Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4RpsoPM2dlbyQ-wQfl-y8VLW3VE.roa
File: 4RpsoPM2dlbyQ-wQfl-y8VLW3VE.roa (raw, json)
Hash identifier: 06qjOg1JZt1YepRyjtfj/o5/pFaJ8gYuFpV3ieVHPNM=
Subject key identifier: E1:1A:6C:A0:F3:36:76:56:F2:43:EC:10:7E:5F:B2:F1:52:D6:DD:51
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4RpsoPM2dlbyQ-wQfl-y8VLW3VE.roa
Signing time: Thu 15 Sep 2022 02:53:42 +0000
ROA not before: Thu 15 Sep 2022 02:53:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E11A6CA0F3367656F243EC107E5FB2F152D6DD51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:a7:fb:f8:f9:dc:c3:17:49:0f:78:e7:4f:
9e:5f:c0:45:4f:1a:83:d5:e7:b8:c1:85:c9:c8:b3:
fa:dd:a0:7c:30:92:67:d9:85:35:a3:cd:cd:34:4d:
df:c9:7f:fe:5c:bd:83:c3:77:d5:06:e9:f3:10:ab:
df:bb:16:de:97:90:da:b0:57:93:9f:62:46:74:0d:
73:88:c4:1e:a7:4a:56:ee:ac:68:55:92:1c:6d:4f:
d4:75:ca:39:d9:e8:f1:7a:26:32:7c:00:61:40:ed:
21:f7:36:7e:71:4a:ac:37:a6:00:48:3c:af:a3:e4:
46:e5:80:3c:c1:4d:65:d0:a9:a5:5b:00:b6:a6:c5:
8a:a1:93:08:23:b4:b6:24:c0:3b:24:ee:8e:26:f8:
47:fa:02:46:87:2e:5f:1b:5a:9a:32:26:be:e0:f2:
b3:96:2a:7a:70:32:5a:a6:a1:36:e9:fc:ae:53:53:
6d:c6:13:85:c5:74:5c:08:0c:34:09:34:90:5b:99:
69:f3:2c:48:59:06:db:2d:21:d9:6f:47:96:d9:be:
bd:e6:2b:46:e7:19:e3:af:97:64:20:05:c0:38:97:
f2:d0:9e:18:72:c4:92:72:be:de:67:ab:3f:09:95:
a5:c0:6a:0c:8c:31:52:68:e8:38:f8:39:c5:77:fd:
bb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1A:6C:A0:F3:36:76:56:F2:43:EC:10:7E:5F:B2:F1:52:D6:DD:51
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4RpsoPM2dlbyQ-wQfl-y8VLW3VE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.72.0/22
Signature Algorithm: sha256WithRSAEncryption
27:d2:98:70:62:9a:2f:cb:56:19:00:05:78:fa:68:9e:cc:09:
7a:bf:42:57:cc:c6:3d:79:52:32:7d:97:65:fc:a3:7f:15:14:
5c:70:51:ec:64:5d:f5:92:6c:a0:c6:18:95:0e:ef:5a:87:05:
2c:7b:28:ce:e1:2c:51:c2:0e:01:27:51:6b:36:0d:ce:d3:c2:
7d:1c:56:24:26:93:14:a5:62:1e:9d:9d:0b:92:f9:6d:11:01:
f6:b9:57:a2:77:78:88:54:d1:80:83:e1:b7:bc:a6:27:91:ec:
24:2b:97:91:ef:1c:60:8a:3b:d1:48:37:5c:9f:d9:77:e4:03:
55:38:22:22:c0:f0:d2:cb:89:01:51:88:2f:30:b2:a6:a6:e5:
fb:c2:f4:cc:04:e0:27:37:e5:af:bd:bf:7d:2b:19:67:38:39:
2a:89:8f:bc:17:c7:5c:28:4c:8c:2b:0f:12:eb:fe:d9:31:47:
7b:30:99:bd:b2:ee:20:8f:a1:55:0a:ee:80:54:d5:ce:df:2c:
46:f9:d2:9f:3e:34:f2:a6:4e:91:72:c2:b0:e9:2b:a7:4a:78:
17:56:9f:a6:b1:3a:de:61:6f:94:36:ef:7e:d8:e5:15:5b:48:
56:ad:42:4c:04:aa:eb:21:3d:49:7a:e6:c0:ec:3c:46:65:1e:
68:03:cd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:25 2025 by rpki-client