Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RhLi5coPKHdrsKWQk-sPD7ePPb4.roa
File: RhLi5coPKHdrsKWQk-sPD7ePPb4.roa (raw, json)
Hash identifier: f9mY+DIdlOlsoR9byyttJ77ofyH5pw4Y30d5BEjbLB4=
Subject key identifier: 46:12:E2:E5:CA:0F:28:77:6B:B0:A5:90:93:EB:0F:0F:B7:8F:3D:BE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D6D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RhLi5coPKHdrsKWQk-sPD7ePPb4.roa
Signing time: Wed 29 Sep 2021 02:49:01 +0000
ROA not before: Wed 29 Sep 2021 02:49:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 118.232.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7533 (0x1d6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:49:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4612E2E5CA0F28776BB0A59093EB0F0FB78F3DBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:ad:53:44:a7:53:28:da:e0:e7:30:ce:bc:
1d:a0:6f:17:b0:30:29:43:61:2e:e8:1e:41:0c:4f:
51:1c:19:2e:da:ef:7c:d1:85:03:8d:33:a3:9d:dd:
87:e8:d6:b4:31:0e:03:e5:04:77:8d:b1:57:ac:98:
0f:f4:30:65:85:99:fd:8c:b3:2f:e3:31:72:60:42:
c0:2c:b6:bd:5c:5e:9c:5b:05:ab:f9:37:b1:dd:db:
c3:39:b5:88:b6:a1:8c:ec:43:fd:8b:f8:e7:b6:78:
29:cf:df:a7:aa:3d:2f:06:54:93:ce:42:71:1d:02:
b1:bb:9a:d5:bf:41:73:4e:27:48:26:5a:ed:6a:aa:
27:da:81:45:ef:8a:72:f3:16:c6:55:57:74:5c:0c:
66:72:f5:30:b7:dc:4a:65:38:f3:cc:bb:bf:37:e2:
70:4d:f2:68:56:17:1d:f0:52:38:d1:65:cb:01:a5:
d0:1b:aa:d9:84:25:85:30:2b:71:d8:69:46:17:0e:
ba:fe:5b:68:6a:83:ac:ae:db:b7:92:d1:0a:5f:9b:
71:07:fc:f9:02:b0:b3:ea:dd:ae:4c:0a:67:dd:87:
2e:af:b9:20:89:ad:ff:a6:5c:20:f6:0a:93:4c:d0:
fc:b2:4c:6b:9b:f9:8d:2d:c3:00:21:6b:f4:37:6e:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:12:E2:E5:CA:0F:28:77:6B:B0:A5:90:93:EB:0F:0F:B7:8F:3D:BE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RhLi5coPKHdrsKWQk-sPD7ePPb4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.248.0/22
Signature Algorithm: sha256WithRSAEncryption
41:c6:fc:6a:70:62:90:03:0b:d5:dc:89:95:54:6c:6d:59:69:
cb:5b:8b:40:36:b6:58:4d:6c:fc:6f:6a:1d:19:dc:57:de:62:
2c:e9:08:ea:99:5f:c5:fa:57:b0:86:0a:19:ed:8e:44:dd:d3:
19:9f:84:a2:ba:2e:c9:54:f2:fa:ef:53:e6:1f:12:a6:42:62:
e6:aa:78:d2:39:e8:61:4d:b6:fd:a8:5f:68:05:ff:98:3a:06:
2a:31:20:b5:0a:d0:45:5a:0d:4e:ce:d9:30:9b:1a:38:1c:8d:
20:46:7f:93:92:bb:07:9a:3f:dd:ff:95:49:0d:a1:f9:5a:4d:
ba:8b:f9:b0:f0:fc:ed:06:b0:b5:82:26:b5:9b:34:3b:80:4e:
10:87:53:f9:6a:52:d1:48:9b:5b:c5:08:b8:6b:46:87:77:25:
da:1a:6b:43:82:99:af:00:75:a6:ae:17:b7:08:78:38:fa:1b:
68:f2:9a:8a:e6:e7:a8:77:ea:f5:bd:61:5e:32:15:28:59:55:
23:5d:5c:40:d1:bd:af:3d:7b:47:76:47:e4:fb:32:27:87:db:
8d:a6:2d:4e:e4:fe:50:4a:71:47:f3:2d:85:52:ef:c5:2d:aa:
d4:b4:88:2d:54:b6:7b:71:a5:bd:88:1b:32:81:81:10:69:7b:
50:9c:df:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org