Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CzGGKGr0-JKjDFRjdi_6JlYdct4.roa
File: CzGGKGr0-JKjDFRjdi_6JlYdct4.roa (raw, json)
Hash identifier: u9idDiiSZzuZ4CahEgu+dTNRyoV6yFdw6L5d0vW3ALg=
Subject key identifier: 0B:31:86:28:6A:F4:F8:92:A3:0C:54:63:76:2F:FA:26:56:1D:72:DE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CzGGKGr0-JKjDFRjdi_6JlYdct4.roa
Signing time: Thu 15 Sep 2022 02:52:35 +0000
ROA not before: Thu 15 Sep 2022 02:52:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0B3186286AF4F892A30C5463762FFA26561D72DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:bd:da:ec:44:eb:8a:3a:fe:8b:87:77:7e:
f9:9c:a7:bb:75:b8:5c:a9:26:0e:e8:6e:1b:49:76:
ba:b2:de:af:35:6f:53:a7:9a:75:49:fe:7c:47:b4:
4d:26:27:c2:35:ae:b3:73:4d:06:a5:a2:89:05:e2:
35:eb:ef:01:14:d4:98:d0:db:ff:a1:17:6c:00:9c:
f0:9a:24:7c:11:0b:8d:be:5b:15:ae:b6:fe:7e:b1:
b0:3b:36:37:b8:91:02:ca:4d:65:a4:19:b9:94:7b:
3f:19:d0:d9:2d:76:1c:0f:25:bb:49:cc:b6:c1:62:
9b:0f:83:1a:60:29:49:26:51:d4:dc:57:39:d3:eb:
73:5b:ac:a7:09:b2:b2:b5:7c:38:8b:6b:92:a5:8f:
dc:34:74:62:75:f5:69:c7:2b:a9:ba:9a:a3:a8:c3:
9b:f3:eb:56:51:85:4a:2e:5f:f0:9b:a0:23:1b:26:
8a:3e:31:99:8d:58:5f:8b:ea:5c:40:a4:e1:93:82:
8b:3c:3d:b0:b9:b8:c3:09:3d:37:b7:26:a3:fc:de:
2a:50:fb:ce:44:8b:17:7d:24:51:12:13:8d:51:0c:
3c:69:9b:70:b1:aa:ed:21:7f:42:96:66:da:46:f9:
78:32:1c:e1:b6:9e:5a:76:87:fb:f0:d1:0e:98:3b:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:31:86:28:6A:F4:F8:92:A3:0C:54:63:76:2F:FA:26:56:1D:72:DE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CzGGKGr0-JKjDFRjdi_6JlYdct4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.32.0/19
Signature Algorithm: sha256WithRSAEncryption
01:82:85:13:ab:68:b6:ee:48:ac:47:7c:9b:0f:45:23:de:82:
a5:98:df:55:01:d3:22:ac:de:02:96:63:6a:6a:68:f3:71:41:
1b:71:12:9f:81:e1:43:0c:a1:5d:ee:31:dd:06:db:8c:9f:73:
3c:4b:b4:37:16:a8:b0:29:c2:51:ac:20:68:dd:a9:84:c4:45:
42:c5:89:1e:d1:a7:b8:26:52:8a:c9:c2:4a:2d:95:1b:62:6d:
0e:c3:b1:2b:e2:81:18:85:f8:a9:57:17:da:32:68:c9:eb:8e:
b2:9a:f4:4a:3b:a5:e5:42:a2:4b:d1:a9:2f:1e:63:61:51:e4:
a5:f7:1c:cd:4b:85:3d:37:17:62:cb:9c:ca:f7:f6:60:0a:e7:
17:42:cb:e9:8f:ef:b0:f8:94:fd:8d:59:5a:8d:89:e8:26:98:
d0:be:75:b8:7d:c6:e9:13:d8:2e:e8:8a:46:59:15:79:09:aa:
7a:df:0c:30:be:a3:3f:39:e1:dd:fe:7e:52:f1:7e:d9:6b:9a:
79:46:41:6c:a7:d6:86:71:99:5d:31:ac:cb:f0:c9:88:70:3e:
6b:72:dc:dd:c9:04:c1:da:eb:d4:c4:82:a3:0c:d1:5d:5b:71:
e8:fb:94:c7:1b:6b:8a:e7:2f:ab:4e:6e:74:77:09:f7:5f:ce:
14:23:0f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org