Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yR1iwPpR3RqD4YwFUYxNML7DpPU.roa
File: yR1iwPpR3RqD4YwFUYxNML7DpPU.roa (raw, json)
Hash identifier: s8rfdrVImD3gnEq0FHv1mzr/TkTmAFZcsRZWqGSS+Jk=
Subject key identifier: C9:1D:62:C0:FA:51:DD:1A:83:E1:8C:05:51:8C:4D:30:BE:C3:A4:F5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E64
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yR1iwPpR3RqD4YwFUYxNML7DpPU.roa
Signing time: Tue 29 Sep 2020 09:55:40 +0000
ROA not before: Tue 29 Sep 2020 09:55:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3684 (0xe64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:40 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C91D62C0FA51DD1A83E18C05518C4D30BEC3A4F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:6f:02:5c:b0:c7:9e:2a:72:95:c6:4d:89:
2d:c7:19:c0:ac:98:d4:ca:93:a3:6c:b6:9f:e9:09:
6a:bb:42:f6:c5:c6:2c:64:23:28:dc:8a:31:0d:8d:
f8:a0:5a:ff:6e:6b:86:04:03:50:db:a0:21:c1:ee:
55:1d:d1:7e:5e:fa:56:a6:e3:33:cc:7a:a9:75:60:
65:56:b2:07:33:69:f4:05:c2:6f:a4:4a:e2:b9:a8:
60:11:91:50:8f:da:9f:44:a5:9e:a2:db:cf:bb:64:
d0:29:84:b6:5e:be:a5:e1:86:6a:54:16:f9:f3:3a:
e1:9e:5f:ff:27:a2:de:64:33:ee:da:ce:32:99:38:
08:35:4c:4f:49:46:0e:68:8e:10:ea:12:00:2d:89:
af:ab:01:42:4d:ba:72:37:0b:b6:d0:d7:7b:ae:61:
23:50:02:e7:4c:20:a9:81:41:04:0b:6e:85:a3:eb:
0c:60:04:fa:bb:e5:c9:85:9a:85:c9:1a:e5:83:2b:
0f:03:2c:22:58:55:f3:2c:df:af:ce:8a:b5:fb:44:
28:21:01:4c:49:ed:7a:4d:74:74:87:a7:23:4e:7b:
cd:45:4e:e8:18:ed:54:7c:88:b5:8f:db:08:f0:b7:
41:b3:01:34:87:11:5d:a4:80:84:93:a6:7e:55:8a:
1d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1D:62:C0:FA:51:DD:1A:83:E1:8C:05:51:8C:4D:30:BE:C3:A4:F5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yR1iwPpR3RqD4YwFUYxNML7DpPU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.124.0/22
Signature Algorithm: sha256WithRSAEncryption
52:33:b3:ce:d0:a1:cb:a4:9c:3f:fc:2a:cd:1d:56:2c:c8:21:
b0:17:22:15:04:0c:38:9f:7f:23:8a:09:a8:32:79:13:ce:ec:
06:22:95:66:01:f8:90:87:41:b6:1d:75:e5:5d:f4:59:ff:bd:
7a:e8:81:e8:74:1c:0b:ae:c1:39:27:3a:80:c6:84:be:4b:9d:
60:8b:1d:39:1e:78:75:72:1b:7d:5d:a0:76:54:da:94:d7:18:
01:c7:4e:30:b3:1c:8c:6f:e7:ef:8c:a9:6b:a6:16:0b:37:9d:
5e:c1:8d:cb:1d:76:8b:f4:64:cc:9f:ab:24:3e:a9:f1:55:7c:
b0:53:44:98:34:b2:19:3b:08:94:de:f7:c9:de:35:93:fa:c6:
79:69:79:f8:2e:2d:2e:51:68:f4:fb:7a:87:9a:cd:26:bb:fd:
96:56:f0:16:4f:8f:38:bd:93:a8:39:e7:6b:34:70:04:7a:33:
23:b3:46:d9:26:1e:76:2e:07:2f:95:5a:3b:3d:8e:5a:c0:cd:
f5:8e:8a:00:14:c2:03:8f:af:31:eb:f1:59:0d:09:9c:14:98:
1a:10:c4:78:a2:df:e2:cb:b1:8a:f2:3d:49:ba:13:85:cd:e8:
41:18:5d:6e:9c:fe:c7:cf:78:f9:27:bd:4e:43:04:34:51:7b:
04:9a:77:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org