Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FonGJvsL3BRxXMRtMhhx0mnfoxE.roa
File: FonGJvsL3BRxXMRtMhhx0mnfoxE.roa (raw, json)
Hash identifier: fO1OmZJYXASHrndoTO7l3JUXrwdlLPN4RTZTjXC9WEk=
Subject key identifier: 16:89:C6:26:FB:0B:DC:14:71:5C:C4:6D:32:18:71:D2:69:DF:A3:11
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1F75
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FonGJvsL3BRxXMRtMhhx0mnfoxE.roa
Signing time: Tue 06 Sep 2022 02:30:09 +0000
ROA not before: Tue 06 Sep 2022 02:30:09 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18429
IP address blocks: 118.232.200.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8053 (0x1f75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 6 02:30:09 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1689C626FB0BDC14715CC46D321871D269DFA311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:7a:7d:34:e6:75:c4:a4:5e:fe:c7:90:be:
39:27:08:ef:3f:48:5c:fe:e3:4d:db:d8:02:1e:1f:
f8:df:d2:11:05:00:af:86:5d:c2:c6:6e:af:0e:d6:
92:4c:70:20:27:32:ca:01:33:c1:1d:18:0e:78:9c:
32:96:73:aa:ef:cb:82:58:8a:f0:e2:82:b0:29:4a:
24:3a:2c:06:c5:d0:ce:ec:b2:a3:c9:f8:9e:cb:d2:
54:95:4a:46:c1:3f:2f:13:e4:2a:bb:24:e2:6d:8b:
89:0a:cc:c1:3a:48:c2:3a:b7:86:6c:da:7b:3c:99:
d0:3b:c5:00:c8:e1:b0:56:a2:ea:6e:65:2c:1a:1e:
98:98:90:c3:68:7e:66:7d:32:1a:e1:b5:2e:c0:03:
08:ab:a0:98:5a:6f:1e:bf:45:23:49:57:fc:8f:48:
e3:d2:8a:47:df:e7:5d:ca:ea:3e:6b:60:64:a6:9b:
d3:55:f5:64:e8:e4:55:30:03:be:cf:3a:fe:01:44:
aa:d0:70:68:09:5c:4d:8e:ea:ad:a9:25:56:d3:31:
3c:1a:b9:28:4e:d3:89:e9:1d:20:f2:4a:ee:9b:a7:
93:e6:5a:a5:33:3a:8d:b1:9e:2d:e7:b0:2c:f1:1e:
29:2c:f2:61:9a:90:8c:92:81:88:7b:c8:bd:f7:d6:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:89:C6:26:FB:0B:DC:14:71:5C:C4:6D:32:18:71:D2:69:DF:A3:11
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FonGJvsL3BRxXMRtMhhx0mnfoxE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.200.0/25
Signature Algorithm: sha256WithRSAEncryption
8a:83:76:60:fe:29:ba:77:23:85:c8:e9:0d:b8:62:94:f7:f4:
4f:9d:47:29:4a:49:87:b1:c0:e6:f0:57:ac:5d:c4:cc:0d:4b:
f1:52:56:80:a7:47:43:a0:59:6c:12:3f:b5:84:fa:ce:c9:3a:
a8:97:de:53:bb:cb:de:0a:89:68:6f:77:c6:64:c4:3a:a3:cc:
8a:a9:c4:b4:4a:33:62:e2:5e:d2:84:b7:48:38:ce:17:b5:7f:
2b:71:f4:c0:d3:76:03:9a:5f:87:29:cd:04:50:5f:14:a7:3c:
5c:26:46:7d:5a:61:82:67:cf:83:c4:38:03:b1:d8:60:71:bf:
59:e0:e1:99:93:0c:72:b1:d9:ba:a4:db:5f:99:d1:54:2f:68:
ae:b3:56:9a:d0:ff:e6:c3:54:10:25:ee:bd:3b:b0:35:ed:7a:
6b:e1:14:39:62:97:84:e8:d4:d2:60:69:30:24:46:d2:36:24:
e4:ac:1b:46:40:28:f1:5e:ef:a4:91:d4:21:51:9c:c5:9f:c0:
ac:49:c6:0e:f7:42:23:41:be:5c:3d:0a:0e:e6:75:a8:18:3d:
bb:e4:60:de:90:ef:a1:c4:8d:17:b6:94:cb:90:08:99:ab:a1:
30:b2:c5:42:fc:6c:d4:26:28:e2:d5:7c:b8:56:5c:22:e2:ce:
48:5f:e1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org