Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0_iyIITs2A4GFeBmWfpFRCJbiik.roa
File: 0_iyIITs2A4GFeBmWfpFRCJbiik.roa (raw, json)
Hash identifier: WXymjvq5lhIadka8oEi1lv0tXhLgBRmEMULfOBj6gS8=
Subject key identifier: D3:F8:B2:20:84:EC:D8:0E:06:15:E0:66:59:FA:45:44:22:5B:8A:29
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A6B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0_iyIITs2A4GFeBmWfpFRCJbiik.roa
Signing time: Wed 29 Sep 2021 02:45:19 +0000
ROA not before: Wed 29 Sep 2021 02:45:19 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.232.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6763 (0x1a6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:19 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D3F8B22084ECD80E0615E06659FA4544225B8A29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:d3:2b:15:1f:9d:fe:d3:1d:92:0a:a0:1b:
bb:d9:0c:42:17:77:4b:83:70:e9:bc:e1:6b:da:96:
85:ab:bb:9a:89:e7:bc:3c:f9:d6:d8:d3:05:0a:19:
5d:8f:50:bb:3e:7a:db:6d:a5:e0:05:6c:06:cd:eb:
01:05:eb:3b:f0:8a:04:61:70:e9:67:17:d9:32:fd:
ab:c2:85:50:d6:77:bc:f6:f1:85:e4:80:19:64:b6:
04:a0:9f:d1:c2:8d:ea:1b:8b:31:cf:42:3b:54:a9:
87:e9:cd:44:6e:80:30:3b:56:e3:56:e4:a7:07:83:
10:1a:66:0e:3d:3f:bc:ee:9e:55:e6:24:2c:dd:84:
73:99:89:2a:9b:d1:03:11:c5:7e:99:b8:fe:43:da:
60:5a:b5:da:9f:06:b4:96:2e:4f:dc:7d:f9:25:cd:
ae:c7:a1:37:e5:e1:99:59:93:f3:50:7e:21:8a:db:
3a:dc:2b:84:86:f3:76:d5:90:87:e8:c2:f3:9d:d1:
8a:48:85:19:2c:b9:27:c6:49:af:2a:66:88:c2:19:
57:ba:af:b1:5b:6e:3a:2f:60:6d:d7:57:3b:3d:e9:
75:93:0d:01:8e:45:91:d3:23:c1:82:18:60:8a:05:
da:37:70:29:12:4f:85:d2:d1:43:88:98:15:23:8a:
a7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F8:B2:20:84:EC:D8:0E:06:15:E0:66:59:FA:45:44:22:5B:8A:29
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0_iyIITs2A4GFeBmWfpFRCJbiik.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:49:bf:60:0f:51:d0:68:3a:0d:76:b0:d0:b2:ba:22:19:3a:
dc:30:0c:db:80:8b:26:a7:4a:77:30:4f:e8:be:57:a4:bc:78:
cd:17:9c:cc:6e:67:7c:e0:6d:60:c1:a7:b6:cf:91:06:15:6d:
9d:8a:21:73:ce:4b:27:71:0b:df:80:d4:06:7e:ca:f2:6e:2f:
2c:52:50:63:5e:63:c1:9b:17:ed:10:a4:54:da:63:2c:11:c6:
8d:09:76:cb:4d:83:f3:00:5f:16:d5:34:6f:7e:dc:1a:3f:ee:
23:c4:a3:a9:28:ee:30:ba:b1:4b:cb:72:da:54:fa:bb:92:8f:
f4:ba:6b:5a:b6:d9:51:4a:ea:52:73:06:07:96:36:fa:5a:71:
13:93:94:85:96:4d:71:d2:e3:ea:64:51:54:b3:5e:2b:92:66:
64:72:a8:ba:fa:9c:e9:16:30:55:c8:95:b2:23:54:09:6b:d5:
1f:ad:e0:c8:c3:65:3d:17:cf:51:c6:db:c8:68:15:c3:c2:21:
37:a1:46:0a:ff:c1:16:f5:a3:0c:8d:d5:3b:bd:1e:ff:89:40:
a6:05:2b:5c:5e:69:64:e9:ac:d9:2f:41:2f:29:89:d4:de:f7:
0b:42:3e:46:5d:a4:01:d4:37:e0:71:42:80:63:36:59:2b:a6:
07:7d:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:09 2025 by rpki-client