Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-gar8MtkOFBBOiBruZeC9EXpoX8.roa
File: -gar8MtkOFBBOiBruZeC9EXpoX8.roa (raw, json)
Hash identifier: Ts6j8xPVLIEZg6R4qEdqrRYUJJKzmQA5jOXp6iBG9G8=
Subject key identifier: FA:06:AB:F0:CB:64:38:50:41:3A:20:6B:B9:97:82:F4:45:E9:A1:7F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-gar8MtkOFBBOiBruZeC9EXpoX8.roa
Signing time: Thu 15 Sep 2022 02:52:59 +0000
ROA not before: Thu 15 Sep 2022 02:52:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FA06ABF0CB643850413A206BB99782F445E9A17F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a1:55:e3:7a:4e:26:cd:5e:a9:98:06:1e:07:
b4:f4:6b:aa:16:53:4d:53:30:2b:10:f0:af:99:10:
81:86:0f:9f:23:08:66:f7:5b:84:5e:1e:22:17:35:
24:e2:19:cc:81:05:aa:7f:5d:a1:ac:43:ac:9d:d3:
9f:76:a9:5c:c8:64:82:9f:85:bd:4d:4a:6c:94:3b:
3a:31:23:63:0d:82:4b:a3:52:44:9a:31:85:83:ed:
5c:b2:7e:24:4d:72:27:a0:5c:54:5a:b0:6b:86:e6:
b8:44:93:86:94:9f:63:92:c2:39:d6:20:82:d7:60:
f4:89:bc:34:ce:02:26:d5:25:c0:f9:6d:3c:6d:31:
20:5c:b4:d9:de:17:dd:c5:49:65:40:fa:bb:28:61:
6f:fc:6b:f2:43:81:80:28:c9:7a:25:79:ca:c3:8b:
f5:c2:51:30:6a:13:f6:4f:19:c4:e1:31:7d:b0:21:
e5:fb:2b:8c:ce:87:80:67:0d:a6:4a:78:20:b0:60:
67:fc:68:73:fa:6a:06:d7:33:70:99:82:ae:19:1e:
09:6b:e3:0b:d6:ad:9c:47:db:92:1a:1b:6d:9a:5f:
a2:8e:30:2a:43:42:6d:b0:c9:24:48:28:24:66:11:
0f:99:9d:53:cf:ce:42:c2:43:a7:0f:5b:22:46:56:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:06:AB:F0:CB:64:38:50:41:3A:20:6B:B9:97:82:F4:45:E9:A1:7F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-gar8MtkOFBBOiBruZeC9EXpoX8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.118.0/24
Signature Algorithm: sha256WithRSAEncryption
97:4c:d4:a4:0d:22:47:92:21:b9:69:0d:5c:aa:49:ed:3b:4f:
d7:96:96:6f:19:d1:54:43:14:fb:fe:c9:b3:2c:33:bd:8e:ca:
48:95:70:c3:8b:aa:b7:ad:62:45:4c:75:72:c1:fa:c6:20:1d:
d2:97:1d:3c:90:35:04:1a:42:59:8a:ef:c4:09:e4:bf:f0:5b:
99:ec:5c:b0:a5:0d:bf:e9:46:aa:54:2c:7a:d3:5d:fe:37:15:
06:76:20:8d:3e:c9:80:6d:44:b5:d1:55:9b:e8:a0:1a:1c:99:
f2:24:6c:ad:ec:96:79:b9:79:07:ce:90:ce:45:44:6e:99:71:
62:60:45:3f:59:ea:de:90:53:0d:83:5c:48:3a:88:86:95:9c:
d3:a3:dd:ae:9d:18:18:a8:d0:ed:77:a8:96:50:0d:ed:98:ec:
df:d8:f1:91:01:48:01:13:e3:7a:65:86:de:bd:3d:ca:7a:95:
25:02:1c:be:af:13:a8:36:9d:81:a4:ff:c7:84:a8:a4:02:d6:
fe:ce:8a:2a:27:19:5e:3e:04:e1:ac:be:48:9c:dc:4b:78:1c:
e5:75:a9:fe:54:23:e8:a6:a6:a1:fb:79:18:3f:b0:3a:16:3a:
05:e4:57:94:7d:91:45:c6:fd:c6:45:81:73:01:5f:ef:a8:db:
92:e2:2c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org