Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OisLScLl2PEzBXwn8lbnRDR7QHg.roa
File: OisLScLl2PEzBXwn8lbnRDR7QHg.roa (raw, json)
Hash identifier: Rjrfelj3GTvc89a+AcqiflSQKgnr9Kan1PPTgJQC/rE=
Subject key identifier: 3A:2B:0B:49:C2:E5:D8:F1:33:05:7C:27:F2:56:E7:44:34:7B:40:78
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20B4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OisLScLl2PEzBXwn8lbnRDR7QHg.roa
Signing time: Fri 25 Nov 2022 04:39:01 +0000
ROA not before: Fri 25 Nov 2022 04:39:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8372 (0x20b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3A2B0B49C2E5D8F133057C27F256E744347B4078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:05:b2:c5:af:4f:34:6d:32:72:47:14:41:6d:
e1:15:f9:a2:c8:a3:50:91:8c:93:af:85:c7:fe:92:
93:f8:bf:f7:ab:db:79:c0:25:9a:ba:9e:ff:fe:f2:
a6:a6:5f:9a:28:58:f0:85:42:65:99:e1:e8:c1:82:
dd:6a:72:ee:fb:b7:24:66:b6:0d:30:64:b6:bd:70:
2f:51:f7:88:b6:25:17:15:4f:fa:72:07:aa:ca:d3:
97:7b:40:41:e7:19:65:f8:ee:91:7e:71:91:6d:76:
15:c5:21:92:ee:2c:e9:ae:f5:a4:d6:b6:39:a0:40:
1d:cf:18:38:58:2b:54:d5:9b:26:20:33:f0:3f:86:
d3:1b:4c:bb:7c:71:3d:85:52:d3:ae:ba:12:45:9d:
17:17:da:11:7c:fb:98:62:ca:30:49:f5:5e:b8:cd:
60:2e:80:51:e2:f2:21:a7:6c:5e:d4:63:c4:d4:2a:
f7:c8:54:98:52:b0:82:8f:af:79:fc:4e:1a:eb:a7:
1c:ce:63:df:d3:0a:78:6a:9b:50:be:67:ce:62:94:
37:90:8c:23:85:a4:79:b9:73:6e:70:a9:dc:f8:ed:
24:f1:fc:e5:c4:8d:3c:52:9c:a3:e8:2f:69:8c:be:
e2:47:2d:c9:36:4d:f8:0c:2e:33:9a:dc:8b:86:2e:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2B:0B:49:C2:E5:D8:F1:33:05:7C:27:F2:56:E7:44:34:7B:40:78
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OisLScLl2PEzBXwn8lbnRDR7QHg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.20.0/22
Signature Algorithm: sha256WithRSAEncryption
19:95:71:5b:2e:e2:15:61:cd:e8:a3:27:d4:03:9c:42:0f:02:
c8:de:1c:b6:4d:ae:60:66:24:38:28:7d:7f:c3:26:ae:eb:21:
db:11:7f:94:36:b5:a0:53:ae:2a:53:7f:29:47:99:76:87:45:
2b:2d:0f:89:ed:c2:a0:09:e1:9c:e7:d4:cc:5c:67:0b:00:e9:
78:3a:22:a9:0e:01:01:07:10:af:d5:a6:2e:a1:67:4f:81:93:
cc:9c:7a:d0:bb:26:4f:aa:eb:34:90:01:e7:2b:51:14:85:58:
75:0d:15:c0:ed:2c:af:e8:da:f3:4d:80:a5:0f:56:16:19:a4:
13:3a:f7:2d:b6:24:e6:2c:08:a2:02:09:e4:f3:94:e4:a6:2f:
fd:12:39:bb:2d:a6:b6:a6:cf:44:30:42:a9:d9:43:15:7b:d1:
82:6f:9f:13:f2:88:3e:a3:ac:b0:00:a8:69:d7:86:c7:22:73:
6e:77:03:f6:01:0c:01:ce:7c:ca:f5:a6:e5:2a:8f:d8:94:b5:
46:92:3a:1f:dd:ee:cb:e4:54:3a:b7:80:06:c7:e1:6f:ec:92:
60:8a:91:b6:86:2b:82:54:52:ea:a1:79:65:eb:ad:d0:bd:d5:
4d:ea:35:49:85:ac:91:53:ea:b6:a4:a8:b8:d3:39:b8:cb:87:
7e:eb:af:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:30 2024 by rpki-client on console-ams.rpki-client.org