Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NcQmWzBhl-sQQeQX2t6-J5virSM.roa
File: NcQmWzBhl-sQQeQX2t6-J5virSM.roa (raw, json)
Hash identifier: 7tsTvz2VkVTwPQkeO6ED9VpAexBLUxeg1AwliHuPu7s=
Subject key identifier: 35:C4:26:5B:30:61:97:EB:10:41:E4:17:DA:DE:BE:27:9B:E2:AD:23
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 208B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NcQmWzBhl-sQQeQX2t6-J5virSM.roa
Signing time: Fri 25 Nov 2022 04:38:51 +0000
ROA not before: Fri 25 Nov 2022 04:38:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.96.0/19 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8331 (0x208b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=35C4265B306197EB1041E417DADEBE279BE2AD23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:53:8a:99:2e:29:61:0e:1e:68:b0:b7:fb:
e3:33:0c:4e:69:8c:6d:f7:be:58:c2:67:7b:bb:bd:
b8:91:ee:1c:b2:58:0e:a5:9e:71:1f:65:d5:3d:a1:
ce:08:75:3a:83:4b:8f:6b:7e:17:b9:01:87:e8:bf:
b7:f1:6f:86:c2:47:54:8d:85:b5:58:d0:0c:c9:38:
3b:e8:07:1a:d5:63:27:f1:96:50:d5:db:c8:d9:ab:
c8:cc:0f:ff:ba:6e:4e:c6:74:99:d3:bd:32:29:51:
7a:cb:a2:32:70:05:de:02:e6:7e:47:6c:e7:05:fb:
ed:f1:a6:63:eb:cd:3b:6d:e2:de:49:cf:4b:9f:1b:
4c:a1:64:98:1f:c1:44:5a:56:b5:6e:73:47:56:9e:
72:0b:0e:b4:ed:9a:d8:00:33:0e:8f:ef:aa:09:40:
52:7e:d5:db:ce:d7:77:df:f7:2d:f6:28:22:5f:9d:
39:c2:2c:f5:a7:36:6a:6b:82:cb:0c:4b:c9:b8:5b:
25:bd:4d:09:ec:ee:62:6d:37:62:93:78:99:61:09:
eb:b4:45:52:08:78:d3:8d:25:12:6e:65:24:21:e8:
ed:ec:98:c9:f9:30:d0:55:9c:8a:0b:a6:5f:b4:3c:
42:1d:0e:0c:af:f1:a1:cd:59:be:39:a9:13:44:cf:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C4:26:5B:30:61:97:EB:10:41:E4:17:DA:DE:BE:27:9B:E2:AD:23
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NcQmWzBhl-sQQeQX2t6-J5virSM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.96.0/19
Signature Algorithm: sha256WithRSAEncryption
81:f7:cc:16:fb:43:d2:18:23:c6:af:c1:82:d7:85:71:4c:2c:
55:15:4e:53:9e:6a:55:70:50:1e:fe:07:6f:34:55:bc:81:22:
6e:dd:87:bc:8b:0c:9e:45:49:b5:7d:a1:61:4f:aa:71:58:1d:
ed:38:f4:0d:cd:1d:de:5a:67:41:77:88:53:12:6b:4a:36:d6:
82:62:56:c9:8c:25:51:86:ca:f1:79:b3:15:ae:c0:ed:03:c7:
ab:64:dd:fe:18:08:8a:4a:10:10:a3:f9:8e:4e:fa:e1:f1:d5:
77:7f:6d:c4:f3:04:ff:a4:89:bd:0f:cf:1e:d1:52:84:0a:39:
c5:5d:f5:7b:07:a1:63:d1:1f:de:0f:c4:b1:7a:30:07:49:b4:
7c:78:1e:b2:4b:72:46:65:49:07:76:60:ed:9c:6e:d7:9a:25:
28:8a:78:69:93:c9:7d:3e:f9:1e:28:79:ca:4f:91:f4:1b:bf:
14:9d:a2:73:c4:7c:74:b0:02:3f:b9:1d:83:83:0b:66:44:1e:
c0:d2:fc:4d:e1:a0:ce:72:b6:4c:da:7e:ef:c9:1c:94:38:72:
f0:40:67:c5:6e:2a:f5:ac:49:47:b0:8e:14:cb:f7:92:68:aa:
c8:0d:ea:76:c6:ae:d4:b6:91:01:c0:d2:9f:08:37:ab:61:7f:
18:08:ae:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org