Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yJuPSsswEW2iZc2YnEAscm0i-wo.roa
File: yJuPSsswEW2iZc2YnEAscm0i-wo.roa (raw, json)
Hash identifier: BDqZMgFuWC5VNJyaeUFpuXODzKfqq2iZkgntJ5VAI/M=
Subject key identifier: C8:9B:8F:4A:CB:30:11:6D:A2:65:CD:98:9C:40:2C:72:6D:22:FB:0A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yJuPSsswEW2iZc2YnEAscm0i-wo.roa
Signing time: Thu 15 Sep 2022 02:53:55 +0000
ROA not before: Thu 15 Sep 2022 02:53:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C89B8F4ACB30116DA265CD989C402C726D22FB0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:77:17:e5:ce:e8:b1:bc:07:e3:15:25:0b:25:
ee:d8:96:0a:ac:a3:3a:ed:4d:9d:05:d1:b0:49:9d:
31:ad:2a:db:55:32:11:9b:ec:fc:e5:ba:40:41:e9:
a1:86:c2:63:a5:68:41:da:50:c6:23:54:9f:82:ff:
0c:bb:99:97:7b:f9:6d:6d:c3:23:93:ae:9d:1d:38:
b9:97:2f:3c:ed:c3:8b:f7:2a:f9:75:db:94:0a:a0:
66:24:ac:48:8f:98:77:77:e3:b4:d5:a0:79:4d:58:
74:c4:75:95:df:ef:f1:ac:dd:fb:ed:73:b5:8e:17:
d9:4f:b6:54:93:0f:86:18:77:ee:36:cd:3e:34:06:
fa:97:bf:11:5d:99:a0:3f:63:cf:69:ea:75:57:a4:
15:a8:cb:68:b0:bf:73:e5:35:6c:15:38:06:6d:ac:
a7:20:c2:b9:8e:48:7c:34:b8:c0:b0:11:24:4e:44:
03:24:d3:2a:18:eb:07:0d:8d:25:01:80:52:36:15:
31:5c:d1:ee:84:82:fa:7c:50:e5:a5:59:3f:ea:1c:
cb:63:48:37:ac:77:6f:bb:7c:e3:42:e2:e5:7e:fc:
a8:f2:57:1f:35:6c:5e:d6:e4:d3:7c:04:88:b4:0e:
d6:73:c4:c5:b0:d3:64:f6:64:df:99:80:eb:9c:75:
5a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9B:8F:4A:CB:30:11:6D:A2:65:CD:98:9C:40:2C:72:6D:22:FB:0A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yJuPSsswEW2iZc2YnEAscm0i-wo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.200.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:98:88:41:a8:86:21:93:af:19:39:89:6f:15:42:df:3d:35:
92:33:de:de:3e:04:da:3d:0c:87:1c:bc:3d:f1:fe:03:3a:ce:
0c:70:94:f3:87:0d:e6:8a:7d:e8:69:d8:b1:31:ff:d3:44:87:
18:c9:d0:1c:65:eb:7d:10:66:99:89:6c:a6:5b:94:23:1e:77:
76:ed:3d:3b:ef:55:6d:81:f9:03:0e:32:64:07:82:09:49:06:
17:c4:52:cb:48:64:9d:37:39:81:f3:b0:f4:fd:f3:87:b0:a8:
31:42:2c:1e:47:69:9c:a2:ac:a4:48:38:37:69:76:36:df:d1:
79:f8:40:3b:03:fc:02:a3:ed:58:57:79:17:cd:f0:76:82:a8:
41:67:2b:83:90:69:b3:db:b3:66:0a:19:2d:22:41:0b:dd:18:
9a:ba:76:2f:e5:24:fd:7c:92:3d:d0:a2:1d:3d:73:ad:64:9e:
a2:5a:97:5e:ca:e9:15:b4:e9:0d:d2:1f:43:ab:e7:8b:50:43:
cf:17:47:6d:1d:ab:7d:e0:18:48:d7:d1:80:94:d1:5a:80:bd:
81:5e:68:47:78:cf:3e:86:fb:ac:46:cc:e0:09:21:7b:d1:12:
90:76:42:2a:59:cd:84:50:80:31:cc:cd:11:42:04:de:e8:db:
42:62:04:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org