Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZS9m3zqd2QmG_QoV2wQeTZlwK3Y.roa
File: ZS9m3zqd2QmG_QoV2wQeTZlwK3Y.roa (raw, json)
Hash identifier: KHUQngAaDNfXAR108jR6NHHXafQgbG+6TAmO8z2SF4o=
Subject key identifier: 65:2F:66:DF:3A:9D:D9:09:86:FD:0A:15:DB:04:1E:4D:99:70:2B:76
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2353
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZS9m3zqd2QmG_QoV2wQeTZlwK3Y.roa
Signing time: Fri 25 Nov 2022 04:43:26 +0000
ROA not before: Fri 25 Nov 2022 04:43:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9043 (0x2353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:43:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=652F66DF3A9DD90986FD0A15DB041E4D99702B76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:02:53:96:dd:a4:2f:32:6c:10:a4:f6:fe:
6d:05:df:54:f0:5f:ea:f0:d5:66:8e:3d:ea:52:9f:
42:b8:57:88:88:03:4a:af:49:8c:19:b9:b5:e5:33:
41:47:5c:34:0f:92:6e:16:f4:07:13:77:06:e2:ca:
10:82:ae:b6:4c:12:19:f3:52:90:21:7b:41:6c:5b:
f5:cf:7b:d7:b4:4f:ae:62:6f:db:d7:dc:24:8f:5e:
3b:87:9c:ae:3d:eb:71:f3:03:16:86:fc:8d:67:1f:
5c:64:91:99:fd:13:6e:81:20:ce:69:51:8b:fc:9a:
87:4d:3b:a1:ef:f6:d0:78:40:5a:7e:ce:a8:fb:18:
f1:cb:40:88:b5:cf:58:d5:3f:e4:b5:91:7e:e8:1f:
54:d3:ac:fa:b6:af:de:55:99:76:a9:1d:40:51:4c:
03:11:aa:c3:5f:c3:88:51:25:3d:86:b9:af:b0:8e:
25:98:8f:c4:9b:7a:17:94:6f:b7:9b:7f:ff:ce:d5:
04:da:90:6e:40:9b:7b:26:6a:94:d2:23:bb:95:d6:
b2:6e:f7:da:bb:53:47:df:3c:fe:e4:88:66:9e:84:
c7:ca:f5:ce:9a:c7:d1:0a:0d:bb:6b:4b:2f:fb:aa:
05:63:e5:8a:82:de:5e:a3:6f:aa:c0:75:9d:4a:64:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2F:66:DF:3A:9D:D9:09:86:FD:0A:15:DB:04:1E:4D:99:70:2B:76
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZS9m3zqd2QmG_QoV2wQeTZlwK3Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.40.0/22
Signature Algorithm: sha256WithRSAEncryption
54:29:fb:e4:22:1c:18:d9:56:63:fc:d5:4d:51:06:3f:38:7e:
12:7e:56:6e:cb:2c:b6:f4:40:b8:4c:d7:4d:bb:1f:6b:ad:3a:
17:a2:ce:37:e8:84:d7:4a:65:02:98:df:11:1c:fb:af:d4:0a:
e1:6a:39:b8:89:f3:25:8b:fc:3d:3b:2d:82:7c:7d:98:cf:11:
6e:15:f8:64:34:4c:43:65:fd:aa:2d:00:38:45:49:ea:a8:dd:
c1:2c:4b:41:d1:0a:81:ee:ab:b6:bc:21:8d:9c:65:4c:98:4c:
aa:96:65:83:6d:e0:f2:38:3e:e8:e8:5c:d3:35:ab:04:ed:a8:
09:2a:0e:f0:97:e8:3c:49:1e:b3:6a:60:61:da:9b:c4:9d:65:
8b:f0:e0:f7:83:fe:ce:54:f3:01:b7:a3:21:99:02:ba:3f:a1:
ea:0f:d5:d5:9e:0b:17:d0:8a:2e:86:46:8d:ef:d2:49:6b:f8:
c7:78:38:31:0c:ec:14:0a:3f:86:f7:22:ca:a9:fc:d3:30:99:
3c:12:40:0d:41:db:ef:f3:f0:64:8d:5b:ce:1e:df:7a:a0:17:
c3:a7:52:d1:19:85:d4:ff:59:8e:78:0c:61:d8:b7:34:5f:90:
80:6e:a7:d6:d6:55:0f:a8:7c:a7:65:a0:fa:5d:ff:58:a7:c1:
ec:40:b3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org