Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VvezFvCMDxWk2YYAZDnyJtZ7OCc.roa
File: VvezFvCMDxWk2YYAZDnyJtZ7OCc.roa (raw, json)
Hash identifier: CkHX2DAnyna9J2ZJ8BLc7Zyf8Nz3V/a3dtGuaPp7fWA=
Subject key identifier: 56:F7:B3:16:F0:8C:0F:15:A4:D9:86:00:64:39:F2:26:D6:7B:38:27
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AD4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VvezFvCMDxWk2YYAZDnyJtZ7OCc.roa
Signing time: Fri 01 Sep 2023 10:08:19 +0000
ROA not before: Fri 01 Sep 2023 10:08:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 118.232.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10964 (0x2ad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=56F7B316F08C0F15A4D986006439F226D67B3827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:c6:b7:75:04:d4:b6:46:60:a1:87:85:c8:
db:55:09:16:db:73:44:22:ba:5e:54:c9:1b:29:8e:
dc:22:2e:b7:77:db:c0:89:7c:bd:20:6e:9a:b0:bf:
e5:0f:8f:d8:35:4b:be:4f:99:25:1c:22:96:18:a1:
e2:bc:8f:e5:d6:00:5c:a0:35:03:d5:4a:eb:56:82:
18:95:89:aa:42:38:34:c2:19:e3:27:5f:ec:d1:bf:
80:81:42:11:e3:2b:c3:fd:f1:3f:24:c0:65:7b:11:
46:61:e6:1f:ea:f7:35:ca:f5:19:4c:21:27:f3:87:
99:0c:57:49:61:d9:6b:5a:1d:8e:34:99:57:ee:ad:
37:6d:1b:08:7b:0c:d8:e1:79:9e:1e:5e:f4:e7:35:
ba:45:1f:7f:e5:03:cb:7f:20:f6:39:a7:b9:6f:b9:
b7:eb:3a:65:7a:fc:1f:21:b0:16:43:5f:bb:47:0c:
9a:3c:44:ab:93:cc:7d:b9:4d:a3:6d:90:37:1d:cf:
52:ab:4e:c8:7b:71:56:1b:b4:15:4b:0c:c1:da:38:
30:ec:4d:4d:df:af:b8:d8:c4:f4:37:c9:e9:dc:3b:
c5:3e:1f:f8:80:bc:e7:f8:d0:b0:0f:10:4e:49:4d:
21:88:51:7d:89:f8:40:62:91:74:73:2f:13:e6:f3:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F7:B3:16:F0:8C:0F:15:A4:D9:86:00:64:39:F2:26:D6:7B:38:27
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VvezFvCMDxWk2YYAZDnyJtZ7OCc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:01:f3:96:2b:a7:3f:15:3f:17:13:9a:2b:7d:35:c3:d2:17:
91:2c:29:bf:78:25:d7:a2:de:3d:74:0b:53:b0:5e:92:b3:6c:
7f:17:61:78:86:8d:59:e7:97:68:bd:fb:f8:96:f8:40:5f:0d:
fe:2f:1d:a2:b6:2b:a9:ec:e5:d0:a9:8b:06:46:a9:8d:2a:4a:
24:f6:dc:5c:d7:65:3e:9e:11:67:40:b2:da:e8:ce:fe:b3:31:
b7:1d:05:6a:7d:bc:9a:af:49:c6:c7:15:09:11:bb:3b:2a:a6:
5e:bb:20:c6:00:dc:86:d4:ff:db:be:c4:d2:d9:b7:69:bf:b0:
99:d6:59:05:c8:f8:fc:2e:63:66:56:75:e9:9e:8c:49:09:9b:
e0:0b:71:63:d0:e2:12:dd:02:ef:91:70:bd:bf:5b:5a:77:da:
67:ee:c8:96:3c:ba:aa:30:b9:b7:86:3b:10:f2:b1:d6:98:42:
55:c6:9b:6d:2a:a6:3c:6b:73:94:a5:ce:b3:10:7d:39:a7:96:
9a:75:1d:09:f0:dd:3b:ac:4b:02:c1:ee:8e:c4:2b:37:3c:60:
7a:41:5e:f9:24:eb:7f:36:75:00:c2:dc:09:94:07:01:d2:05:
b3:19:c1:99:e1:39:95:b3:19:ff:8e:05:a8:73:fc:10:eb:67:
36:c5:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:50 2025 by rpki-client