Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NWcBonqawXkGkGk6JyOy6laZEHY.roa
File: NWcBonqawXkGkGk6JyOy6laZEHY.roa (raw, json)
Hash identifier: px2vukmbBSJlCP0tvCaLyX9rMFwc0NCpaJlw/pf1TqQ=
Subject key identifier: 35:67:01:A2:7A:9A:C1:79:06:90:69:3A:27:23:B2:EA:56:99:10:76
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NWcBonqawXkGkGk6JyOy6laZEHY.roa
Signing time: Thu 15 Sep 2022 02:53:51 +0000
ROA not before: Thu 15 Sep 2022 02:53:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 45.64.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=356701A27A9AC1790690693A2723B2EA56991076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7e:01:9b:f1:f5:73:ff:d3:39:b1:e8:aa:8a:
4d:68:86:30:59:65:28:5c:20:17:94:73:32:cc:85:
b6:1d:2a:97:ad:cc:6d:22:06:de:78:a6:c7:59:33:
65:85:00:50:9b:f8:bc:79:35:cb:5b:bb:33:7e:67:
08:6e:7d:c8:c4:70:12:26:76:25:a7:45:94:65:c0:
5a:6b:f1:69:a8:ad:43:98:f9:12:8d:ec:aa:f9:a5:
e9:1d:b7:5c:fd:1f:a6:9f:57:26:80:cf:ad:18:46:
89:5e:d1:91:8d:12:09:53:69:b3:35:9d:bc:50:05:
ce:5f:e3:43:46:c0:98:bf:b6:50:0f:b3:ec:e9:eb:
06:46:7a:a5:4d:76:4e:fd:5e:cf:b3:62:48:1c:7f:
82:c0:27:66:76:97:0c:42:ec:70:a9:ab:e5:6f:d7:
81:92:1d:eb:69:b9:54:c8:dc:6b:1d:b8:48:5d:1b:
70:bf:99:b6:98:ba:c0:92:a8:f2:93:c5:44:3f:3e:
73:07:eb:d9:0c:74:f5:e5:70:02:04:30:4b:f7:28:
51:71:a4:cc:51:8e:e2:6a:b1:3e:fe:44:8d:c4:15:
37:b8:45:4f:35:36:91:72:8d:1f:31:f5:79:65:e6:
96:59:79:ff:78:68:9f:f8:70:82:bd:80:ba:b1:22:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:67:01:A2:7A:9A:C1:79:06:90:69:3A:27:23:B2:EA:56:99:10:76
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NWcBonqawXkGkGk6JyOy6laZEHY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.29.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:fb:73:3b:ed:c5:6b:65:09:00:3a:08:21:76:c6:9b:6c:04:
10:00:7b:e4:63:69:27:be:b0:c9:2b:7c:bb:9c:83:47:ab:3a:
2b:6e:76:61:b9:e8:52:12:6f:e7:56:18:85:1d:cb:92:69:e0:
48:2a:aa:f8:65:84:f2:57:ec:d2:29:a7:8a:cd:f4:2c:5c:49:
61:5a:2f:4f:7d:8c:77:0e:1c:09:3f:30:8e:5a:f2:b9:90:d7:
db:66:aa:46:45:d7:d4:c6:3e:3c:cc:99:ff:73:21:02:da:84:
25:37:4b:43:b5:0f:c9:08:17:1d:ad:f9:99:a8:46:ff:67:da:
81:a8:89:41:79:d7:92:ea:9e:1e:76:90:a6:49:34:83:a8:4f:
51:98:da:6f:9c:2e:c7:2a:88:e6:37:d5:81:4f:18:27:3b:d1:
b6:2e:17:61:b4:34:81:77:2e:3e:f2:c7:72:7c:d3:40:c7:89:
82:ab:be:c0:ef:fe:45:4b:6a:ac:20:51:cb:45:12:10:d3:9d:
5c:27:6f:13:60:d0:8f:63:86:d0:f2:3e:ea:7f:8a:4e:31:0a:
47:a7:50:d9:11:19:73:b6:7d:82:d2:6d:17:05:d8:c3:18:2f:
2c:1f:1b:15:d3:66:81:74:76:18:03:bf:2d:ce:9e:8b:0a:76:
1c:e3:97:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org