Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KlNdrya1e-CmLOajR0cPMVC8I44.roa
File: KlNdrya1e-CmLOajR0cPMVC8I44.roa (raw, json)
Hash identifier: 7j2IpqXFrpcBOcrMcCO5bksQb384YXki7q24DJFEChU=
Subject key identifier: 2A:53:5D:AF:26:B5:7B:E0:A6:2C:E6:A3:47:47:0F:31:50:BC:23:8E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C27
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KlNdrya1e-CmLOajR0cPMVC8I44.roa
Signing time: Wed 29 Sep 2021 02:47:24 +0000
ROA not before: Wed 29 Sep 2021 02:47:24 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7207 (0x1c27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:24 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2A535DAF26B57BE0A62CE6A347470F3150BC238E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:cf:05:0d:53:ac:5d:7e:3f:68:4a:a0:64:
38:f9:fe:5d:ae:4a:08:88:eb:44:fe:fe:89:80:0b:
1b:8a:44:84:38:fa:7c:bd:d7:a8:90:35:72:50:e2:
fd:0b:1c:5f:fc:94:29:44:0c:b5:3e:58:d4:b8:69:
fb:1e:4d:7b:f1:eb:78:eb:d2:a8:31:59:ff:60:3e:
64:50:05:ac:a2:b1:19:c2:45:6b:05:75:38:07:da:
ed:ab:ba:ae:4c:c4:e7:66:6b:c5:46:4a:31:b3:7f:
8c:48:f5:7d:0e:a7:6e:70:17:74:63:d5:6d:bf:03:
41:98:b9:d5:e5:4d:1f:c4:c3:1b:07:7c:ce:64:1a:
64:b9:6b:f8:3c:12:52:78:77:34:08:10:af:e7:34:
ee:46:b2:86:23:32:ab:86:bc:68:b3:d3:0e:1d:77:
f4:0b:7c:c9:f0:67:63:18:ad:1c:13:23:dc:8e:8d:
68:c2:d7:57:26:73:f6:3f:46:e3:a6:46:fb:bf:8d:
17:77:a0:8f:4d:80:c0:a0:0b:83:59:82:fc:17:88:
ab:d9:18:04:0a:69:be:cf:d3:e5:0d:70:0f:70:d7:
73:27:5c:67:0e:30:7f:11:b7:cb:7b:42:b8:7a:78:
41:f3:1e:25:8b:d2:5e:9a:c1:b8:f2:56:d4:d2:19:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:53:5D:AF:26:B5:7B:E0:A6:2C:E6:A3:47:47:0F:31:50:BC:23:8E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KlNdrya1e-CmLOajR0cPMVC8I44.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.192.0/22
Signature Algorithm: sha256WithRSAEncryption
50:67:28:b1:fb:88:c1:2b:8d:ee:9f:53:87:79:53:f2:e2:13:
7d:f3:80:55:14:c5:96:50:45:5f:e8:86:9e:f5:b0:8b:63:fe:
fd:0a:06:08:1b:83:3e:fa:f0:57:3d:cd:3c:6d:27:f1:37:57:
ed:b8:b1:fa:df:11:c3:18:99:dd:bd:05:7d:e1:af:c7:d9:46:
78:a7:9b:90:0f:d8:48:be:5c:fc:b4:e5:ca:22:5f:2c:37:a1:
d9:86:37:54:3f:18:87:7a:3d:86:91:9e:15:d2:74:e9:f0:72:
ff:37:a5:52:ab:b2:48:fa:a7:6c:3b:5b:af:00:aa:d4:c2:b2:
04:bb:23:ea:22:51:34:16:b5:b6:de:f4:ea:4c:88:21:9f:58:
2c:41:b2:b4:69:bf:29:21:3c:9b:b9:52:d2:21:92:52:36:23:
15:15:50:06:05:6e:c6:ca:e6:f1:46:f1:76:4f:d2:88:e3:0b:
b7:8c:cd:0c:8b:16:96:a5:e5:e7:8f:33:65:0d:01:ce:22:5f:
a3:1e:4e:8c:f8:77:6c:91:02:2c:ed:2b:2a:63:7a:8f:fd:8e:
b5:71:d3:fd:bf:1e:ad:01:17:68:0f:65:26:fe:9c:d1:44:f2:
82:4d:36:3d:f1:58:fa:e5:b1:3e:ab:df:f2:3c:a7:10:7f:8d:
b8:b6:4e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:30 2025 by rpki-client