Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vyKIvZc3pt-4ygLo-ORwgRH-uCg.roa
File: vyKIvZc3pt-4ygLo-ORwgRH-uCg.roa (raw, json)
Hash identifier: gadhTyMRQMxHBYl6bfJdv8XAiok+vuZlUD5BmgGtWdc=
Subject key identifier: BF:22:88:BD:97:37:A6:DF:B8:CA:02:E8:F8:E4:70:81:11:FE:B8:28
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2006
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vyKIvZc3pt-4ygLo-ORwgRH-uCg.roa
Signing time: Fri 25 Nov 2022 04:38:14 +0000
ROA not before: Fri 25 Nov 2022 04:38:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8198 (0x2006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BF2288BD9737A6DFB8CA02E8F8E4708111FEB828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:1b:99:5d:9b:d4:dc:8c:8f:55:c6:b6:93:
68:e8:6c:f6:70:f6:1f:e4:84:a6:c7:da:83:e5:72:
d3:d9:92:b3:80:aa:c0:f5:0c:25:80:a6:8a:ea:79:
62:62:ae:16:05:b7:3d:5a:42:c6:53:0c:96:e8:b7:
dc:80:da:3e:c9:e7:ba:d1:1f:59:62:a3:b9:e5:b5:
b4:65:a4:dd:fb:0d:bd:61:b2:11:21:7c:15:dd:ad:
fa:25:b8:55:50:b5:c3:29:d0:e0:73:66:29:e4:81:
44:1e:d5:0a:9e:2b:57:0c:35:b6:64:88:ba:14:16:
89:d5:57:c8:82:74:ac:f6:a8:3c:1c:c3:a8:4a:3d:
79:d6:b0:0a:f1:1c:a8:06:3c:90:c6:cf:34:80:8e:
54:98:ac:72:c0:69:d4:58:c0:45:3e:39:21:88:6b:
23:c4:17:34:20:e5:ff:2f:a9:d5:84:2a:4b:d7:9f:
6d:11:48:fc:1a:69:86:72:a4:eb:49:40:9a:17:2c:
9c:fc:89:bb:47:ce:a2:1f:e1:58:15:18:dc:ad:c6:
87:6a:d5:70:94:6c:c9:78:81:bc:98:54:bc:6b:2b:
70:8f:99:ba:0b:a2:75:23:f1:1f:a1:69:2d:20:58:
63:85:f9:e5:41:24:a7:4c:5b:86:e2:26:1d:2b:0e:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:22:88:BD:97:37:A6:DF:B8:CA:02:E8:F8:E4:70:81:11:FE:B8:28
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vyKIvZc3pt-4ygLo-ORwgRH-uCg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.64.0/21
Signature Algorithm: sha256WithRSAEncryption
b4:ff:8b:8a:27:f6:2e:f9:8a:d4:e0:d9:02:73:79:6d:4a:34:
09:d3:13:1a:61:b8:c3:d9:0c:38:cc:50:30:7b:5a:49:77:30:
20:ce:6b:2b:24:fb:0a:f1:1a:be:8c:08:69:ed:24:45:eb:05:
7d:c8:fb:68:a1:b1:62:70:82:0d:aa:37:34:1f:f6:8d:29:02:
a8:1f:f7:95:73:fa:7c:d5:12:99:48:da:aa:b8:3d:ae:81:77:
10:bc:05:2f:c1:f2:c7:2f:fe:98:40:95:4e:dd:6f:07:ba:c4:
8d:4c:e7:b6:40:b2:38:60:0a:04:2c:cb:a0:fe:fd:d9:c0:ff:
08:cc:73:e6:f3:9e:00:d2:ff:a5:c0:72:8e:bd:39:5f:93:09:
9f:09:2d:2c:00:cb:57:ed:8c:5d:81:5b:65:b8:37:21:a8:1c:
a3:b2:61:14:3a:7f:fe:0b:87:e9:16:1a:97:ac:a0:d4:0d:01:
f8:38:b3:26:71:d9:26:03:4e:2b:ae:71:4c:eb:f3:cf:dd:92:
20:0f:c2:4c:a8:ec:b0:23:c6:52:2e:9d:f0:a1:49:d5:e3:04:
0b:af:01:e1:28:f8:94:0a:4b:31:fd:d9:48:34:f6:2c:ff:2c:
49:56:ea:80:2c:62:7e:05:c0:4f:ff:f2:d2:c1:28:e8:ce:8b:
9e:58:9c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org