Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wA636AvIKhvqrEP9svzTzxE20OI.roa
File: wA636AvIKhvqrEP9svzTzxE20OI.roa (raw, json)
Hash identifier: 0XI8leKPBqdHdBoAPK79UcHc18B5KadjvrbWcTnJ6G8=
Subject key identifier: C0:0E:B7:E8:0B:C8:2A:1B:EA:AC:43:FD:B2:FC:D3:CF:11:36:D0:E2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 170D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wA636AvIKhvqrEP9svzTzxE20OI.roa
Signing time: Sun 07 Feb 2021 12:16:17 +0000
ROA not before: Sun 07 Feb 2021 12:16:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5901 (0x170d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:16:17 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C00EB7E80BC82A1BEAAC43FDB2FCD3CF1136D0E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:23:e6:da:8b:1a:95:31:bd:a3:55:9e:5a:2d:
15:52:dd:fc:b6:24:ad:54:b7:74:b4:76:5e:42:73:
45:67:0b:3b:41:a7:3d:00:5d:71:db:b8:5e:80:30:
86:a9:5e:9c:25:34:3a:41:b2:bc:52:b4:21:af:14:
28:12:9c:ae:e2:fa:cb:bb:ac:25:fc:92:4e:cd:63:
b6:93:d4:9d:6e:2c:03:54:05:df:64:f3:59:1f:48:
d2:89:f5:6b:f5:5b:55:a2:52:8c:d7:fc:e6:af:a2:
a7:32:1a:25:09:85:81:7c:95:30:5b:de:65:9e:ea:
d4:19:1e:f0:f5:f0:4e:47:64:9d:b0:05:00:a7:98:
c3:c9:b7:65:41:b8:b8:8c:30:d6:21:00:d0:f6:4b:
08:46:93:0e:03:71:a3:7f:45:fb:6a:98:72:3f:fc:
a4:5e:5d:8c:74:6d:a8:90:19:f7:ef:b6:32:a9:f6:
87:54:b5:7b:02:a4:48:23:dd:80:c9:59:b5:4f:77:
7c:51:09:38:4b:49:74:e2:07:1a:95:7d:ff:88:a7:
c5:ea:32:26:d0:ed:7c:63:06:66:98:28:58:36:38:
fb:13:6e:b0:92:5b:53:7d:43:e1:f4:ef:26:26:7b:
0d:eb:71:48:4b:c2:f3:1c:8f:28:3a:80:9c:2d:d2:
9d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0E:B7:E8:0B:C8:2A:1B:EA:AC:43:FD:B2:FC:D3:CF:11:36:D0:E2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wA636AvIKhvqrEP9svzTzxE20OI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.212.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:99:77:ea:bf:4a:75:94:c7:58:68:6b:d8:43:54:2b:ee:78:
0b:7e:99:69:b5:19:e1:70:eb:68:5c:13:0d:57:22:8d:67:01:
3b:ef:c9:26:b4:46:77:87:79:ac:5d:ff:ac:60:39:18:5d:67:
db:7f:0a:08:cf:f5:ca:21:ac:e8:5e:75:7e:05:16:8c:6a:d6:
70:a0:e4:5e:6b:eb:7d:41:1c:b2:c7:85:0d:8c:18:53:64:33:
10:ea:96:7a:98:31:eb:c2:76:44:b1:99:06:a3:90:f4:42:79:
ae:b9:ee:c7:ec:da:e2:8a:95:ba:9b:12:25:4a:95:a2:1f:2a:
f3:78:cf:a6:3d:04:fb:be:9e:a8:95:d3:30:5d:86:83:63:e8:
b8:6b:44:11:6e:af:83:5b:40:65:88:b7:e2:b9:b3:25:c8:69:
7c:a3:6d:2e:41:5f:15:a4:29:41:46:ac:85:61:b6:b6:11:c7:
fa:20:44:de:9d:6d:b9:ad:8c:1a:5e:e1:1b:e1:d9:cc:1c:53:
d5:d9:7d:34:d6:b0:29:f8:8a:60:96:a7:28:e1:99:33:86:51:
2d:e5:28:9b:67:07:be:47:be:0c:62:3c:bc:c6:b3:99:db:cc:
2d:4b:14:9a:a5:2e:93:cf:2d:59:54:e5:14:70:b9:20:ab:50:
bd:ca:e8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org