Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RVMQuJ-IsASqGmKuxAlSoZY4LRg.roa
File: RVMQuJ-IsASqGmKuxAlSoZY4LRg.roa (raw, json)
Hash identifier: N/0Qjm9WGUQQVwDfezWuB0J8dzy7E+xRo9uxVGRZ2/k=
Subject key identifier: 45:53:10:B8:9F:88:B0:04:AA:1A:62:AE:C4:09:52:A1:96:38:2D:18
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RVMQuJ-IsASqGmKuxAlSoZY4LRg.roa
Signing time: Thu 15 Sep 2022 02:52:34 +0000
ROA not before: Thu 15 Sep 2022 02:52:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=455310B89F88B004AA1A62AEC40952A196382D18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:03:92:73:b2:ee:59:78:de:c6:9d:79:dd:5d:
a0:9b:ab:23:88:44:b9:df:5f:4f:36:41:34:ee:2b:
88:c4:1d:ff:67:9d:70:c5:d7:0d:f6:a5:80:e3:94:
b7:ae:57:3a:f4:a0:37:50:97:d3:ad:a5:04:35:73:
94:7a:32:95:37:a7:6f:56:55:5b:4b:1b:96:98:43:
00:19:00:57:b2:e8:66:52:ca:2a:28:02:a9:3b:58:
3f:50:f7:3f:b9:fc:21:0a:9f:2b:c6:b4:b4:1a:b1:
8b:cc:64:48:fe:05:1d:2d:bd:45:68:de:26:f2:d2:
cc:e6:93:af:2f:a8:b5:5e:ac:53:a3:9a:d9:04:fe:
da:67:73:65:a9:ad:04:8b:b2:8e:fd:fc:59:fd:50:
38:b3:1d:c9:34:3e:eb:39:b7:bd:fc:9f:5e:c1:6c:
4c:ae:53:2a:51:71:e6:f9:7a:d4:c2:6c:4c:10:71:
2b:ff:76:1c:de:c2:00:e1:ac:ae:9d:f7:ed:f3:ed:
7f:2e:25:28:90:ca:91:e3:c9:82:5d:c1:4b:76:6d:
36:b8:e0:3f:4f:bf:1f:90:f6:92:93:29:f0:f9:cb:
b2:3a:3c:5b:a7:da:ec:54:2d:2b:56:17:3a:15:c1:
fd:f0:e9:73:40:b8:bb:84:e1:d5:be:26:4d:51:8c:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:53:10:B8:9F:88:B0:04:AA:1A:62:AE:C4:09:52:A1:96:38:2D:18
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RVMQuJ-IsASqGmKuxAlSoZY4LRg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.152.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:b7:d2:0d:32:54:c8:82:e1:6b:ea:f0:85:3d:20:e9:4a:92:
46:69:dc:66:37:1d:3c:0f:5d:77:ea:b3:6a:d1:c6:d9:2a:b9:
bc:f0:00:a2:a0:17:2f:a2:ca:b6:74:13:92:50:cb:4f:3c:47:
55:99:fe:b6:20:3a:32:c2:7a:53:ff:39:59:80:de:c6:74:8e:
2a:6b:fe:f6:be:a7:18:71:3c:e4:e3:86:1a:7d:b8:92:e5:cc:
d3:eb:99:13:ce:54:ee:12:02:f5:fa:a0:20:1d:b5:08:80:57:
96:e7:97:51:9d:95:87:49:fb:da:25:a4:68:13:46:c1:90:51:
6e:a8:4b:ae:27:25:87:c6:fb:0e:1d:f8:3d:89:9b:76:16:22:
a2:9c:98:45:b3:ff:14:aa:95:28:ea:44:8e:86:d3:33:75:f6:
a7:e1:5d:4f:60:71:6b:23:a6:a1:c7:1c:4d:8d:f5:94:19:34:
af:ec:67:88:ec:83:6d:86:de:bc:aa:17:8c:0b:a8:56:ec:d8:
70:0c:bd:51:ca:d5:b2:d7:e8:64:bb:cd:30:ef:b8:3e:f8:66:
4d:64:83:dd:77:15:3d:77:66:d2:d6:f2:5d:fb:3b:d3:ab:bc:
0e:a8:21:fb:13:d4:fd:0b:92:7e:0f:ff:7e:5d:7d:bb:35:4b:
12:78:92:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org