Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3WK3PLZ-UIPTi8_8nDLOKta49EE.roa
File: 3WK3PLZ-UIPTi8_8nDLOKta49EE.roa (raw, json)
Hash identifier: wFN62deylkf6V9ceQykFmuk4SsmtGB/wxYK7nZOkvCE=
Subject key identifier: DD:62:B7:3C:B6:7E:50:83:D3:8B:CF:FC:9C:32:CE:2A:D6:B8:F4:41
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20CA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3WK3PLZ-UIPTi8_8nDLOKta49EE.roa
Signing time: Fri 25 Nov 2022 04:39:06 +0000
ROA not before: Fri 25 Nov 2022 04:39:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8394 (0x20ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DD62B73CB67E5083D38BCFFC9C32CE2AD6B8F441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:69:c1:30:cb:ba:5b:d2:da:66:f7:81:25:
f3:2d:77:15:44:b5:33:70:a0:55:3a:c3:32:3f:0d:
06:0d:fe:1f:67:d8:2a:ea:6f:74:22:92:e2:b7:bb:
a6:95:e5:05:e5:ca:e8:27:f6:c4:fa:d1:06:cb:7d:
0e:ee:9c:c3:44:e0:f1:44:2b:4a:7d:f1:e0:f5:cc:
10:e0:d2:f9:a9:78:8f:30:e3:c7:01:1c:2b:0f:4b:
e6:88:52:4c:1a:e3:b5:9f:41:e8:90:45:cf:e0:52:
4e:04:22:96:49:85:c5:93:54:ea:33:db:5c:63:c2:
2c:54:d4:a8:7b:75:ac:fa:f2:56:db:4b:31:04:d5:
ae:66:06:ec:15:52:0f:52:c8:1f:16:7e:d1:6f:af:
83:e4:01:84:b7:3e:3b:67:fd:b9:10:74:03:e7:24:
36:0e:d0:8e:2d:da:ed:84:8f:4a:31:1e:5d:25:62:
74:29:99:ca:e8:30:ad:7d:d5:e5:10:3e:e9:37:db:
4c:c1:96:52:bd:14:f8:16:96:52:fd:a0:dd:1f:c3:
5f:35:39:ae:d0:94:48:60:32:bf:b2:8b:14:2d:46:
78:27:9b:b6:f3:63:9e:99:7f:c0:00:16:c9:3c:21:
2d:d1:a0:ae:c9:c7:c5:18:9d:28:0b:6b:7c:f9:d1:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:62:B7:3C:B6:7E:50:83:D3:8B:CF:FC:9C:32:CE:2A:D6:B8:F4:41
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3WK3PLZ-UIPTi8_8nDLOKta49EE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.48.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:48:b7:51:eb:e7:40:e6:70:7d:68:89:0e:3c:c8:d5:27:25:
34:cb:62:5f:f9:64:52:0a:cd:50:e3:41:03:36:d9:66:95:98:
98:cd:ed:e3:47:c5:39:5d:78:72:06:99:4c:53:c3:88:04:8f:
47:bb:87:a1:a8:a6:54:00:4c:d0:1d:8f:18:57:2d:9a:72:9b:
97:b2:20:43:d3:fb:fe:55:1f:be:df:ca:b6:d2:bc:71:ca:19:
f0:81:aa:fc:de:ea:06:79:50:b6:86:ec:7e:8f:5d:df:29:b2:
5f:55:10:91:02:47:ba:f6:a0:bf:8f:6d:ba:e3:d4:87:94:cc:
9d:48:0b:e3:c4:a6:a7:4d:dc:03:92:5e:67:d4:02:02:f5:60:
4b:52:15:96:98:35:66:37:ae:75:32:b7:05:f9:09:d1:d6:9b:
ff:dd:5e:f0:a1:0c:e8:4c:b8:e7:97:07:76:bc:36:75:a4:3b:
5b:c9:77:98:af:ed:ba:cb:2b:33:a6:f1:d4:ec:e3:89:e1:8f:
b0:f5:07:77:4c:3a:67:48:51:a2:7f:bf:f0:86:81:db:90:01:
6f:92:bf:32:01:7e:bb:6d:45:16:c9:cc:a6:1b:80:0f:b7:34:
38:fc:01:a7:12:56:1c:d5:f2:41:95:fa:b8:2f:53:ef:b7:aa:
b5:2a:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:31 2025 by rpki-client