Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MEZc9KsXTZrGPKAOgkjyrWSMAHg.roa
File: MEZc9KsXTZrGPKAOgkjyrWSMAHg.roa (raw, json)
Hash identifier: mMlpkriIS/VYeTYUWMgwnsrPANnd4Hgi8QHkuLT2Gkw=
Subject key identifier: 30:46:5C:F4:AB:17:4D:9A:C6:3C:A0:0E:82:48:F2:AD:64:8C:00:78
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22B9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MEZc9KsXTZrGPKAOgkjyrWSMAHg.roa
Signing time: Fri 25 Nov 2022 04:41:34 +0000
ROA not before: Fri 25 Nov 2022 04:41:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8889 (0x22b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=30465CF4AB174D9AC63CA00E8248F2AD648C0078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:2c:d4:a5:d3:de:c8:16:85:79:5e:a8:d7:
47:13:4f:1d:8e:67:08:30:35:e1:39:21:30:0d:bf:
79:a8:ff:20:f4:1c:6f:da:74:29:a3:86:8a:ad:b3:
52:4e:a0:2d:c4:6a:28:9b:9c:89:8d:39:7f:2c:80:
35:fc:cd:ea:63:2e:fb:87:aa:d7:ae:96:09:64:62:
8b:08:2d:4c:56:0c:0d:a7:2c:8d:54:42:81:3a:4f:
15:71:56:f6:39:bf:1c:11:3e:29:2b:41:5f:b9:72:
f1:a4:bb:6e:42:ee:15:26:af:61:9e:c7:38:6f:e7:
59:e0:1c:17:e4:80:0b:cc:6e:60:11:a8:02:d8:ef:
10:42:2b:dd:18:25:e0:6f:44:04:d1:c3:e7:46:6c:
df:b2:fb:e9:dd:28:87:c8:e8:c4:90:fc:8e:44:2d:
b0:ec:92:87:d8:7b:08:f6:bb:ec:1e:b2:28:38:9b:
0e:7b:85:12:1d:64:d3:f6:98:96:0b:dc:3f:4f:3a:
f5:18:3b:1d:1e:67:9b:c8:e7:9c:af:49:f4:a5:21:
70:4b:55:60:49:29:c9:a9:2f:bc:27:94:e6:f9:d1:
9e:d5:08:56:78:0b:00:d3:c8:f1:e8:1c:5b:09:38:
29:97:64:96:73:92:f5:e1:49:4f:c2:59:5c:1b:c7:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:46:5C:F4:AB:17:4D:9A:C6:3C:A0:0E:82:48:F2:AD:64:8C:00:78
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MEZc9KsXTZrGPKAOgkjyrWSMAHg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.244.0/22
Signature Algorithm: sha256WithRSAEncryption
54:e5:61:77:b8:b5:f5:0b:00:fe:87:d2:f3:b4:29:a0:00:f6:
75:ca:b5:cc:96:e2:c1:58:5d:46:a9:40:dd:db:a9:a0:8f:f0:
ab:88:d8:82:e1:41:bb:3a:76:bd:9e:57:ab:df:ff:17:38:f9:
59:dd:79:4c:37:eb:ef:21:44:38:0d:c4:53:59:bd:6f:80:00:
ae:36:9f:b8:7f:f0:f6:dc:42:e7:90:9a:41:6f:e7:b1:60:b5:
82:1d:ef:5d:8c:97:01:34:b7:2f:3a:23:ca:82:17:cd:4f:f7:
e7:65:6c:8a:be:53:45:92:8c:32:b1:7c:f4:cf:17:30:48:44:
61:06:ec:c6:24:92:cf:6e:c4:75:db:e1:1b:86:78:cb:2f:57:
62:d0:01:e5:89:40:64:b5:b7:3c:3a:08:42:45:28:c4:ed:ff:
a9:da:f4:e0:07:ed:55:dd:9f:30:20:4c:3c:c1:99:33:08:43:
e1:f0:fe:f4:6a:d5:3b:b7:26:c1:bc:49:e4:d0:f0:aa:c8:67:
33:db:61:7c:7c:e7:2b:74:d4:18:fc:c9:4f:e0:7e:b5:ad:77:
cd:c6:97:cb:cf:68:38:79:50:45:68:ce:38:f7:e1:4c:bd:53:
f7:8a:5e:47:f5:ed:b3:22:8b:10:96:59:bc:f4:65:62:ef:ea:
0b:40:dc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org