Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xMVdfrmZEOE3-LMzxd4qkRF-zAA.roa
File: xMVdfrmZEOE3-LMzxd4qkRF-zAA.roa (raw, json)
Hash identifier: Im4P6Nx4RlYB+M/N7NlcpC8kAfOJp40aiOFlsj/U9MM=
Subject key identifier: C4:C5:5D:7E:B9:99:10:E1:37:F8:B3:33:C5:DE:2A:91:11:7E:CC:00
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E69
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xMVdfrmZEOE3-LMzxd4qkRF-zAA.roa
Signing time: Tue 29 Sep 2020 09:55:42 +0000
ROA not before: Tue 29 Sep 2020 09:55:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3689 (0xe69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C4C55D7EB99910E137F8B333C5DE2A91117ECC00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:59:6b:fe:ea:55:bd:cf:5c:59:8e:32:f6:
c3:20:a3:fd:0e:25:3d:08:70:8e:73:f3:44:c3:c8:
24:8f:3f:71:1d:d3:89:12:f9:4e:3b:c8:74:42:f3:
be:74:0a:94:95:c3:a1:62:58:13:2e:b9:55:ae:70:
a8:8c:20:ab:23:45:d2:1a:89:f4:0a:4c:b5:7a:df:
cc:42:cc:76:8b:77:22:21:57:28:b8:66:1f:ac:c3:
35:95:0f:6e:a7:f6:0d:bd:b5:61:2d:e3:81:04:f5:
e8:53:3e:35:b4:a0:ef:51:32:d1:1a:38:d2:fb:85:
71:85:fb:37:cf:78:8a:8f:77:18:a4:84:da:ed:71:
f9:90:bc:79:84:87:1c:ad:e5:3f:d1:29:25:23:e2:
c1:89:b3:0f:1a:52:61:e1:80:b5:e6:b0:9a:e5:28:
63:65:2b:26:31:db:68:f2:73:2a:4f:d9:ae:e2:1c:
f9:61:6d:47:78:c4:0f:14:a4:ee:e8:98:60:61:61:
07:9d:20:19:d0:bd:db:b7:23:a2:c4:49:6f:f9:47:
8e:77:ed:c4:54:8e:c0:f8:10:01:e3:19:0a:fe:e6:
0b:fd:b1:d7:52:3d:b5:9b:f0:79:11:38:24:5e:e2:
de:35:30:c7:3f:87:93:61:41:bb:e1:15:de:02:aa:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C5:5D:7E:B9:99:10:E1:37:F8:B3:33:C5:DE:2A:91:11:7E:CC:00
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xMVdfrmZEOE3-LMzxd4qkRF-zAA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.228.0/23
Signature Algorithm: sha256WithRSAEncryption
30:f4:77:06:0a:27:da:38:83:7c:f1:01:31:ba:fa:d0:87:cc:
2a:2b:92:2e:8f:e5:b3:b1:f5:93:7e:4c:d1:a0:a2:22:59:a9:
db:6a:d4:50:7a:83:8d:69:e6:b1:b3:64:9d:10:0f:25:d6:44:
8e:9b:57:5c:c7:be:f3:4c:d0:3d:ba:1d:db:a7:ce:d9:2d:95:
b0:0b:36:a6:ff:ac:2f:4a:fa:22:38:ea:4d:0f:95:e3:80:d3:
cc:3d:4c:d9:1d:44:ab:f1:9a:35:3c:92:dd:25:97:4b:1d:fa:
4b:66:55:6f:8f:1a:46:e3:a0:5f:65:89:98:e6:4d:40:fe:fe:
16:e1:d0:07:64:24:aa:f5:92:1c:67:52:10:a9:ff:f9:de:b7:
32:f1:e9:6f:59:f3:c1:78:23:3f:33:c8:8c:ff:41:78:7b:90:
8c:76:b8:aa:3b:56:ba:bd:67:07:22:87:9f:f6:ef:06:4f:bf:
8d:14:04:6f:e4:5a:82:f8:d2:55:df:30:54:99:bc:51:95:54:
d1:eb:46:25:7d:14:49:2b:b0:b0:51:d0:cc:84:02:8d:8e:0d:
72:7b:95:7a:ee:db:59:4e:af:42:1e:11:e6:c2:cc:a5:f5:68:
9f:36:4c:21:5b:cd:b2:df:6b:ef:56:7b:fe:03:b7:d5:cd:80:
35:9e:e0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org