Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JHVpworoToqUhD-HtXqyfiXB_Qk.roa
File: JHVpworoToqUhD-HtXqyfiXB_Qk.roa (raw, json)
Hash identifier: axDuMhCt34N3Z5ZUjjz4+C0tnLUn/7KnHvJFyEXm7fI=
Subject key identifier: 24:75:69:C2:8A:E8:4E:8A:94:84:3F:87:B5:7A:B2:7E:25:C1:FD:09
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 224C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JHVpworoToqUhD-HtXqyfiXB_Qk.roa
Signing time: Fri 25 Nov 2022 04:41:00 +0000
ROA not before: Fri 25 Nov 2022 04:41:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8780 (0x224c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=247569C28AE84E8A94843F87B57AB27E25C1FD09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:97:a1:a9:5d:2f:fb:7c:ee:8b:b2:77:72:
10:ab:b5:55:14:c8:70:f7:c0:5c:c4:9c:68:b4:9e:
2f:ab:26:26:05:dc:83:a3:b5:1e:02:1a:5c:47:c8:
d4:b8:12:29:19:4d:33:6f:d7:71:9e:c2:28:57:c5:
f9:3e:dd:12:ed:92:1e:44:a3:45:ec:f0:bb:e0:46:
7f:d0:33:b4:48:62:8b:d4:7a:5b:6b:de:78:0f:14:
9f:38:da:31:08:9c:4f:e1:fe:58:f2:8b:76:92:b2:
dc:78:a7:08:c0:72:2c:65:d0:2a:85:ab:15:5a:05:
3a:f3:4e:89:ec:2a:99:63:30:47:48:32:67:66:4e:
e2:da:da:17:ea:d1:ea:48:16:d7:bf:b4:76:3d:a7:
ed:73:f4:20:c7:bd:a6:26:9d:7a:ed:e8:5e:fc:3d:
75:96:70:6c:c3:f7:0f:fb:e8:96:64:87:bc:22:2c:
8a:66:8c:78:e6:b0:4a:fa:76:45:48:63:6d:a0:c3:
f2:e2:a0:f9:4a:c3:c0:1b:2a:f9:12:d1:50:c9:53:
f8:25:08:90:b1:d2:5d:3b:5b:f4:bd:1c:c6:ff:6c:
c2:53:c2:1e:3f:07:1a:35:fe:fe:cc:a3:1c:ce:eb:
e3:4e:b6:c5:a0:9b:8e:be:86:33:89:21:cc:5a:02:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:75:69:C2:8A:E8:4E:8A:94:84:3F:87:B5:7A:B2:7E:25:C1:FD:09
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JHVpworoToqUhD-HtXqyfiXB_Qk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.118.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c4:ef:04:ab:2c:19:dc:b0:2c:ef:c5:4b:d3:03:e5:31:8a:
2a:2a:79:f0:3c:99:68:df:98:94:67:68:01:db:92:c4:6b:2b:
90:83:c4:6d:63:56:8c:0a:92:ee:e5:cb:4a:8e:dd:c0:db:c4:
26:f4:d3:cf:3b:ce:67:e0:e7:a8:b1:20:76:e3:1d:6e:b4:96:
09:4f:06:5d:9a:33:da:90:f9:f0:c0:d3:d0:74:71:70:f5:3c:
c8:cd:a8:cb:db:7b:3e:5c:ea:f8:4b:96:83:10:08:b8:ab:c7:
90:66:7c:e7:3c:04:da:0c:fd:68:c4:b8:59:7c:12:56:9f:98:
cc:49:fd:a5:a3:d9:e6:ec:b6:f3:11:82:6e:c5:d2:81:d0:4b:
be:79:ae:8b:f6:f6:ac:8f:25:1e:bc:85:e1:c2:07:d6:41:92:
80:a3:e1:54:61:c5:de:87:aa:42:de:9b:34:77:69:e7:45:e8:
10:9f:2e:1b:ab:93:5a:2d:56:a9:ed:d2:5b:49:3c:9c:aa:a7:
15:2a:52:59:95:6b:3c:ef:0e:87:fb:d9:1a:74:28:9e:c2:ed:
e8:82:3d:e6:25:48:d4:44:8a:07:d6:fc:54:24:8e:a3:0d:de:
07:d0:42:39:5e:4c:84:7f:86:08:0b:c5:c3:c9:7a:68:e7:29:
5a:88:4a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org