Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SX9QBjwYI9wPLDzHsCX5HoP5SWM.roa
File: SX9QBjwYI9wPLDzHsCX5HoP5SWM.roa (raw, json)
Hash identifier: nOe9jbYf1N08REYdI/zJwQ8cxdII26NWZNkhgmHUpZM=
Subject key identifier: 49:7F:50:06:3C:18:23:DC:0F:2C:3C:C7:B0:25:F9:1E:83:F9:49:63
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SX9QBjwYI9wPLDzHsCX5HoP5SWM.roa
Signing time: Thu 15 Sep 2022 02:46:12 +0000
ROA not before: Thu 15 Sep 2022 02:46:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=497F50063C1823DC0F2C3CC7B025F91E83F94963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:1e:33:8c:1b:10:8b:6c:bf:e0:b0:16:fb:
cd:74:3b:4b:2b:0a:ac:52:6e:7c:74:a1:94:36:04:
93:06:e4:2c:0d:7f:15:51:e0:9f:cc:00:86:23:88:
51:87:ef:a3:85:78:aa:93:b2:d9:b0:a0:0e:e0:8f:
e2:cc:79:ba:56:4a:ca:35:f3:2e:c1:81:01:8b:2a:
de:57:94:52:a7:df:34:cd:93:3f:1f:c8:b7:d8:d6:
44:c0:39:9a:40:bf:57:cc:b2:2e:b1:16:4c:4b:e3:
02:24:98:66:16:c6:4b:b3:7d:77:52:62:bb:65:5b:
46:fc:63:cf:da:05:6b:54:92:1f:bd:55:92:92:b1:
ca:0f:37:ad:ae:5e:7a:66:85:52:f3:4f:e6:3e:e6:
08:63:de:4d:0f:ed:bd:2d:87:b9:58:29:d0:b6:cf:
6c:2a:c8:f5:ea:7d:58:43:c8:b1:c8:d8:f8:a7:77:
e3:0e:bc:d3:1f:80:62:a0:6d:93:7e:31:b2:fc:4c:
1c:3a:4c:ff:93:94:49:5b:04:c0:f6:60:4a:da:bd:
53:ca:03:93:61:67:83:ae:b6:e4:e9:a5:54:af:f2:
ad:a8:27:86:bc:4e:d4:43:42:0f:7e:f6:8d:7f:ca:
be:2a:a7:bb:9f:21:c2:0d:f1:0b:20:38:4d:82:02:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7F:50:06:3C:18:23:DC:0F:2C:3C:C7:B0:25:F9:1E:83:F9:49:63
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SX9QBjwYI9wPLDzHsCX5HoP5SWM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.16.0/21
Signature Algorithm: sha256WithRSAEncryption
35:97:d6:92:ca:22:19:f5:f5:f0:2e:70:f7:9b:53:27:a0:19:
e0:21:b8:4b:c5:e0:ad:ec:49:d2:d5:6f:d5:6c:46:dc:cc:11:
c5:37:75:fa:0d:ca:a3:19:24:fb:90:c3:7b:fe:53:5b:4c:fa:
85:cc:4d:bb:60:7b:e0:0e:35:0f:32:a6:d9:03:5a:ce:e2:51:
4b:f0:eb:53:c6:10:ec:a7:16:91:48:e9:28:b9:02:a6:db:bd:
c5:f4:87:63:5a:49:b3:30:80:76:70:ff:f1:87:f4:36:c8:d0:
94:b9:88:1b:8b:49:26:82:92:fe:10:9f:49:8a:89:6d:b2:17:
65:a0:89:b6:3f:1a:e4:5e:a0:9d:b4:43:b2:cf:e4:3c:04:92:
c8:2e:d1:1b:30:cf:22:77:85:79:de:1f:4e:77:1d:22:cb:f1:
cf:df:a1:a8:a1:e3:45:85:5f:77:37:01:65:59:f2:2f:91:fb:
06:1b:d9:82:45:d8:7f:06:f7:71:7e:b4:3c:65:3f:e2:d5:7a:
38:5c:5d:c9:31:67:70:89:af:e8:dd:6b:b9:dc:9d:da:22:3c:
fb:5a:b1:98:6c:fa:23:ab:91:a6:7e:ac:78:b1:2f:28:48:75:
65:27:12:1c:ea:f4:e1:f8:23:1d:68:e4:07:68:3a:f5:1a:c8:
db:f7:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org