Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NWsyOBF3v5qOczzRd11R-14Bhi8.roa
File: NWsyOBF3v5qOczzRd11R-14Bhi8.roa (raw, json)
Hash identifier: gl5eqeBhY7on8qGtKR+uAgA/v+6G1NgdztHiBnsrNdw=
Subject key identifier: 35:6B:32:38:11:77:BF:9A:8E:73:3C:D1:77:5D:51:FB:5E:01:86:2F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NWsyOBF3v5qOczzRd11R-14Bhi8.roa
Signing time: Thu 15 Sep 2022 02:45:13 +0000
ROA not before: Thu 15 Sep 2022 02:45:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.96.0/19 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=356B32381177BF9A8E733CD1775D51FB5E01862F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a8:23:b7:da:1c:e1:a7:33:a6:de:86:52:a1:
e5:38:f3:b5:fa:34:d0:8f:c4:49:e4:31:7a:1e:ef:
04:bb:dc:a9:3e:88:4f:c2:e0:48:2f:ef:af:9d:3b:
45:46:7a:5e:15:f4:e7:2f:41:5a:60:a9:27:6d:99:
cf:50:d7:0e:e8:ef:c3:2a:20:f5:c1:6d:96:c7:30:
b5:30:11:11:ce:83:56:62:19:84:6f:c4:e6:f0:e5:
8d:d9:7e:a5:f1:58:90:c8:86:9d:b7:80:84:8e:0a:
cc:d7:33:e4:89:82:94:a0:01:02:ee:c1:a5:7d:f7:
88:b7:f4:bf:16:fb:74:dc:bc:8e:a1:78:a3:c9:d8:
a4:01:db:a4:f7:6e:c8:44:75:34:5d:b7:46:48:c8:
36:89:ec:1c:89:bb:5e:4b:5e:27:c2:bc:46:ff:21:
33:7a:c3:bd:a3:64:26:2b:32:d8:0c:bd:71:79:61:
72:e0:a2:3a:33:35:8f:10:3d:9e:22:d8:f4:c4:05:
50:42:84:e2:2a:c7:6b:b5:82:d1:2c:4d:ff:0f:2a:
26:88:ee:07:d0:1d:81:4d:2b:f4:d2:76:a9:26:33:
a7:ae:7f:e8:45:97:43:f6:bc:1e:41:97:a8:36:c5:
03:fd:36:d1:9a:72:c8:1d:68:59:a9:cd:63:f4:a6:
e0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6B:32:38:11:77:BF:9A:8E:73:3C:D1:77:5D:51:FB:5E:01:86:2F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NWsyOBF3v5qOczzRd11R-14Bhi8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.96.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:84:99:0d:23:34:3b:2e:68:fd:ce:3a:64:f6:0d:e2:b4:55:
a2:b9:d4:c8:da:08:0b:a2:18:a1:2a:7b:ec:ca:03:00:e4:44:
2e:10:52:45:a4:e8:7e:91:cf:df:4b:1c:ab:68:8e:f6:8f:a1:
83:a8:d4:e0:45:ec:37:83:2c:94:4f:17:d8:18:e5:a1:3a:d0:
5d:81:c3:6e:a6:8c:1e:04:10:85:84:6c:5c:9a:1b:80:e5:9e:
33:eb:82:f9:f0:aa:f4:bc:17:56:ec:b0:43:82:5d:01:f8:47:
c7:59:0d:dc:67:f6:72:70:e1:67:87:dd:3b:da:93:ba:c5:ab:
50:a2:b1:ab:6b:66:1a:bb:d5:09:47:31:8f:a5:b0:4f:2f:be:
1a:38:2a:58:ea:59:bb:4c:37:3f:46:eb:be:de:32:2f:a4:28:
6e:94:26:72:c6:10:77:ea:3f:d6:06:15:97:ca:d1:83:01:86:
3a:5f:4c:fa:65:a1:93:f6:81:36:07:43:8b:e5:22:9f:c6:0c:
4e:c5:c0:b6:88:51:5b:bc:b4:67:3c:c3:9b:ee:f8:a3:38:44:
77:a6:ea:ab:f7:dc:19:04:c3:e9:4e:98:80:f5:cb:c4:1c:be:
f4:4a:52:b2:05:97:da:40:22:f5:c9:cb:b1:81:ec:44:70:e6:
17:0c:28:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org