Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TC0DGUphoE3RhJ0koHuHo3yE5SI.roa
File: TC0DGUphoE3RhJ0koHuHo3yE5SI.roa (raw, json)
Hash identifier: 9dz/7d5BCqEi7WzM2r5jDA++FxDBtKSUBjG/ajvmLGU=
Subject key identifier: 4C:2D:03:19:4A:61:A0:4D:D1:84:9D:24:A0:7B:87:A3:7C:84:E5:22
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TC0DGUphoE3RhJ0koHuHo3yE5SI.roa
Signing time: Thu 15 Sep 2022 02:53:59 +0000
ROA not before: Thu 15 Sep 2022 02:53:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.240.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4C2D03194A61A04DD1849D24A07B87A37C84E522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:43:c9:0b:fd:c7:42:0c:69:97:8a:a8:02:ee:
e0:49:d8:67:00:7b:8b:bf:d1:48:84:8b:2d:2d:73:
e9:67:ea:2b:bb:90:be:4f:1d:ea:9a:3b:ea:bb:82:
bf:1f:c0:19:df:66:84:09:53:96:2b:84:01:48:16:
b2:62:aa:e8:ce:bf:fe:ce:5a:3e:2f:19:60:aa:70:
cc:fd:d4:f5:48:4b:2d:30:23:c8:be:55:b8:14:f0:
9b:1d:74:8c:02:a4:3e:28:d1:c2:d3:f1:ad:a4:d5:
0e:b5:6f:c0:f8:40:1c:9b:c1:ee:79:67:37:10:4e:
24:d4:b4:c4:19:87:15:11:fa:84:cb:b9:36:0f:60:
d2:23:77:de:3a:9e:1f:06:8c:90:f4:7a:ca:b2:1a:
27:54:dc:f8:53:d6:bb:0d:1d:e9:a0:47:0a:f9:3f:
ca:8c:55:a0:67:d5:fa:6e:57:93:ea:c1:83:91:79:
19:ec:3a:7f:ff:ec:e8:8c:dd:94:57:df:b4:7b:c6:
c1:01:f8:c2:f5:00:6d:d6:ef:31:ab:b0:8d:ac:9e:
da:d8:36:13:0b:1b:f1:5b:e9:87:f7:3f:ca:0d:50:
7c:c5:a7:e4:9b:ce:d0:6c:fc:93:fe:39:ea:12:64:
a2:32:bc:fb:1c:cf:a4:ef:5c:20:fe:da:45:12:a1:
c1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2D:03:19:4A:61:A0:4D:D1:84:9D:24:A0:7B:87:A3:7C:84:E5:22
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TC0DGUphoE3RhJ0koHuHo3yE5SI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.240.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:8f:dc:36:7f:f0:1e:b8:3b:d3:67:0d:63:fb:d2:40:21:ca:
bf:d6:58:7d:6f:e9:95:73:fa:38:57:98:d9:3b:84:c4:86:cf:
2e:e1:87:66:7a:f8:0d:5d:ca:a9:1c:50:52:96:63:62:d4:3d:
a5:37:25:05:a1:ce:91:c7:99:24:04:d1:ea:41:ed:89:89:e5:
4c:64:26:a4:be:35:e4:76:7e:3b:91:51:cd:a7:14:8a:09:b1:
d8:29:cb:e5:bf:59:91:37:69:f4:42:36:60:7e:9d:40:87:e0:
40:c5:95:9f:7d:81:67:8a:12:e9:58:91:c3:c6:de:36:3e:9c:
d9:fb:8c:8c:16:e2:81:cc:15:6a:45:fd:7f:03:b0:a2:f6:cc:
77:64:5f:69:ae:c6:d2:06:3c:83:34:55:57:fb:79:0c:56:a5:
5b:f1:12:db:6b:7e:a0:5a:4e:60:2d:a1:f6:aa:e9:51:f7:bd:
9b:8c:f6:6d:28:e2:f3:4a:01:97:c4:15:2a:b1:f9:6d:f2:9e:
82:ec:2c:a4:09:d8:c2:00:b2:c2:de:1b:99:06:e0:9f:6e:bf:
ce:93:16:4a:50:be:a4:c9:48:97:8d:c1:8f:6e:84:48:b4:23:
4f:2b:cc:a6:41:64:c0:5a:1d:e0:40:87:9f:08:55:35:f1:8c:
a5:be:72:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:32 2025 by rpki-client