Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zW4-PU_zC5PnPryHX5i4YBMboTQ.roa
File: zW4-PU_zC5PnPryHX5i4YBMboTQ.roa (raw, json)
Hash identifier: jvZ2ViHO9VgKpHbTE8U+JDL4MnzvLmHYOs1Dq+jXLLI=
Subject key identifier: CD:6E:3E:3D:4F:F3:0B:93:E7:3E:BC:87:5F:98:B8:60:13:1B:A1:34
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D2C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zW4-PU_zC5PnPryHX5i4YBMboTQ.roa
Signing time: Tue 29 Sep 2020 09:54:16 +0000
ROA not before: Tue 29 Sep 2020 09:54:16 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3372 (0xd2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:16 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CD6E3E3D4FF30B93E73EBC875F98B860131BA134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:da:8f:d5:c7:66:70:d8:86:a2:1b:fe:c6:
2f:9c:65:04:86:98:02:7b:14:5f:83:f7:b8:8b:29:
45:e9:7d:c4:cf:cc:bd:e3:25:3c:54:54:7a:ce:d0:
bc:c4:ef:aa:38:bf:a1:c8:8d:a8:ba:38:a9:1a:b7:
1c:47:3e:3e:ff:85:03:fd:be:7e:42:a4:d6:a7:01:
8d:fa:e5:91:80:cd:bd:02:be:ad:25:c1:69:d5:0b:
d5:24:b7:9e:57:87:35:f7:4b:56:7d:14:e1:90:34:
c5:7d:54:6d:40:e1:c4:57:49:ea:70:56:de:1d:76:
f3:5e:3e:a1:4a:a4:c8:31:99:fc:f3:18:26:b3:66:
f8:3a:d7:8d:02:9d:ff:ce:aa:e2:47:a0:43:58:e8:
bc:c3:60:7b:79:78:99:82:29:b2:c0:e0:60:d3:f7:
9b:5d:8d:18:5b:1c:27:f4:47:24:fc:5d:55:7a:7c:
31:c6:06:a3:f0:f0:33:40:a5:22:4d:bb:e0:84:54:
b2:84:cf:b0:31:63:78:ef:fe:8f:2d:bb:4f:b0:05:
c6:33:dd:6c:6d:70:31:62:cd:46:56:4f:8c:23:e3:
af:86:75:57:47:7c:80:ee:91:69:55:2f:38:f5:ea:
8c:b2:19:d8:f6:30:92:3b:4e:08:bd:33:93:1a:a0:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6E:3E:3D:4F:F3:0B:93:E7:3E:BC:87:5F:98:B8:60:13:1B:A1:34
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zW4-PU_zC5PnPryHX5i4YBMboTQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.128.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:2c:60:80:64:a2:63:85:3d:48:c0:e7:8c:e0:29:a2:73:58:
77:bb:49:57:df:15:aa:32:e4:8e:1f:0e:84:08:a2:68:b9:36:
eb:a8:62:8a:f8:26:5f:df:8a:b6:f3:27:36:08:9d:bf:df:de:
6d:5e:8e:3d:23:c7:88:45:de:aa:e2:9f:37:a3:7f:2a:0a:b0:
d7:3d:27:4f:66:4a:74:41:20:28:90:0f:60:ad:81:3c:33:dd:
13:62:8c:64:17:59:90:ac:75:24:54:e5:5a:ac:1e:54:d5:bc:
19:9d:b6:50:a8:a1:b3:67:41:af:32:77:37:6c:c6:ed:c5:b8:
52:3a:90:bd:f1:65:e1:be:13:72:75:49:f5:98:e9:0b:fe:6d:
32:18:d5:1f:ec:01:2b:66:51:28:cc:ad:e7:17:5f:9a:ee:05:
20:91:63:a6:57:eb:df:e6:55:75:09:ed:77:08:a2:a5:e4:c5:
3a:dd:e0:64:78:1f:ee:f6:3a:d3:bd:36:e5:b9:91:a0:b6:6e:
94:20:02:cd:a0:56:25:0b:3b:db:71:3d:3a:50:02:a8:13:a2:
c2:d8:39:b4:aa:f0:6a:08:cd:be:17:42:b2:6a:3d:45:5b:15:
29:72:46:f9:2d:f1:db:01:97:73:fb:27:95:fc:e7:9d:dd:ab:
15:29:ef:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org