Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T1ZdFeKsGUDhr9udVcknwMTCuBQ.roa
File: T1ZdFeKsGUDhr9udVcknwMTCuBQ.roa (raw, json)
Hash identifier: 5e8ueWhk6QMdF7bQ+fOFRJ48C/csPSallcoGBGTu/sY=
Subject key identifier: 4F:56:5D:15:E2:AC:19:40:E1:AF:DB:9D:55:C9:27:C0:C4:C2:B8:14
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T1ZdFeKsGUDhr9udVcknwMTCuBQ.roa
Signing time: Thu 15 Sep 2022 02:52:18 +0000
ROA not before: Thu 15 Sep 2022 02:52:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.120.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4F565D15E2AC1940E1AFDB9D55C927C0C4C2B814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f2:28:d2:8e:ce:b1:1c:cf:14:84:31:72:33:
cb:e5:69:9d:75:89:1d:ee:df:08:0a:1f:a8:1e:33:
61:4b:2e:8c:64:a5:60:59:8c:99:62:03:65:ab:9c:
86:e8:39:9c:0a:d3:b4:18:30:59:98:39:3e:81:e8:
26:13:21:3c:b5:d9:fa:70:d1:5e:06:49:a7:38:78:
62:14:f2:94:b2:ec:0c:22:41:99:af:42:5d:63:a5:
f4:0a:2b:09:56:13:b3:aa:26:fb:b5:b0:1e:15:25:
46:d6:92:50:34:6b:4f:45:7e:08:a5:32:45:b6:1f:
ad:93:1f:be:39:18:d8:7f:82:8d:b2:23:69:45:2d:
78:f0:c0:05:f8:05:fb:6c:4c:cb:a5:8f:9f:c5:5f:
71:4f:76:1c:0f:21:5d:3b:05:ef:b8:e0:ed:a3:a6:
7a:cf:f4:be:34:b5:77:62:d3:3e:ef:5e:1b:99:df:
aa:14:17:0a:f4:d8:c8:2d:33:9c:d1:e5:b2:be:92:
4d:72:fc:41:6b:ef:43:07:ea:a2:af:cf:1b:71:61:
24:fd:22:a3:93:a2:3e:a6:01:94:61:70:1b:89:b5:
bd:cd:ee:53:e5:24:56:f3:7e:7d:6a:71:d6:23:d2:
c7:fe:da:ca:3c:ad:35:4d:2c:f0:43:52:c3:f7:3c:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:56:5D:15:E2:AC:19:40:E1:AF:DB:9D:55:C9:27:C0:C4:C2:B8:14
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T1ZdFeKsGUDhr9udVcknwMTCuBQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.120.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:4b:45:f8:c1:49:fe:c8:cd:43:33:bb:f2:73:b9:ca:c8:11:
70:07:34:08:6a:3c:0f:01:ba:8b:ab:c8:31:cc:d9:76:f1:81:
d8:c6:12:7e:60:4a:3e:1a:3c:9d:0c:ce:ba:0c:5b:95:16:18:
99:fb:22:3d:a9:bb:1c:8e:a9:c6:ec:47:76:32:ec:31:5a:f4:
4f:94:0e:a0:04:2d:6f:bc:46:a7:f4:6e:85:0b:95:e4:05:d8:
90:40:83:6c:ee:31:43:07:33:1c:de:b7:ba:ab:1b:30:3f:7d:
01:cc:86:8f:6a:4f:e1:ef:a7:ca:3c:e8:e0:f8:cf:e5:a6:d3:
14:7b:8d:f0:f6:d4:9a:01:cf:ed:94:f3:56:6f:9f:6e:d8:47:
6c:de:e5:d0:95:83:2b:11:a5:a0:09:38:19:d1:12:e2:7f:2f:
ad:9d:ee:3d:1d:cd:a0:3f:40:fe:f1:7c:d8:7e:c7:15:4b:df:
b9:be:fb:58:5c:9f:ec:10:d8:41:84:10:79:b6:56:db:c5:a4:
17:10:dc:ce:de:80:b7:00:03:0e:8a:b2:0c:6b:ae:12:7c:9a:
e0:f4:1e:e2:87:c4:47:0b:f5:1c:17:11:4e:fa:a0:4c:88:50:
ff:cd:88:56:35:73:51:60:7c:cb:4c:08:cd:19:0c:46:99:2f:
84:1a:3b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org