Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T2glWeHEY6YUqijLbmGFDZUL-jc.roa
File: T2glWeHEY6YUqijLbmGFDZUL-jc.roa (raw, json)
Hash identifier: iahTJFCeUm4ssiWNJQ97chhMwxcPxea1m5Tzs1jRiJk=
Subject key identifier: 4F:68:25:59:E1:C4:63:A6:14:AA:28:CB:6E:61:85:0D:95:0B:FA:37
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20E3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T2glWeHEY6YUqijLbmGFDZUL-jc.roa
Signing time: Fri 25 Nov 2022 04:39:14 +0000
ROA not before: Fri 25 Nov 2022 04:39:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8419 (0x20e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4F682559E1C463A614AA28CB6E61850D950BFA37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:25:a2:17:07:7a:2c:66:a6:0e:f6:84:2a:
13:cd:9c:61:99:f5:84:e3:7c:94:fc:e6:54:64:4f:
ee:6b:27:10:1e:ea:28:68:46:47:36:7f:3f:9e:a4:
01:72:d3:0a:ce:06:d6:e0:64:fb:c0:7f:fd:71:7d:
f2:99:94:5e:36:c4:01:5d:9c:42:f2:ce:dd:6b:a4:
da:e0:d3:62:aa:b4:55:f0:81:42:82:55:b3:79:60:
75:c9:6a:49:5a:cb:06:62:d8:10:48:2b:73:6b:01:
6c:54:34:e9:f2:4a:33:f8:50:10:c5:95:cd:97:71:
59:c5:0b:37:ce:27:ce:af:d2:79:16:37:21:98:04:
e9:7a:83:58:ac:9d:5e:e1:8a:69:5d:6e:9a:c4:a7:
ac:db:60:a8:58:66:b0:60:b5:c2:40:6c:cc:38:58:
9b:81:1c:47:56:cb:a8:c9:f7:1f:8b:55:81:04:60:
da:6a:38:fc:9e:17:d1:ae:77:86:e4:a2:31:03:9f:
c6:53:1e:d0:35:89:b6:3d:f1:47:78:b6:b5:9a:49:
4b:74:9c:12:a5:b5:56:3d:6d:9f:09:c8:c8:1f:6a:
62:c7:14:1a:dc:d4:fd:0a:5c:73:f9:58:23:3e:d2:
ee:a8:37:f5:52:dd:7b:d6:fb:d6:2c:a9:83:ff:df:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:68:25:59:E1:C4:63:A6:14:AA:28:CB:6E:61:85:0D:95:0B:FA:37
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T2glWeHEY6YUqijLbmGFDZUL-jc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.184.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:26:0e:3c:13:e1:b0:4d:88:14:9e:6e:fe:4f:f7:83:b8:00:
2f:11:a3:b3:0f:67:5c:dc:a0:67:aa:e8:9f:9c:d9:66:8e:96:
4e:28:4d:96:3b:17:c9:48:f5:b7:37:cd:64:d3:6d:6b:43:c9:
ac:b7:9a:2b:4f:32:40:2d:25:26:b0:de:d5:93:91:78:fd:0e:
2a:50:53:2d:3a:15:6d:67:6d:5e:07:e6:4e:c5:57:e5:5b:73:
9b:72:24:8b:5a:20:4a:a4:f6:87:d7:19:5c:12:33:68:81:0c:
c0:00:07:44:ea:bf:ce:3a:15:63:67:9a:56:be:f1:03:54:93:
85:12:68:41:d2:57:ba:80:04:42:e8:83:a3:29:71:c0:28:9c:
49:a9:90:89:9a:af:00:bd:71:cd:4e:d2:fb:8b:f7:62:56:cc:
06:86:8c:4f:28:66:f0:e7:b7:c7:df:ad:ec:8c:87:a9:b4:a5:
5b:4a:06:5b:01:28:46:8c:5a:ca:94:dd:7c:31:c3:32:85:34:
99:75:85:ba:b5:8a:2c:49:3d:a6:aa:0b:8b:03:fc:cc:f2:84:
9b:cd:51:77:20:51:3e:9d:69:80:b9:92:c6:02:61:6f:fd:97:
72:8c:2a:a8:6b:25:a4:e5:45:fc:84:c8:d7:11:43:3a:76:8a:
b2:c0:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:23 2025 by rpki-client