Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N3xPlg0qDimAxndhIF3XIzuoDLk.roa
File: N3xPlg0qDimAxndhIF3XIzuoDLk.roa (raw, json)
Hash identifier: MkABeebdD5A20kK6+dr+XidGrdF7EwndaA2BBDjdtmY=
Subject key identifier: 37:7C:4F:96:0D:2A:0E:29:80:C6:77:61:20:5D:D7:23:3B:A8:0C:B9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N3xPlg0qDimAxndhIF3XIzuoDLk.roa
Signing time: Thu 15 Sep 2022 02:45:25 +0000
ROA not before: Thu 15 Sep 2022 02:45:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=377C4F960D2A0E2980C67761205DD7233BA80CB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:29:7e:47:65:0b:f9:cb:2f:92:0f:4d:f8:
49:ca:a1:5d:19:c3:5f:11:42:d6:c3:42:b0:7b:12:
ae:6d:e5:b7:84:09:0e:95:cd:ae:8d:e7:52:50:e0:
1d:a4:57:1e:91:ed:05:8b:76:df:99:aa:1c:43:9c:
45:bd:2b:20:bc:4c:d3:e3:3b:48:8e:1b:a7:a7:fe:
b0:4d:11:ab:16:5c:1d:7d:3a:48:85:f1:f2:36:e6:
e9:47:8b:1b:0d:31:57:a2:f0:d2:36:8d:97:73:ef:
8e:36:a6:24:5c:94:9e:19:a2:f9:c3:7c:fc:86:93:
2d:92:d3:e9:a4:2f:e9:5e:2e:ae:45:f9:9d:2b:21:
fc:8a:43:d8:eb:cd:a8:56:f3:49:9a:43:4f:7b:12:
7d:44:7f:16:96:95:9c:68:bd:0b:f5:3a:23:5d:8a:
af:16:67:af:21:6d:ff:ba:d4:ff:17:cd:e8:e0:12:
7f:f9:b5:59:0b:14:7f:85:83:f2:f7:5d:99:88:08:
88:f4:d1:ea:c3:8e:81:ff:ce:1a:90:8e:57:9c:c5:
f9:65:a8:cd:98:42:ea:11:30:8c:0f:98:1f:cc:9b:
a8:00:f0:91:6e:26:36:6b:cc:81:92:bb:1d:a0:2b:
34:bd:eb:30:9b:a0:80:81:9d:15:b5:5b:cc:88:83:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7C:4F:96:0D:2A:0E:29:80:C6:77:61:20:5D:D7:23:3B:A8:0C:B9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N3xPlg0qDimAxndhIF3XIzuoDLk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.80.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:ac:cd:66:61:b3:44:92:51:85:94:55:27:5a:07:21:13:0c:
d2:24:4e:1b:e2:bd:30:33:8d:79:26:53:09:ee:bc:1e:3f:c3:
e7:b4:75:9a:58:f4:0e:0c:76:b9:cb:ab:6a:d3:dd:1b:4e:34:
ae:08:97:87:7f:34:4c:12:fa:c7:02:72:eb:90:4f:5e:c5:be:
de:66:c7:40:5a:90:e1:03:b2:e1:69:fa:50:e3:79:e8:a0:3c:
fe:3a:23:05:ed:df:ee:2d:85:5d:29:ab:a5:96:c6:ee:30:6d:
91:59:70:0b:ef:1a:82:9c:c9:91:ef:cd:b3:d7:5a:1c:68:48:
9a:2c:e6:50:8f:a8:8a:ed:e8:35:cc:3f:2e:f9:31:d2:c1:8a:
67:15:81:b6:6a:6b:33:27:d9:22:8d:60:b7:7d:59:02:64:f3:
72:0e:ad:e6:54:3d:2b:7e:a5:79:c2:c1:2d:02:83:c3:32:d1:
ce:b8:6b:c3:4d:43:3b:c3:86:3c:c4:1c:60:f8:14:3f:fb:38:
6b:25:c6:d0:db:41:03:1c:75:12:2d:56:52:65:ec:af:8d:f1:
11:67:b8:e7:ea:df:bb:5e:7b:f5:b1:54:d4:1b:28:92:d9:a3:
77:c2:d1:9e:db:61:29:bf:b2:d6:7c:fe:9b:c9:27:41:bb:4b:
bc:fe:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org