Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CEVhLqL-w96F6ofQrEKdPoq1HfA.roa
File: CEVhLqL-w96F6ofQrEKdPoq1HfA.roa (raw, json)
Hash identifier: RbNKpHt+hstn37uMlITs5g8RY7MFoT6Uz7VF+x4gbhQ=
Subject key identifier: 08:45:61:2E:A2:FE:C3:DE:85:EA:87:D0:AC:42:9D:3E:8A:B5:1D:F0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2291
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CEVhLqL-w96F6ofQrEKdPoq1HfA.roa
Signing time: Fri 25 Nov 2022 04:41:21 +0000
ROA not before: Fri 25 Nov 2022 04:41:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.192.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8849 (0x2291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0845612EA2FEC3DE85EA87D0AC429D3E8AB51DF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3d:5d:71:dd:0f:6e:b7:34:3d:4a:d5:54:25:
ad:40:dc:b8:a1:01:f1:cc:45:53:fc:08:da:70:d5:
5e:bb:91:cb:1b:e2:a1:2e:e8:fc:11:9c:b5:7a:dc:
4a:a9:96:42:3a:cb:72:5e:e8:18:55:d6:6b:53:52:
e7:52:a4:23:bd:86:8e:b9:2b:8c:c7:0f:c6:c2:fb:
e2:fb:09:d2:f1:6a:f4:4b:c6:bd:29:26:bb:6b:82:
a0:d2:d3:1c:2a:93:d1:f8:c7:a0:c4:e3:8b:f0:71:
01:54:99:86:41:00:58:0a:f0:b7:de:68:09:80:94:
67:d8:9e:49:68:88:62:86:06:34:f9:96:0f:33:93:
64:18:ef:93:52:12:e7:52:8f:3b:ae:e0:7e:0b:18:
64:f0:af:60:c9:4e:07:51:23:54:86:ec:2f:9c:d5:
35:0a:b6:1d:e0:b5:8b:b4:91:7b:45:93:3b:4e:44:
e9:b4:1e:f4:d2:a3:73:20:66:26:c3:f5:7d:7e:cf:
64:f0:0c:77:1c:22:26:34:8f:f6:ca:09:2d:37:64:
ef:92:e5:4a:29:ab:53:4e:5a:72:67:02:58:b6:5d:
f0:6a:31:0d:a4:f5:cc:12:74:0b:bb:25:55:f7:1f:
c3:67:59:36:c6:fd:ca:da:b8:d3:8f:e2:8a:a1:b3:
7a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:45:61:2E:A2:FE:C3:DE:85:EA:87:D0:AC:42:9D:3E:8A:B5:1D:F0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CEVhLqL-w96F6ofQrEKdPoq1HfA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.192.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:2b:12:e0:29:e0:cb:58:c2:08:12:c7:8d:e9:1f:7d:ac:1b:
cd:dd:8e:62:e9:2e:e8:57:10:2a:c4:fe:13:18:5c:91:79:39:
f2:92:b3:b7:41:ff:04:2c:dc:d6:21:f0:10:e1:84:81:4f:87:
e2:3d:ff:6e:fe:93:bc:c2:73:72:64:0b:05:2a:1d:ea:2a:92:
3a:7f:30:2b:45:c4:28:9e:0c:7a:4c:a9:f7:e2:66:ce:8e:4b:
74:4c:02:fc:c7:6e:7e:e4:12:c7:ad:26:3d:2f:f4:1a:92:9f:
cb:71:78:71:4c:b4:6f:70:f1:fa:9f:a6:8f:d4:6e:25:3d:67:
cb:d1:88:72:5e:5d:b8:f1:82:00:3f:9c:10:2d:34:28:02:84:
d2:ef:28:c2:60:d0:6b:d3:8b:03:c4:cf:14:63:25:59:a5:c0:
36:90:74:79:e3:b5:f1:1d:82:23:33:82:4f:b6:d6:69:f5:d1:
da:02:dd:02:76:36:72:ac:e5:09:bf:c0:a4:d0:29:15:5a:f5:
db:80:91:8b:fd:08:61:7c:8b:58:8f:2c:4d:86:aa:85:86:be:
d3:ba:9c:77:c4:ed:f2:ea:c5:dd:b2:fc:29:69:0e:06:fe:b6:
6d:e1:84:94:ba:35:1f:e0:02:ae:3a:c4:d0:1d:e6:33:43:7a:
a6:7f:14:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org