Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/URxyrk2yl-eaBcoN2rmJV9yTEyc.roa
File: URxyrk2yl-eaBcoN2rmJV9yTEyc.roa (raw, json)
Hash identifier: hx8s5lZdyl6DgBorKv3U1beYp9+ztmJfXHH849jYxPQ=
Subject key identifier: 51:1C:72:AE:4D:B2:97:E7:9A:05:CA:0D:DA:B9:89:57:DC:93:13:27
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/URxyrk2yl-eaBcoN2rmJV9yTEyc.roa
Signing time: Thu 15 Sep 2022 02:52:52 +0000
ROA not before: Thu 15 Sep 2022 02:52:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=511C72AE4DB297E79A05CA0DDAB98957DC931327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:5d:fb:93:1f:e3:ae:d8:32:f7:34:8f:4c:
23:4b:1f:bd:b8:9f:68:bd:26:53:33:c3:1e:f8:28:
f5:b5:b6:05:55:ee:e7:5e:66:e0:df:26:9b:c9:bd:
b1:21:9b:32:bd:c3:f4:4c:dc:44:6d:aa:3f:0f:53:
10:53:ec:e3:80:27:97:ea:0a:c5:46:34:43:36:91:
7f:e1:47:d9:4e:c7:d3:f2:47:ce:e1:02:bc:69:01:
dd:4b:56:21:5e:86:8e:db:52:80:cc:6a:56:40:82:
53:2b:94:65:5b:63:2a:e2:37:98:5a:c4:ed:f4:44:
c5:f1:05:a6:84:ff:13:22:31:1e:bf:d2:4c:b9:91:
7c:29:0f:e9:3b:96:da:c6:38:33:bb:ed:33:bf:81:
a2:24:f6:18:ef:96:72:e6:63:2e:d3:29:4e:40:88:
b7:74:a4:4f:bf:59:a2:b1:83:8a:4c:1b:dd:59:b8:
f6:e4:1c:3c:1b:37:5b:42:98:92:dd:ae:54:50:8d:
aa:57:8a:c5:95:44:d8:0a:7e:19:20:71:d7:35:66:
c2:11:fd:1d:83:9d:d7:36:0b:0f:15:22:46:cd:56:
9a:a5:40:25:63:bc:1c:43:fb:a9:42:0a:eb:47:d1:
28:67:01:22:02:52:71:40:b7:b8:5d:56:a8:40:83:
f7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1C:72:AE:4D:B2:97:E7:9A:05:CA:0D:DA:B9:89:57:DC:93:13:27
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/URxyrk2yl-eaBcoN2rmJV9yTEyc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.100.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:9b:fb:04:a5:40:58:49:54:e4:fe:d4:56:1c:50:02:37:fb:
47:73:bd:11:af:c3:8d:a6:7b:ec:f3:19:3f:43:fe:89:33:cc:
24:85:e2:2a:a0:fc:a6:fc:c3:b1:ba:83:c0:16:79:eb:ef:c0:
b7:b1:fc:59:3b:88:7a:be:00:2d:30:c0:7a:ec:aa:29:4a:1f:
22:e5:ff:06:e9:79:57:f4:6a:19:70:03:70:fb:e5:85:71:51:
d5:15:91:0e:71:bc:ad:f0:b6:c8:4c:c7:08:68:90:c1:53:3e:
70:e8:12:1b:13:4a:96:11:64:68:a2:23:2e:ea:97:d1:cf:e3:
e1:9f:32:de:1e:57:b1:5f:cb:fa:d6:99:d6:68:6f:26:1e:2f:
c6:d7:55:7a:31:d0:ce:bd:b4:b1:e5:8a:1d:23:e1:1b:4e:c4:
75:6f:76:28:a8:78:2c:b9:83:1b:7c:96:10:6b:b0:3e:ff:06:
bc:ac:ad:32:16:50:82:e3:0a:f7:11:31:51:ad:96:23:9a:85:
f1:7e:c0:6a:b8:ae:7a:21:12:39:73:63:95:2a:69:8d:3d:c9:
e8:29:3a:12:99:be:4e:d3:f1:5b:d4:e7:38:fb:f8:af:46:df:
63:4f:54:fa:0c:d9:59:c7:ca:a1:d3:4d:3a:8f:e2:ec:bb:37:
5f:45:af:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org