Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fukll6Nt94TlFWTpLO60loKCzPc.roa
File: Fukll6Nt94TlFWTpLO60loKCzPc.roa (raw, json)
Hash identifier: 72YeYW4JaAF4o8B+tifqoYGfdWl9OT9kvuWCflPnaTw=
Subject key identifier: 16:E9:25:97:A3:6D:F7:84:E5:15:64:E9:2C:EE:B4:96:82:82:CC:F7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 205B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fukll6Nt94TlFWTpLO60loKCzPc.roa
Signing time: Fri 25 Nov 2022 04:38:36 +0000
ROA not before: Fri 25 Nov 2022 04:38:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.176.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8283 (0x205b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=16E92597A36DF784E51564E92CEEB4968282CCF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:dd:b2:91:eb:b8:21:56:be:0d:8e:e5:b9:
2d:b5:b2:a6:40:7a:fd:b2:9e:11:5f:54:cd:80:b8:
d1:5f:55:d9:36:7b:6f:46:16:6d:86:d8:25:fe:52:
d4:ea:3c:19:db:3e:a3:23:1c:8d:b1:ec:53:3e:84:
4c:2d:1a:6a:86:8d:9c:a1:cd:7e:bc:2b:91:20:02:
0e:67:31:88:06:91:8b:f4:d7:85:f6:69:14:da:bb:
3e:b4:1e:f8:9a:f1:6a:2e:83:a6:0d:51:5c:ab:be:
8d:03:e0:cc:80:f1:67:00:44:59:82:ec:b9:4b:4e:
bc:03:99:97:b0:50:06:b1:99:cf:8f:3d:fa:5a:9a:
35:f4:6c:ec:e8:4b:16:03:4b:43:0e:d0:92:7b:fe:
9f:60:30:25:16:69:18:94:00:34:75:40:a9:db:6a:
82:42:fa:76:a0:48:e1:0c:80:bf:bb:42:84:8d:20:
b8:0d:86:90:b4:48:c3:01:d5:55:f1:38:4b:78:c2:
46:4c:d2:3f:69:ea:7f:0b:59:8a:3c:96:d2:f2:11:
57:68:5b:3c:81:21:ae:7d:cb:ca:e6:98:e9:c1:bf:
ad:06:24:0d:b5:15:60:97:85:ab:7a:66:15:46:32:
42:3a:8c:55:f1:1c:00:ad:75:7b:b1:eb:75:4b:89:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E9:25:97:A3:6D:F7:84:E5:15:64:E9:2C:EE:B4:96:82:82:CC:F7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fukll6Nt94TlFWTpLO60loKCzPc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.176.0/23
Signature Algorithm: sha256WithRSAEncryption
12:a5:dc:dd:c4:02:14:eb:4b:d2:d3:a2:15:7a:75:53:d0:7f:
f3:d9:4a:cb:ee:6b:3c:79:3f:32:15:7c:ec:27:56:cf:96:a6:
53:90:a0:e6:19:d2:36:41:80:49:e7:e5:56:fc:d4:5f:f9:42:
03:3b:11:d5:8b:3d:7b:30:d3:e8:f5:75:db:4b:db:11:60:aa:
4a:26:2f:15:48:08:81:07:69:7f:ea:e3:45:ab:88:d3:39:54:
50:15:9d:9c:69:38:28:e2:34:e2:a0:d1:78:ad:6a:4f:c3:fd:
61:c2:3a:e7:70:d4:d8:bb:c8:f8:da:3f:6b:21:eb:6f:49:67:
4d:ee:62:5c:a6:ee:c7:16:1b:0e:3c:e7:05:a9:e2:7c:fe:6e:
05:0b:f7:2d:07:3d:33:49:13:7f:e9:54:a7:ca:f7:f7:7f:6a:
08:96:2e:01:1f:d6:95:7e:76:54:0d:ce:49:af:95:85:2b:99:
66:a1:bd:e1:1c:38:d4:ca:a2:bd:e5:9b:37:be:85:dd:65:45:
c3:c9:fe:5f:d9:32:65:54:2c:bc:ef:ae:3c:0b:78:de:39:2e:
44:90:5e:92:17:a5:d1:3a:fc:09:86:f5:79:28:e4:5d:92:0e:
af:75:86:7b:75:17:e9:81:9f:01:c8:e0:e7:97:3c:0b:15:42:
6e:ed:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org