Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U3fwvcUccq7E641ozdeCtznr8uo.roa
File: U3fwvcUccq7E641ozdeCtznr8uo.roa (raw, json)
Hash identifier: 5GA4SieQyu+8zONHI3UQ2FlDV0bG+r7kNEJLY+/qwL4=
Subject key identifier: 53:77:F0:BD:C5:1C:72:AE:C4:EB:8D:68:CD:D7:82:B7:39:EB:F2:EA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U3fwvcUccq7E641ozdeCtznr8uo.roa
Signing time: Thu 15 Sep 2022 02:53:42 +0000
ROA not before: Thu 15 Sep 2022 02:53:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5377F0BDC51C72AEC4EB8D68CDD782B739EBF2EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:83:5d:48:ef:56:89:0c:79:de:00:59:39:
bc:e0:76:e5:47:db:64:e0:53:c6:25:31:ff:a9:84:
45:28:ac:25:ac:7f:40:e2:1a:74:93:6a:da:69:e3:
8e:48:52:fb:cc:eb:20:19:52:dd:11:6f:79:f4:64:
d1:73:ca:e3:96:16:1b:22:2a:24:43:18:65:ff:6a:
22:96:60:dd:c4:ac:4d:97:fe:aa:4a:e6:13:2d:9b:
a4:4e:ff:3e:31:ea:ac:e5:28:70:d7:28:f9:41:c4:
14:9f:b2:60:83:50:56:60:ad:1c:b2:51:ed:00:1a:
12:c8:d7:a2:f9:13:a1:6f:4b:23:f8:59:fa:66:bf:
5a:55:13:d6:5d:b1:ac:2a:09:06:e6:2b:df:46:8d:
d9:ad:a4:af:e1:1b:33:cc:ce:39:c8:cd:b8:cf:60:
03:80:47:9a:6e:97:46:75:a4:84:ad:bb:6d:ca:b7:
f2:e6:08:eb:e4:d5:b4:1a:b6:95:ca:51:d8:5d:af:
ed:a2:2c:bf:79:fd:c8:0d:dc:27:6f:6b:2c:19:46:
1b:1e:16:92:18:2e:fe:27:60:af:25:9f:ff:f8:61:
6a:78:4f:92:5f:45:bb:43:93:44:85:de:2b:9f:81:
19:04:44:03:c9:8c:46:55:ae:ef:96:29:09:82:98:
74:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:77:F0:BD:C5:1C:72:AE:C4:EB:8D:68:CD:D7:82:B7:39:EB:F2:EA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U3fwvcUccq7E641ozdeCtznr8uo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.224.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:a8:15:6f:2e:51:37:9b:73:d9:32:2d:ae:47:bc:28:9e:e8:
b1:94:5f:81:01:78:e9:53:a0:1a:08:82:39:11:6b:d9:f1:6b:
71:aa:ae:48:80:56:3e:0d:0f:1d:3e:0c:bc:ad:78:73:f8:92:
19:f3:cf:4f:1d:ef:5a:b3:88:6d:92:a2:e2:b1:cf:6e:29:b1:
0c:4f:a3:b9:84:89:ee:c8:6a:71:17:9c:97:4a:84:1c:c8:f6:
51:f5:31:19:01:1f:91:d0:de:f7:b6:2f:3a:7d:92:ed:9e:e4:
90:f4:34:44:d0:47:f2:a7:3f:ac:0a:cc:45:25:a2:17:a1:71:
e6:13:a0:ae:1f:94:ec:aa:57:6f:81:30:75:0a:0c:e1:63:19:
6d:c7:cf:49:27:aa:eb:8b:ee:a0:bb:1d:83:6e:31:e0:ec:04:
e5:f3:cb:44:52:7e:2c:19:bc:fd:3d:90:e8:cc:70:72:f4:18:
71:4a:48:18:31:aa:03:3f:30:ab:10:5e:3f:29:46:5a:90:ae:
4c:c3:a5:37:3b:06:36:7c:82:a7:a4:18:d7:22:0b:b2:eb:87:
97:ff:63:1e:0e:70:e7:4c:75:90:1a:f5:6b:08:47:69:21:97:
63:62:13:1d:24:57:47:2f:cc:ad:f7:98:5a:a5:37:61:ef:f3:
c9:21:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org