Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PeQpjxmaC6d8fTd-hyAG_6WTXk4.roa
File: PeQpjxmaC6d8fTd-hyAG_6WTXk4.roa (raw, json)
Hash identifier: FbTusxLCOjE5jlH24Cc5YK5VY9bDO1PlfGxMz7rMaLU=
Subject key identifier: 3D:E4:29:8F:19:9A:0B:A7:7C:7D:37:7E:87:20:06:FF:A5:93:5E:4E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E88
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PeQpjxmaC6d8fTd-hyAG_6WTXk4.roa
Signing time: Tue 29 Sep 2020 09:55:50 +0000
ROA not before: Tue 29 Sep 2020 09:55:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3720 (0xe88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:50 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3DE4298F199A0BA77C7D377E872006FFA5935E4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:22:9d:8f:f3:2c:6f:4d:42:05:25:05:a9:47:
2c:99:b3:99:3c:83:87:f0:da:10:1e:88:35:70:5a:
bc:09:44:ce:55:76:76:7a:fe:09:65:00:82:34:38:
f5:7f:7e:24:fc:ce:d3:05:3f:6e:d1:eb:da:e2:cc:
b1:fb:62:30:ff:14:63:24:3d:19:32:3f:1d:03:44:
9f:ba:31:67:6f:85:fd:d8:2c:75:f7:7d:cf:75:71:
01:90:7d:56:62:6d:46:1a:33:c5:6c:1b:a7:1f:78:
97:31:fd:0d:1a:c4:d9:40:59:27:bd:0a:46:dc:8f:
22:1c:90:9b:fd:f0:4f:b7:89:b9:d8:5b:8e:d2:90:
9d:1f:94:cf:a8:f7:90:56:ae:35:43:32:36:89:d2:
e7:ab:70:10:5f:14:df:48:63:76:47:10:0b:0c:4a:
0d:44:cc:b9:5e:f8:1a:40:54:2a:b7:92:fb:e4:91:
a0:15:3f:89:c0:39:92:0d:26:a0:ac:50:2f:57:0a:
fb:6b:87:e0:1b:01:c1:f2:0e:23:96:3d:5a:ab:39:
df:73:04:f8:9e:ac:48:46:11:a1:3d:fe:2e:bf:8d:
4a:e3:66:0f:be:0c:cf:8f:45:f8:13:e0:8e:b2:a8:
34:cd:a5:9e:4b:9e:80:52:e6:64:a4:0d:5b:57:65:
76:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E4:29:8F:19:9A:0B:A7:7C:7D:37:7E:87:20:06:FF:A5:93:5E:4E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PeQpjxmaC6d8fTd-hyAG_6WTXk4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.116.0/22
Signature Algorithm: sha256WithRSAEncryption
34:8c:84:88:74:81:13:c5:9b:92:2d:0f:ce:5e:31:7a:f1:74:
7c:b5:9c:81:2a:c1:b1:47:df:ef:ba:f4:54:b1:98:ba:41:15:
c9:77:e6:b5:b5:96:3c:5d:76:5f:39:9d:ba:d7:96:28:af:0c:
f6:46:0c:a5:90:33:86:38:83:c4:f5:be:28:3c:a5:44:e1:d7:
fc:4d:a7:5c:40:2a:9f:7a:ba:bb:53:28:f8:27:69:39:ef:27:
ee:31:17:7c:82:0c:58:32:20:fb:6e:95:9f:03:be:c5:60:05:
ec:b2:10:df:1f:bb:31:15:48:c6:4f:dd:69:37:67:a0:97:fb:
7b:9e:64:34:7d:cd:40:55:d1:d1:71:60:e5:41:6e:93:49:5d:
42:48:1a:c3:b4:f3:6e:bd:07:a1:86:ba:4e:8e:71:a1:8a:03:
8f:f1:fe:bf:be:2f:38:22:51:07:67:ff:2f:e8:6d:0f:93:cf:
9b:a9:da:a6:f9:32:9c:dd:9b:00:0a:50:eb:e8:5a:b3:76:fc:
71:e7:90:d6:dc:79:b8:3b:dc:35:a8:49:16:fc:62:d5:77:52:
e2:ea:c1:a7:69:56:c6:08:a2:91:77:eb:7c:dc:29:b9:8b:2e:
c5:54:19:a2:1c:00:cb:b8:05:f8:de:5f:98:76:01:7b:d6:4a:
30:f1:30:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:52 2025 by rpki-client