Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RKFQZfbeYfXVKwm9UgMCT5oXcXg.roa
File: RKFQZfbeYfXVKwm9UgMCT5oXcXg.roa (raw, json)
Hash identifier: LayKAHagqunXLlaGSCbqOhFPa0yTltqwyy9DwjpGGEM=
Subject key identifier: 44:A1:50:65:F6:DE:61:F5:D5:2B:09:BD:52:03:02:4F:9A:17:71:78
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 216A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RKFQZfbeYfXVKwm9UgMCT5oXcXg.roa
Signing time: Fri 25 Nov 2022 04:39:54 +0000
ROA not before: Fri 25 Nov 2022 04:39:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8554 (0x216a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=44A15065F6DE61F5D52B09BD5203024F9A177178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b7:54:21:a7:ce:92:28:38:9d:f5:c6:ac:00:
d9:c7:35:01:e6:be:86:6a:10:1c:16:bf:b8:31:11:
c4:c9:50:56:99:a3:62:98:3b:ec:df:21:4f:36:db:
d3:ed:14:02:b8:d3:9f:d9:15:16:55:e8:34:f9:d3:
40:56:24:da:c2:bf:e7:62:fb:b2:1a:63:85:fa:9b:
68:32:e8:42:4d:51:5c:2c:36:6f:c2:4b:5b:4e:51:
4a:81:7e:96:d3:f9:08:02:c5:77:23:23:3f:c2:d1:
9a:f5:10:4e:2a:02:31:cc:9e:cd:e5:63:e7:57:99:
25:fc:23:16:49:3b:60:66:cd:d4:ca:62:5f:52:02:
ae:f4:44:31:3f:ae:7b:d8:5e:55:25:73:cf:c0:03:
ce:40:05:c4:d4:88:85:2f:94:fe:e7:ab:9c:4a:1d:
11:4c:f1:de:7a:81:56:4f:1b:67:e8:e3:5f:8f:e8:
f6:45:46:de:2c:f7:00:30:4f:07:dc:66:e6:7a:df:
4d:9b:df:db:a2:ff:cd:f9:dc:35:d2:71:ee:3d:a9:
3d:b8:be:ee:1c:f5:ed:2d:a0:97:c1:8d:4f:32:a2:
ff:21:b9:fc:8d:16:9d:bd:77:5b:73:08:20:d0:5e:
28:fb:27:b6:6a:e5:78:39:be:44:ba:58:5e:e3:68:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A1:50:65:F6:DE:61:F5:D5:2B:09:BD:52:03:02:4F:9A:17:71:78
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RKFQZfbeYfXVKwm9UgMCT5oXcXg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.224.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:45:b9:9b:4b:cf:28:0b:16:17:00:4b:57:83:99:74:6d:78:
b8:e8:35:5f:b0:33:7d:35:1f:6c:a3:5c:18:4d:0b:57:28:34:
85:4a:ba:17:56:27:fb:cf:99:61:d9:54:29:0a:12:6c:9c:93:
3a:be:38:ce:04:c4:d1:eb:18:cb:a6:27:af:11:5e:97:84:a1:
e3:b4:b2:cd:7b:fe:b1:24:d1:fb:34:3a:11:df:4f:bf:8d:30:
2f:3a:f1:4a:09:4a:22:7f:bf:dc:92:5e:64:e7:41:51:dd:e4:
9d:4c:6b:e5:f0:16:f5:a8:be:bd:e9:3d:dc:47:73:b5:80:5f:
bc:8f:6f:75:5e:08:d5:a5:bf:66:45:ff:2d:9c:92:01:cf:ac:
b2:1e:ad:85:c5:85:c9:f7:ed:16:ea:e8:84:2a:a8:8c:04:ea:
96:31:6a:51:7c:40:99:0c:fc:1e:63:52:70:e1:b4:43:14:f3:
70:fa:dd:dc:ca:86:3c:0f:71:0a:02:e9:4c:d4:b3:37:0d:9e:
a2:84:99:96:8b:ea:e1:30:2b:98:07:1f:7c:38:06:61:66:49:
ba:57:00:f6:19:01:73:d5:54:71:01:f2:8a:14:9a:5d:47:cb:
9c:7a:2a:8e:fe:37:4e:3e:bb:f4:0a:5c:d0:50:de:6a:2c:e7:
71:65:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org