Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4FuQ41OjUZjoy4QLxwQTx46xQbk.roa
File: 4FuQ41OjUZjoy4QLxwQTx46xQbk.roa (raw, json)
Hash identifier: dperKQk7sLQbOnPwVvb0bXrB7iNafNWCAiB99RTDiS0=
Subject key identifier: E0:5B:90:E3:53:A3:51:98:E8:CB:84:0B:C7:04:13:C7:8E:B1:41:B9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 298D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4FuQ41OjUZjoy4QLxwQTx46xQbk.roa
Signing time: Fri 01 Sep 2023 10:06:44 +0000
ROA not before: Fri 01 Sep 2023 10:06:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10637 (0x298d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E05B90E353A35198E8CB840BC70413C78EB141B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:f0:20:45:c8:fe:dc:80:3f:b7:24:46:c5:
9c:e4:d0:e1:9d:a3:b7:e1:bc:39:a5:20:8c:88:f8:
80:ea:ec:50:18:e9:f8:60:46:9e:79:db:b3:4b:0c:
ff:a2:a6:b1:ca:f2:e8:4f:7d:cd:4a:95:03:be:e7:
fd:b0:43:f2:b4:b6:c0:e1:56:e6:d6:e3:17:97:6a:
42:03:5e:22:be:c7:ee:ca:31:e6:51:9b:43:54:84:
e1:8e:c4:e5:44:74:6b:15:61:79:93:91:f7:55:14:
d9:34:62:db:87:3b:a9:8d:5a:22:82:a8:d9:ef:19:
b2:19:ef:35:cc:a9:9d:62:80:01:de:71:97:ab:f6:
d4:3a:62:e8:73:c3:90:e8:72:21:05:19:be:43:76:
17:e7:fd:99:8e:11:c2:99:28:fe:d7:bb:7a:d2:14:
7f:01:8f:30:7a:43:76:4b:93:9c:87:6e:e1:00:0f:
83:ff:06:1c:22:c6:8e:b0:f5:8c:f7:62:37:6f:86:
16:86:6f:19:7c:54:d2:67:60:83:ba:e7:0b:ca:70:
8b:df:a8:81:da:1d:3c:70:ed:6c:4d:02:dc:07:20:
c8:6e:c4:05:a4:f6:58:5d:25:0b:5d:4e:9e:e5:0c:
69:a2:88:5d:6e:e1:f3:e8:10:f2:bd:65:3f:55:9d:
e0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5B:90:E3:53:A3:51:98:E8:CB:84:0B:C7:04:13:C7:8E:B1:41:B9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4FuQ41OjUZjoy4QLxwQTx46xQbk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.36.0/22
Signature Algorithm: sha256WithRSAEncryption
99:f8:19:2d:03:6c:30:92:3c:1d:4b:74:8d:20:92:45:82:c5:
52:83:0d:b3:ab:92:79:f5:fd:0f:67:a5:f1:90:ce:96:1a:07:
38:7a:34:4b:85:93:c5:91:be:db:90:fe:70:c6:e5:0e:d7:37:
72:59:68:81:a0:9d:11:2f:10:e0:bb:70:14:77:86:28:2a:e8:
fe:1b:fc:5e:59:3d:0f:ea:2c:3c:6d:d9:c4:63:f6:75:d0:ec:
99:65:82:e5:18:ea:9b:4c:b7:a0:35:ba:61:f0:91:ae:80:ad:
54:07:a7:8c:c4:16:ad:a7:09:76:92:e5:7f:ff:a6:11:d7:1c:
10:87:e4:5a:4e:a6:6a:d5:97:66:43:f3:f7:de:7e:d4:84:34:
ba:c5:c5:bb:a1:87:f1:48:a7:b4:7d:06:04:7f:4f:02:d2:c6:
dd:d1:94:e3:79:4f:dc:9b:65:bc:7e:ea:1c:9c:04:0c:8a:c3:
26:3f:ca:6b:50:32:32:29:b0:72:f1:f5:2f:b3:6f:54:02:1f:
95:50:08:0c:b3:c1:48:e7:ce:4e:36:50:23:bf:9f:b2:78:12:
4b:c2:23:f7:54:78:5c:d1:54:9e:0d:17:7e:da:29:40:1f:71:
91:1f:4c:d3:b6:fc:66:1f:84:ab:c2:2f:7e:a0:52:e5:10:26:
2f:9f:66:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:44 2025 by rpki-client