Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JxNbzUqJXuAVAHTRHfrJPt-3ZG4.roa
File: JxNbzUqJXuAVAHTRHfrJPt-3ZG4.roa (raw, json)
Hash identifier: DFxf8Sn5Mln/xFBy2kZPtC1YUN1iK+cuRj1+iV9KXr0=
Subject key identifier: 27:13:5B:CD:4A:89:5E:E0:15:00:74:D1:1D:FA:C9:3E:DF:B7:64:6E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21F3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JxNbzUqJXuAVAHTRHfrJPt-3ZG4.roa
Signing time: Fri 25 Nov 2022 04:40:36 +0000
ROA not before: Fri 25 Nov 2022 04:40:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8691 (0x21f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=27135BCD4A895EE0150074D11DFAC93EDFB7646E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:9f:de:d6:b0:24:7c:69:e7:c0:33:1e:9d:
94:94:e1:ad:97:76:0c:49:02:cd:5a:8b:f7:01:34:
f9:f1:3b:73:c3:ba:0e:44:4b:58:57:f2:9e:5f:13:
09:01:d4:f0:61:3a:3f:02:f7:42:b7:4b:85:1f:3a:
89:b8:99:71:11:fa:f5:53:61:35:1d:b9:73:a7:b5:
f0:f6:fb:95:3a:0c:87:af:40:e8:98:a6:6e:0e:af:
57:93:f3:c2:e2:c6:ab:b9:20:c5:6d:31:01:6f:f9:
fc:6d:a3:77:c2:d1:bf:92:f4:89:7a:ad:9b:c7:76:
dc:cf:97:5a:e3:e7:49:ba:d7:28:2b:05:ba:45:22:
a9:51:10:f7:67:3d:f6:3d:85:fd:27:59:39:71:b6:
f5:30:12:60:ad:19:c3:d0:5e:58:60:17:19:f6:97:
0d:c7:a8:5f:57:9a:06:c2:9a:e7:3a:92:d9:26:e5:
0c:86:a4:2f:69:90:37:42:71:76:4d:dc:52:29:5b:
d2:cb:1b:fa:e2:1f:6d:83:9b:23:9c:08:ae:8c:60:
13:e5:47:1c:ed:fc:78:9b:fd:3d:15:f7:b4:2c:3d:
7d:91:35:e2:44:97:80:65:2c:5e:6b:bf:40:2f:9e:
7d:ee:bc:ba:24:88:6c:cd:82:58:cb:87:a6:44:e9:
34:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:13:5B:CD:4A:89:5E:E0:15:00:74:D1:1D:FA:C9:3E:DF:B7:64:6E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JxNbzUqJXuAVAHTRHfrJPt-3ZG4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:71:df:39:86:92:33:12:69:02:c7:f0:53:da:b4:49:9a:41:
c4:44:37:9b:d2:74:a0:71:a3:6f:a6:c9:d2:63:9f:ee:8c:7d:
c2:9c:6c:54:02:bb:65:0c:e6:c1:b8:59:de:a8:79:82:66:61:
74:65:88:ff:2f:3d:b4:bc:b3:a2:51:5c:2f:49:25:4a:48:95:
85:e5:30:3c:77:60:f5:a7:84:93:4a:69:b2:88:2b:2e:7e:a5:
38:7c:28:1d:88:f6:81:6d:79:52:4d:cd:d8:9d:ea:80:9c:58:
e0:f3:6a:20:a4:1e:d5:9c:7a:bb:e0:8f:dd:ee:fa:79:3e:c9:
62:a7:53:f3:d0:ce:3a:10:fd:fb:64:4b:ce:1b:0d:b7:8a:21:
9d:65:d2:94:31:72:2c:ad:b4:8b:c1:d6:fc:9d:01:34:f0:de:
04:ae:69:49:9a:8b:e5:15:ef:92:7b:cb:82:6e:e4:55:8d:cc:
71:c0:93:de:32:42:e4:59:14:65:8b:73:98:67:7f:ea:3d:be:
b0:0a:62:57:03:3d:6e:00:02:03:71:10:fa:e5:0d:f9:d1:42:
a7:b5:fd:82:20:27:af:22:7a:e1:b1:9c:93:42:78:f1:ed:42:
f3:dc:fc:56:c1:b1:69:08:61:ec:0f:df:52:66:b2:b1:d4:86:
f0:7e:ee:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org