Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mh9A4pc1nKus-seYbBJyQy1LAoQ.roa
File: Mh9A4pc1nKus-seYbBJyQy1LAoQ.roa (raw, json)
Hash identifier: EFBHjeF+AfV7j/Nhdo9GPHCJinV2BRoNh7wql0QmoEY=
Subject key identifier: 32:1F:40:E2:97:35:9C:AB:AC:FA:C7:98:6C:12:72:43:2D:4B:02:84
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mh9A4pc1nKus-seYbBJyQy1LAoQ.roa
Signing time: Thu 15 Sep 2022 02:44:53 +0000
ROA not before: Thu 15 Sep 2022 02:44:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=321F40E297359CABACFAC7986C1272432D4B0284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:4a:bc:f5:05:ce:e1:a1:ed:4b:62:53:d0:
2b:82:c8:5e:4a:5e:0c:de:97:79:d2:eb:f6:ac:24:
81:74:3a:30:77:ac:ef:f0:dc:22:71:c3:ac:bd:85:
99:fc:e2:fc:85:4a:09:dc:1b:72:31:ec:58:33:d8:
63:1e:84:75:fc:e7:a8:04:c0:5b:86:f6:f8:50:e9:
89:b8:81:72:2c:53:a4:29:01:f5:30:d5:a1:e1:5b:
34:cd:07:66:33:68:ff:10:29:9d:ac:68:5a:53:24:
50:e3:fd:e2:04:4a:97:cd:9d:4a:57:eb:a8:3a:fd:
93:4b:67:dd:28:e5:d8:1b:af:80:14:36:a5:7a:c2:
5d:a5:76:15:e1:98:e7:b5:1f:97:1e:f2:f3:ce:78:
98:6f:80:c6:fb:f0:f9:2a:4c:65:9f:aa:83:cd:f2:
83:20:14:45:9f:8f:38:86:3a:72:d8:ed:c6:ec:5d:
da:46:3e:a6:5b:f8:d3:dc:2d:58:2b:57:e4:29:66:
ea:8c:50:35:6a:b6:3b:94:6d:fe:47:cb:b5:88:72:
08:cf:41:1c:16:67:5b:2e:92:82:e5:75:55:81:98:
90:ff:58:41:4a:93:32:f7:0a:f5:d4:89:28:12:cd:
1f:07:aa:b3:98:cb:41:c3:d8:20:35:71:34:4c:37:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1F:40:E2:97:35:9C:AB:AC:FA:C7:98:6C:12:72:43:2D:4B:02:84
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mh9A4pc1nKus-seYbBJyQy1LAoQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.84.0/22
Signature Algorithm: sha256WithRSAEncryption
61:50:40:2f:85:18:44:db:d8:f2:f6:ad:53:e7:91:24:ee:a3:
31:43:07:9d:e4:94:10:8d:fe:8f:e4:5d:51:6f:5a:15:a4:1a:
12:b9:5a:9a:ea:6e:8d:bf:d6:b8:30:07:cf:99:2a:95:d3:20:
53:75:ab:78:41:04:41:00:ac:b3:2a:a3:45:61:fb:1e:41:39:
26:a7:42:66:27:a6:b1:9d:cc:15:40:56:7a:cc:71:2f:eb:04:
c3:6d:45:6e:67:eb:87:04:b3:e7:80:23:82:2d:22:30:97:4c:
f2:ce:80:03:c1:0d:47:82:74:c1:c2:48:45:67:31:8e:2e:4c:
4f:0e:94:47:de:15:ed:84:33:52:c7:ba:1c:9a:ba:78:ed:89:
8e:7b:ad:ec:c6:f6:53:7f:94:1d:93:6c:d4:e8:84:dd:1a:a8:
36:d9:2c:a6:d6:31:87:7f:08:9d:57:41:a4:36:c3:bf:f9:e8:
8e:b8:f1:a4:71:9c:7d:b9:e5:6f:14:f4:34:4b:81:73:7a:04:
05:3a:3e:2d:84:9a:6d:5a:55:1b:98:95:b4:0b:63:6c:f6:26:
3e:95:40:19:ec:23:c4:90:f9:57:dd:a0:59:a4:c0:42:9f:ca:
c1:ec:05:fb:0f:ca:e4:83:8a:f9:24:2d:14:87:68:19:50:ea:
2f:5c:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org