:78:fb:ca:0d:bc:51:1e:
67:7f:6a:63:f2:38:b0:d9:62:97:92:7c:31:f0:a0:
80:48:87:b1:f8:c3:b6:f7:6d:f3:6b:c5:85:ae:21:
7c:14:5a:d8:5b:23:47:df:c6:ca:a7:dd:ff:97:a0:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:03:AB:F6:D9:A1:E5:BF:46:E3:AC:38:71:72:47:5D:12:68:F5:6F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vwOr9tmh5b9G46w4cXJHXRJo9W8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.152.0/22
Signature Algorithm: sha256WithRSAEncryption
44:86:24:5a:c4:62:8d:65:9d:ae:58:98:eb:d0:81:81:31:e3:
07:6e:d1:b0:57:89:e7:08:18:42:81:f0:53:c5:62:6d:c2:68:
dc:bf:d6:2d:9c:d1:5b:c9:34:5d:53:8a:5c:dc:70:77:2e:66:
d6:9d:7b:f7:43:ed:e7:e8:2a:ef:7a:b9:c2:c2:fa:8e:6f:80:
63:22:70:19:8b:3f:c3:5f:72:48:b4:c3:84:2f:00:08:1e:b8:
32:9d:66:a5:3e:82:53:05:39:cc:76:e9:ee:31:c3:64:36:42:
4d:7a:b0:aa:0c:bb:6e:f5:11:d3:91:34:e4:7c:ad:0c:09:f2:
5e:8b:a9:9b:df:2b:23:22:b5:7f:35:6b:13:52:31:5e:dc:e3:
6b:06:74:7d:0b:06:a3:77:07:ed:50:44:3e:f0:5e:89:79:d3:
8e:fe:59:09:8f:8f:45:d7:41:f1:e7:5d:83:4e:15:17:4d:12:
7c:e5:7f:d2:31:33:dc:79:a4:3e:aa:de:e1:f4:a9:c7:55:fb:
24:0d:e2:14:a8:1b:26:b6:88:3b:ef:ca:81:9d:80:df:a4:8c:
d8:d9:7b:3d:4b:6c:23:5f:a0:25:b5:7f:1e:20:f5:45:38:ca:
7a:fc:eb:b9:24:4e:ab:aa:44:2d:3c:90:99:68:1c:b7:0b:ab:
b8:87:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org