Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/50eQsCKteAY1WxX1pMjTkKQYgL0.roa
File: 50eQsCKteAY1WxX1pMjTkKQYgL0.roa (raw, json)
Hash identifier: ONBS3yv/rha7/QcvQXHltysIkF+0t30Ps+/kYJkbmDk=
Subject key identifier: E7:47:90:B0:22:AD:78:06:35:5B:15:F5:A4:C8:D3:90:A4:18:80:BD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 230C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/50eQsCKteAY1WxX1pMjTkKQYgL0.roa
Signing time: Fri 25 Nov 2022 04:41:59 +0000
ROA not before: Fri 25 Nov 2022 04:41:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8972 (0x230c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E74790B022AD7806355B15F5A4C8D390A41880BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:fe:91:26:c5:a0:65:12:61:c0:78:9c:e7:
b2:2c:61:00:22:f8:4c:86:39:d6:dc:5d:51:e6:9e:
39:3e:1d:20:f0:ec:4b:60:b5:0f:cf:46:26:75:6c:
52:11:1c:58:89:11:5d:24:e1:5f:fb:a0:f2:a5:0d:
68:b0:c9:9b:18:95:e3:8a:30:3a:2d:0f:50:5b:7e:
0b:cb:92:aa:f6:53:83:a4:4e:00:83:04:83:f9:86:
ba:2b:6d:b6:25:72:46:28:00:c2:6f:05:47:85:22:
33:07:7c:fb:54:14:12:2e:e1:34:f9:b0:18:f3:86:
a4:7d:e0:6e:66:4d:c4:60:b3:1b:14:31:7b:db:ff:
47:3b:81:6b:46:71:b2:d2:7d:ed:01:ac:35:cf:fc:
9f:30:c3:b4:e6:e9:ad:4c:ee:f5:70:a4:55:7a:19:
f1:97:11:3a:d3:1e:12:b7:fb:bc:e4:f7:59:07:97:
e6:85:48:aa:59:c0:bd:ee:5a:bb:75:21:a5:75:96:
10:ec:be:04:d8:f3:87:ba:e1:19:3f:c5:4d:1d:63:
03:4e:46:ff:f4:fa:35:4e:28:ca:bd:7d:5e:0b:52:
e5:07:8e:96:65:be:e8:62:af:95:c3:08:29:64:02:
c0:9a:23:40:ea:60:ff:1f:00:2a:ee:92:4c:4d:73:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:47:90:B0:22:AD:78:06:35:5B:15:F5:A4:C8:D3:90:A4:18:80:BD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/50eQsCKteAY1WxX1pMjTkKQYgL0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.100.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:1d:1e:fb:a4:63:77:ac:71:2d:34:b5:7f:cd:b6:67:09:31:
52:05:e6:d8:77:45:e2:7c:b4:85:ab:02:b9:17:0c:74:4a:7e:
ee:3a:3c:29:7e:5e:71:f4:97:c3:a1:65:ff:4f:39:9a:71:68:
f4:a2:50:01:4d:9b:a9:57:ac:21:61:4c:80:1e:84:28:8e:4e:
82:46:4d:8a:b0:51:34:47:55:ee:09:ac:a2:e5:a9:5e:0d:79:
98:0b:7c:08:e7:cf:1a:c9:2b:9f:ad:ad:f7:14:68:c9:7e:31:
90:eb:41:47:73:de:5d:2c:ee:1e:b4:f9:02:a1:3a:81:2d:d9:
e1:f4:2c:12:23:d9:c1:10:5c:a5:4c:97:87:07:cc:28:a4:33:
19:e2:bd:94:3c:74:4f:3a:ea:d9:71:76:f8:d2:b0:1c:36:35:
02:a4:75:42:44:6f:db:cb:77:07:fa:f4:b7:5a:c2:2b:9a:0e:
fa:f7:ea:23:78:b8:35:61:3c:41:44:73:44:3c:0a:8e:e2:81:
aa:b0:16:e8:ac:8d:41:97:71:73:9a:4c:3e:c7:97:cb:8f:a4:
1f:dd:d5:53:b0:84:5f:83:3a:0a:5d:4c:df:61:7b:fe:97:8d:
94:af:78:d8:7d:58:0b:47:5a:1e:2c:59:52:b5:cb:f5:e4:6a:
ec:b2:4c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org