Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IbbriHePUibp41Nt4laXY8Ri9iM.roa
File: IbbriHePUibp41Nt4laXY8Ri9iM.roa (raw, json)
Hash identifier: bIDXcfGLHDIkKaJrIyXhzWeMKGxCzouDD76O3iPc7n8=
Subject key identifier: 21:B6:EB:88:77:8F:52:26:E9:E3:53:6D:E2:56:97:63:C4:62:F6:23
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IbbriHePUibp41Nt4laXY8Ri9iM.roa
Signing time: Thu 15 Sep 2022 02:52:22 +0000
ROA not before: Thu 15 Sep 2022 02:52:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=21B6EB88778F5226E9E3536DE2569763C462F623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:54:a8:c3:6a:37:74:77:08:92:8f:c9:0d:
dd:80:d0:c1:90:41:2b:38:c4:10:c2:6d:12:b3:18:
6e:d8:95:50:f4:aa:1c:ad:c8:fc:f5:40:50:f4:17:
ee:d3:01:15:58:36:43:ab:54:57:a3:68:9e:08:75:
c1:97:b4:1a:6f:07:aa:a7:9a:3e:5e:c5:77:7a:de:
f9:64:f0:91:2d:78:74:e9:45:32:cb:6e:8d:38:e9:
2d:f5:ee:ef:3f:cd:94:c0:33:ff:54:93:e6:49:1e:
e8:78:5c:d2:bc:5e:f7:73:cc:cb:20:48:05:c4:23:
68:29:c3:2c:a2:cc:56:86:38:5f:fe:03:8e:ea:53:
82:d7:5f:51:ec:b0:fe:44:c9:b1:01:df:0f:74:30:
fa:7b:dd:c2:b9:a5:d5:6a:2e:f6:01:83:e8:bf:d6:
8a:40:79:15:9d:01:b1:26:3b:2c:01:7c:85:5c:db:
30:76:2d:c0:50:cd:e8:7c:e8:04:f2:4e:91:99:9a:
cd:40:09:41:52:b8:46:83:8d:8b:a2:73:8f:42:3e:
58:f9:8d:b3:0b:d2:5f:b2:20:79:84:90:9e:af:91:
57:f3:49:af:8e:9e:19:da:2c:66:41:21:f1:7c:80:
bc:9c:2a:ff:69:3f:60:5a:cd:b2:21:1b:62:62:50:
a4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B6:EB:88:77:8F:52:26:E9:E3:53:6D:E2:56:97:63:C4:62:F6:23
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IbbriHePUibp41Nt4laXY8Ri9iM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:25:a6:ee:cc:d4:b4:14:dc:6a:71:c2:86:10:b3:f5:67:44:
4f:b9:1b:a9:89:a1:86:7d:5f:f6:00:41:b8:ed:1f:ef:34:b7:
42:65:d7:62:29:9b:b3:5f:15:c9:3b:ee:16:7d:1a:68:90:28:
a6:91:63:f5:3e:38:ee:2b:52:df:6f:ef:75:6a:00:c7:7a:e7:
e2:73:e5:93:83:72:b1:47:23:36:35:fc:65:5e:59:d6:7d:dc:
3d:92:5d:ff:8d:10:62:4e:9f:42:92:e9:d9:c6:98:24:af:c9:
37:d7:49:7a:e0:04:66:2f:ca:7f:22:48:6f:34:d4:df:9f:c9:
aa:2c:c9:c3:52:6d:cf:e7:f6:6e:97:de:7c:e4:fa:8a:c6:2a:
c2:da:1a:6f:cf:1a:c6:8b:66:9d:3b:5d:31:50:f7:9e:61:94:
e4:92:26:ba:2f:04:3e:ce:88:e8:dd:dd:9e:a0:36:d7:21:00:
36:c0:11:9c:70:7a:d8:49:fc:bc:83:a0:46:dd:d0:c1:e0:62:
2d:80:16:dc:6d:a9:2e:99:9a:c8:55:08:d0:64:6b:bf:d1:ae:
eb:5b:6d:3b:22:e4:2b:74:b4:93:2f:58:d4:f6:56:4f:8f:bf:
ed:ba:bb:fa:89:eb:ad:b9:f5:81:50:a1:a5:8a:4f:2d:89:ee:
dc:3a:0c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org