Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BkkrZXi1_fd6xXXJ7J-A41VKhlY.roa
File: BkkrZXi1_fd6xXXJ7J-A41VKhlY.roa (raw, json)
Hash identifier: y2cHk9h11m/SsbpigABF7I9tbe00rzMM4VJoNpCbouk=
Subject key identifier: 06:49:2B:65:78:B5:FD:F7:7A:C5:75:C9:EC:9F:80:E3:55:4A:86:56
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20D4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BkkrZXi1_fd6xXXJ7J-A41VKhlY.roa
Signing time: Fri 25 Nov 2022 04:39:10 +0000
ROA not before: Fri 25 Nov 2022 04:39:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8404 (0x20d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=06492B6578B5FDF77AC575C9EC9F80E3554A8656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:8f:44:6b:90:04:95:09:c8:d9:2e:96:f9:
86:71:66:fa:27:66:dc:9c:bf:89:81:16:5d:41:9f:
9f:e7:9a:69:43:85:5b:b4:ac:df:09:62:89:7c:ac:
c4:e7:77:ca:40:9f:23:6f:45:f8:0e:04:21:8f:f4:
99:28:90:de:76:06:3b:34:96:ea:7a:c3:1f:8b:57:
16:c9:52:8d:d1:1c:63:71:f2:22:74:f0:11:32:86:
06:e5:b6:85:1f:2b:6d:9d:74:81:49:5c:35:4d:8a:
b0:30:9d:ef:bf:59:41:46:ef:5a:20:50:f9:66:e0:
6b:99:53:29:17:1d:7e:39:c6:89:34:53:7e:c2:79:
d9:8b:5d:f3:8b:1a:d7:ae:a9:d9:01:2b:2f:f7:96:
d8:ed:32:bd:b1:d5:8e:be:1b:7a:92:57:18:be:f0:
66:0e:5f:38:c1:49:28:41:9d:6c:cf:25:71:ef:9e:
60:ca:f1:9a:30:5e:32:26:00:64:9a:a3:cb:76:30:
fa:d9:3f:24:7c:92:7c:72:31:dd:86:2d:c7:52:43:
3a:54:e0:13:e8:8f:f8:a1:5c:e9:99:f8:73:93:37:
1b:b0:e0:10:4b:37:f7:a3:33:9e:9e:5f:fc:7a:c2:
44:75:a7:ec:be:05:ef:c6:1d:90:42:5a:3d:7d:b2:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:49:2B:65:78:B5:FD:F7:7A:C5:75:C9:EC:9F:80:E3:55:4A:86:56
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BkkrZXi1_fd6xXXJ7J-A41VKhlY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.178.0/24
Signature Algorithm: sha256WithRSAEncryption
94:59:4b:d3:90:a9:cc:be:a1:e6:c5:d8:eb:d5:60:69:f9:1e:
07:9b:70:30:93:28:b1:95:56:cb:d2:14:3d:9d:16:dc:bf:98:
07:f1:65:d6:94:1c:a8:be:2c:46:6e:fd:bf:24:f1:17:d0:f1:
9e:36:c0:b5:c9:0f:25:79:a7:d7:d0:5a:9e:5e:f8:8a:98:da:
f2:50:68:b4:65:fd:e6:a1:0a:42:70:bf:e0:fd:c3:5c:9d:11:
f0:d1:62:7d:2f:3b:ac:29:b2:86:fe:a2:55:15:9a:65:83:2d:
e0:aa:d3:c3:f9:4f:c8:34:61:c7:d8:59:8f:aa:8e:40:dc:4c:
89:e2:a4:1e:a7:75:80:cb:47:e4:45:62:ce:54:1b:fb:04:d7:
dc:a2:62:00:49:2b:be:0b:c7:b6:dd:64:a8:ec:3e:1a:10:2a:
d8:7e:aa:4e:54:f4:09:8c:68:89:4b:eb:6b:2d:b4:00:36:af:
7f:24:94:62:73:d0:73:38:da:76:2f:db:54:85:13:91:36:18:
30:91:2d:0a:2e:cb:1d:d4:63:70:12:a7:38:27:49:7a:fa:07:
a8:f7:52:56:08:18:eb:b1:8b:0a:b1:a9:d6:b4:ee:aa:78:f5:
10:00:61:e9:75:90:99:84:13:f6:3b:63:3b:e7:4e:aa:bc:42:
f1:30:03:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org