Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8o86GilTrXWcEmDTjQwPGg3Vvhw.roa
File: 8o86GilTrXWcEmDTjQwPGg3Vvhw.roa (raw, json)
Hash identifier: TqQUqjptQWuBttBzmxfR6fMoBtgyT+7mFPcuP6ccIzQ=
Subject key identifier: F2:8F:3A:1A:29:53:AD:75:9C:12:60:D3:8D:0C:0F:1A:0D:D5:BE:1C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22DC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8o86GilTrXWcEmDTjQwPGg3Vvhw.roa
Signing time: Fri 25 Nov 2022 04:41:45 +0000
ROA not before: Fri 25 Nov 2022 04:41:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8924 (0x22dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F28F3A1A2953AD759C1260D38D0C0F1A0DD5BE1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:3e:68:b2:14:b1:54:00:c3:b2:01:7f:15:
ce:bf:ff:b7:9b:b0:d6:9e:c6:a3:f5:79:3c:06:be:
dd:1f:9b:0c:5b:ba:85:5d:21:d0:36:ca:2c:36:1b:
07:e7:d3:8c:07:d0:3a:83:8a:28:11:f0:9f:d8:41:
74:21:8f:a9:05:55:78:4c:12:68:44:07:5a:70:07:
84:74:e9:60:5c:58:54:5a:5b:34:c6:8b:cb:e5:d2:
27:4d:b1:7d:96:94:8b:f2:6d:31:cf:52:60:71:fa:
8d:7e:ad:1a:c1:49:d9:93:da:88:28:7e:e2:1e:ba:
a3:05:7f:4d:33:2d:b2:1b:58:8b:4d:1b:6c:46:b6:
30:4a:59:40:26:3d:d4:7e:99:34:d9:16:c1:4e:9a:
44:c1:50:2a:d6:e6:8d:07:32:c4:5b:69:02:a1:69:
4f:71:e1:03:e7:5b:5a:ea:50:7e:ff:bf:2a:9b:3d:
60:66:ee:93:30:4d:42:20:51:3f:85:6c:6b:c7:b5:
93:e3:36:79:d2:06:5f:7c:ce:ba:cc:49:6d:03:93:
4f:f8:82:2f:36:c6:83:5d:6d:cd:9a:26:f7:2b:81:
2d:e9:3b:8a:7b:50:76:45:6a:79:9f:84:1d:b5:3a:
ca:49:46:5d:6f:15:2e:0e:4c:a6:02:f9:f6:7c:dd:
e8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8F:3A:1A:29:53:AD:75:9C:12:60:D3:8D:0C:0F:1A:0D:D5:BE:1C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8o86GilTrXWcEmDTjQwPGg3Vvhw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.72.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:71:bb:8d:1e:88:cf:d8:53:1c:cb:00:f2:af:15:2f:97:98:
d5:3f:4f:f1:7b:6a:0e:d4:a7:28:a2:4e:c2:d9:75:b5:bb:d0:
6a:b8:d5:ca:63:cd:45:c8:6e:e4:2b:a6:40:f1:02:f2:eb:a7:
cb:b6:96:58:f9:a7:64:a4:95:59:eb:db:04:e8:30:6e:a8:04:
8d:5f:f8:67:40:e7:a5:e6:aa:58:50:57:73:0a:d9:7f:31:4a:
85:98:13:d3:59:f6:4f:41:ee:65:f9:11:d1:64:48:01:42:24:
c4:e6:87:05:4c:d7:ce:df:1d:57:90:31:03:fd:3d:35:d0:74:
e7:2d:20:07:6b:27:fa:6d:d2:b3:fe:cd:21:48:97:90:11:ee:
51:5c:ac:cc:4c:fc:0e:d7:d0:d4:0c:53:e9:88:00:3f:e7:07:
cd:f4:3f:8a:5c:26:53:8c:d6:2a:7a:be:2c:53:10:4c:dc:cf:
a3:60:c4:44:8c:e7:d6:70:08:c7:47:68:9e:f9:4b:a9:15:d0:
e1:84:c6:50:54:36:79:fa:ce:61:5b:ae:8f:d0:bd:3e:1f:16:
f7:48:7a:5a:8e:1e:5c:bf:36:08:bd:e5:da:ff:7a:4d:6e:1a:
2a:ca:47:93:75:34:c2:ad:dd:22:67:f5:bf:29:e5:f5:9f:b6:
79:66:01:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:16 2025 by rpki-client