Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZHlPBQZSOBu1hQHhNxTe_S6B7ww.roa
File: ZHlPBQZSOBu1hQHhNxTe_S6B7ww.roa (raw, json)
Hash identifier: qQj+bLS4gM8YQ4MP/XUR+IW7fLcF/usoc3KCLBokhSU=
Subject key identifier: 64:79:4F:05:06:52:38:1B:B5:85:01:E1:37:14:DE:FD:2E:81:EF:0C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZHlPBQZSOBu1hQHhNxTe_S6B7ww.roa
Signing time: Thu 15 Sep 2022 02:45:04 +0000
ROA not before: Thu 15 Sep 2022 02:45:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=64794F050652381BB58501E13714DEFD2E81EF0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:17:f3:b1:83:0b:d0:f0:22:87:dd:ef:01:
a3:38:50:a7:b6:e3:f3:d4:31:74:9c:76:d9:49:e6:
ce:e1:0b:7e:6d:12:0f:36:d4:8c:3b:b2:98:5b:32:
14:8c:b0:a6:83:f2:4e:20:51:8c:7e:c6:93:2f:40:
b5:5d:09:85:18:7b:a5:4c:77:56:57:a1:fe:5f:25:
15:b1:e5:3a:06:64:35:6d:1b:aa:b3:ed:32:ea:37:
1f:f2:80:c4:64:7a:c0:82:7d:a6:f8:a3:a0:eb:41:
0f:6f:b2:9a:4c:5f:a6:7b:18:2c:04:fc:8c:46:d3:
40:d0:08:27:1c:5b:9a:0f:c0:ec:9e:23:5b:27:62:
25:40:b5:e7:7b:a6:78:9f:bc:78:75:f5:0e:2f:9c:
64:44:8d:8c:2e:96:ae:e2:64:45:dc:87:0a:c6:bb:
f9:5d:4a:c5:04:ce:da:63:1d:ae:6f:dd:c0:7c:b9:
98:06:83:10:5c:6e:93:79:cf:d2:30:65:ba:dd:74:
e4:b5:1c:6d:b2:14:7a:47:45:91:8d:33:15:79:53:
cb:b1:99:14:f5:0a:a6:d1:f5:38:ae:76:71:71:9c:
a3:80:43:60:e4:ce:bc:cf:13:5e:f5:22:89:99:04:
ee:cc:3c:12:af:cc:9e:ec:6f:ec:49:61:9e:5d:06:
58:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:79:4F:05:06:52:38:1B:B5:85:01:E1:37:14:DE:FD:2E:81:EF:0C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZHlPBQZSOBu1hQHhNxTe_S6B7ww.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.124.0/22
Signature Algorithm: sha256WithRSAEncryption
66:50:db:71:da:d3:a7:6b:ff:06:79:66:14:05:04:62:a9:53:
99:bf:ea:28:a2:42:91:1d:24:8c:e3:c7:ae:36:ca:47:10:53:
00:53:96:de:12:fa:df:70:a8:b8:d4:69:bb:48:53:1d:d9:18:
b9:94:e8:e0:02:ba:ba:4e:05:77:e5:26:95:70:78:77:8e:ab:
8a:9f:15:5b:35:a7:7f:98:eb:50:c4:84:0b:86:98:e5:86:f1:
5b:fe:69:80:2d:6d:1f:68:60:0d:e9:b5:99:9d:63:c7:fb:83:
6f:a0:d3:a0:6b:d9:50:5c:70:86:12:95:3c:4b:96:27:f3:c4:
87:14:79:b2:6c:66:60:cc:34:1c:b6:d1:20:87:35:51:0b:06:
1a:d7:97:84:6d:24:23:ae:0e:46:cd:e5:6e:16:13:3c:b8:9d:
43:da:16:eb:ef:40:80:64:e7:44:31:00:e2:90:b9:06:d1:76:
51:41:6d:ce:de:b9:43:59:16:d7:64:f5:93:ad:7a:3a:ad:ef:
03:0f:7e:44:3d:2b:33:53:70:e6:af:c3:3e:88:4a:23:5a:db:
6c:d1:89:a3:e5:16:75:09:82:7b:1c:b0:42:f4:da:27:a7:9b:
1e:f1:5a:e7:f9:df:25:af:9d:ae:88:59:a2:71:55:05:82:51:
0c:16:63:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:08 2025 by rpki-client