Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HTWdv6iXQz1NoPneo89EomHiGGU.roa
File: HTWdv6iXQz1NoPneo89EomHiGGU.roa (raw, json)
Hash identifier: 2cAnQUdItrTl/YCbfaNwrOMs/Q2o/rz8uN9nIBcYzNo=
Subject key identifier: 1D:35:9D:BF:A8:97:43:3D:4D:A0:F9:DE:A3:CF:44:A2:61:E2:18:65
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20EE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HTWdv6iXQz1NoPneo89EomHiGGU.roa
Signing time: Fri 25 Nov 2022 04:39:18 +0000
ROA not before: Fri 25 Nov 2022 04:39:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 45.64.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8430 (0x20ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1D359DBFA897433D4DA0F9DEA3CF44A261E21865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:cf:dd:b6:16:e9:ae:56:4b:f2:8b:f7:c3:
c3:59:46:27:0c:d5:16:83:14:2a:74:51:bf:00:d8:
d8:77:56:43:49:28:ef:b5:60:75:c0:46:de:ff:9d:
aa:3d:fd:37:06:02:a2:c3:4a:1b:8c:cb:56:29:00:
0b:04:55:54:d5:9c:f0:0c:c6:e7:45:3e:bf:e3:dd:
8c:96:a4:70:93:98:c1:4a:17:9d:9a:be:df:10:dc:
ae:67:81:a1:60:89:68:f7:0e:e0:c7:be:a2:3d:10:
30:75:37:58:a5:fe:d3:45:33:9b:20:bc:be:67:24:
ff:4b:44:2e:59:72:e6:84:26:94:8f:dc:20:26:8f:
04:2f:ec:9a:e2:bc:41:f1:ea:9f:99:12:bd:e2:15:
12:4c:51:6a:ac:bc:b5:85:7d:85:ff:d6:52:d0:b0:
57:f5:c5:e1:8b:2d:6a:27:10:48:07:36:c5:29:3e:
d4:fa:a3:9f:c5:8c:07:11:d7:ba:8e:93:de:24:04:
98:91:77:36:c0:ae:11:d0:36:a0:3c:91:6b:52:51:
26:2d:ec:f6:7c:13:3e:a8:41:e4:4b:7c:76:fc:7a:
d6:4f:53:d3:cc:21:7c:66:c1:69:24:d7:9f:4a:70:
e8:be:44:71:1b:03:96:0e:0b:a1:50:80:c7:4d:af:
7e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:35:9D:BF:A8:97:43:3D:4D:A0:F9:DE:A3:CF:44:A2:61:E2:18:65
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HTWdv6iXQz1NoPneo89EomHiGGU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.31.0/24
Signature Algorithm: sha256WithRSAEncryption
04:5b:82:8e:40:28:e0:68:25:10:1e:54:2e:33:f1:bf:ee:c1:
d6:a0:ef:94:95:13:6c:79:c6:c2:e7:63:32:a5:4b:1b:3b:b6:
40:20:71:8b:47:d7:73:6b:6a:d4:c0:29:7a:5b:2e:8b:e7:f9:
fb:23:06:1e:d3:79:56:f5:8d:48:3c:26:dd:ef:a3:f4:b0:bf:
4f:b8:84:70:df:e3:38:09:10:df:0c:04:40:15:9a:a6:a1:07:
ec:d0:9e:1c:cc:21:58:f9:04:bc:a2:95:3e:94:23:d4:43:b8:
a6:72:01:29:11:c9:9a:81:7b:ca:8e:02:b5:0a:78:2b:29:3f:
47:50:53:fb:e1:22:ed:13:35:80:64:3e:a6:97:0c:dd:0c:37:
ed:ee:8d:d2:69:29:bf:95:8d:01:a9:99:e4:f8:30:0d:65:1e:
bc:3f:3c:f6:13:07:ba:99:2b:36:bc:39:e6:24:a4:93:2e:db:
39:6a:29:78:b8:70:31:b5:f6:be:f2:df:14:4b:13:0a:e1:f9:
c8:c5:f5:2a:8a:39:8f:63:11:78:37:6e:84:60:26:78:02:9b:
60:c6:e3:f6:4b:a8:0b:a2:c9:f3:96:3f:d0:a3:30:ae:b5:fe:
45:76:e1:35:fc:72:40:b9:8a:d5:9f:ed:f5:d6:1d:ec:6e:9c:
4d:4c:ae:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:40 2025 by rpki-client