Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EJdLRcqb9CB9_Iid6I6yQBn_W9s.roa
File: EJdLRcqb9CB9_Iid6I6yQBn_W9s.roa (raw, json)
Hash identifier: FKu9pehssuavjFrvLtE3W6SB2SAulP0AIFtot3bXGt4=
Subject key identifier: 10:97:4B:45:CA:9B:F4:20:7D:FC:88:9D:E8:8E:B2:40:19:FF:5B:DB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 220B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EJdLRcqb9CB9_Iid6I6yQBn_W9s.roa
Signing time: Fri 25 Nov 2022 04:40:42 +0000
ROA not before: Fri 25 Nov 2022 04:40:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8715 (0x220b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=10974B45CA9BF4207DFC889DE88EB24019FF5BDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:f4:51:97:0d:58:4c:d4:0c:d6:3e:c3:4f:
62:d4:d0:88:04:07:e6:43:26:12:16:30:2d:a0:98:
d7:b4:34:5d:cf:0c:d1:8f:3f:db:30:19:79:ce:3e:
e1:61:49:1f:7d:1c:06:eb:bd:1a:aa:ed:b8:1c:b9:
1d:29:aa:00:a5:7f:3e:1f:1f:9a:73:5b:ef:02:1e:
f9:b2:bd:ab:d6:41:00:48:33:c5:69:c5:52:b8:35:
3f:9d:dc:42:fa:c8:c4:e5:ff:76:1e:1b:b0:f7:32:
2d:0a:c3:f1:f0:eb:c9:02:73:cd:0a:41:e9:30:03:
cd:06:a9:9b:cd:83:3e:46:bd:53:bd:36:53:da:f5:
2f:21:ad:7a:47:31:24:66:85:17:d2:fd:5e:22:33:
9c:9f:11:f4:34:6e:ad:c0:87:ff:56:59:65:5e:65:
e2:14:a2:d2:ed:6c:8a:c3:87:e1:ee:45:69:f0:15:
b4:9d:15:94:32:d0:a5:32:dd:bb:3c:9b:e2:a3:38:
c1:3c:9d:f3:0a:69:eb:66:af:f2:64:22:b2:dd:ca:
e8:88:0d:c7:77:c8:0c:97:1e:d9:da:0b:1f:bc:27:
05:bd:86:97:13:20:b3:d6:f4:f5:7c:a3:cc:33:12:
48:e3:fb:76:50:45:29:06:85:f4:ad:e4:e5:94:e8:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:97:4B:45:CA:9B:F4:20:7D:FC:88:9D:E8:8E:B2:40:19:FF:5B:DB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EJdLRcqb9CB9_Iid6I6yQBn_W9s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.32.0/22
Signature Algorithm: sha256WithRSAEncryption
81:2f:f8:f7:93:ba:f5:2e:a1:01:14:1f:fa:f2:f0:05:8c:bb:
01:ba:51:2c:38:81:06:4f:ed:8d:c1:b3:f4:32:a8:55:01:af:
b7:e2:e9:8f:6b:41:b8:6c:de:a7:b7:1e:63:84:c8:c3:b2:4c:
fd:15:ce:45:18:e6:fb:7d:ad:ba:63:d1:b1:db:29:3d:79:6e:
0f:09:92:a8:d1:1d:0a:6f:14:41:35:0e:6c:78:02:bd:0e:46:
e7:a8:8e:a5:7d:22:1c:e3:a2:4a:f7:b3:f6:43:d0:fc:26:4e:
e8:59:89:76:ee:72:e6:c6:d6:f0:b9:92:71:b3:3f:8d:47:7f:
40:ac:e6:52:df:ad:ae:9c:70:93:29:a6:63:29:64:11:b7:a9:
16:96:cc:ea:9d:f6:c8:1b:d9:38:29:4a:ee:ad:ea:3d:a2:bd:
aa:f1:e0:be:2c:73:ed:58:67:da:95:d4:3c:76:7e:17:0c:6f:
06:88:4a:2b:b7:e6:87:96:d7:f4:b5:39:2a:b2:e8:97:fa:47:
96:37:80:1c:86:37:22:eb:ec:c6:d2:ba:b6:5f:e3:2a:fd:55:
9a:6e:4b:7e:9b:a5:bc:14:8e:79:dc:55:90:b9:04:42:83:8f:
e8:f6:ad:6e:fa:e0:9b:53:4f:98:09:44:52:23:54:0c:95:bf:
07:22:70:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org