Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MM_JdGcF0IIh8_DW5PRMvOFi50c.roa
File: MM_JdGcF0IIh8_DW5PRMvOFi50c.roa (raw, json)
Hash identifier: l5hAhuYc7aOwnHrNI31ScL33TlEjT6qXJCp2R8bSBvc=
Subject key identifier: 30:CF:C9:74:67:05:D0:82:21:F3:F0:D6:E4:F4:4C:BC:E1:62:E7:47
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1EBA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MM_JdGcF0IIh8_DW5PRMvOFi50c.roa
Signing time: Wed 04 May 2022 08:00:04 +0000
ROA not before: Wed 04 May 2022 08:00:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 118.232.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7866 (0x1eba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: May 4 08:00:04 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=30CFC9746705D08221F3F0D6E4F44CBCE162E747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:e6:0b:bd:ca:62:1f:d4:6d:a4:ca:69:79:
62:8e:9c:10:bc:f5:ea:46:b4:5e:11:7b:28:7a:05:
41:b3:d0:c0:b4:7e:eb:b6:ce:f3:a7:17:4f:4f:6f:
05:2a:10:14:e8:9b:19:6a:7d:f9:70:d4:a6:8a:91:
4d:c6:79:7f:46:fb:ef:be:04:70:ed:28:72:50:fb:
f3:b0:69:57:52:c0:83:b6:bb:7f:09:d7:21:31:e4:
56:1c:c6:fc:64:31:16:9f:4e:1d:4a:1d:28:e8:94:
45:4d:57:43:31:c5:40:f0:5c:ec:8f:89:0b:89:86:
d8:53:02:d2:1d:6b:1d:a3:d4:a2:fa:73:5d:e6:be:
3c:75:91:b9:4f:a1:1a:0b:72:41:3d:6b:26:6d:7e:
77:61:0e:29:b2:66:9a:8f:23:4c:5d:a8:9d:b9:8b:
14:54:e1:0f:10:a4:88:d4:c6:87:52:d2:f9:d9:e3:
e6:a7:c1:8f:49:89:7e:65:23:93:54:66:9c:a4:01:
19:10:12:d2:09:c3:35:4f:cd:37:ef:7c:ee:8f:7b:
a2:06:6b:86:76:07:94:f1:ef:d6:26:36:3e:8b:3b:
f9:32:b6:c8:98:a1:90:3c:e9:47:ca:8b:dc:2d:d1:
7a:2e:e8:ff:dd:a4:05:a0:1f:a0:19:40:cb:e2:6f:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CF:C9:74:67:05:D0:82:21:F3:F0:D6:E4:F4:4C:BC:E1:62:E7:47
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MM_JdGcF0IIh8_DW5PRMvOFi50c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.100.0/22
Signature Algorithm: sha256WithRSAEncryption
64:99:b3:2a:b1:50:8e:0a:3a:06:00:3f:ad:95:34:b5:23:cc:
f2:57:a9:8a:b4:84:1f:ee:ca:45:d0:bd:64:cf:38:a1:c5:3a:
7b:9f:ce:77:5e:87:07:ec:e8:83:d7:57:48:be:b0:cd:30:7f:
6e:c0:f1:ae:bb:8c:ee:64:87:30:0a:67:de:55:24:b3:0c:b0:
39:b9:e4:b0:93:23:e2:ac:16:46:05:1d:8e:0e:7b:07:90:39:
ad:27:61:b7:e0:0a:6b:98:85:b9:e5:b7:e1:66:4a:ca:b4:4b:
ab:c4:38:fa:28:1a:63:64:c2:ed:89:ef:85:00:74:97:d1:a3:
96:84:37:3c:9e:bc:85:65:61:2d:18:17:9a:f5:05:05:ae:c8:
7b:67:f8:da:42:bf:71:8f:69:82:c0:57:1a:a6:2a:79:77:3f:
f8:79:38:2e:58:4d:40:89:e9:2e:42:66:04:7b:f5:e2:32:dd:
be:b1:63:ea:0c:e7:02:62:3f:de:f2:6c:5f:c2:ce:8c:99:ad:
5c:db:13:1b:a1:0a:20:5f:21:34:98:a4:60:74:f5:09:72:09:
a3:36:99:e4:96:f5:7f:61:4b:dd:e2:9c:60:51:36:cc:ad:36:
3e:48:fa:40:03:29:57:06:10:aa:d2:a6:5a:73:ae:d6:54:7a:
e2:86:f3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:27 2023 by rpki-client on console-fra.rpki-client.org