Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZVqkhYaR3f4zeTHQIZjaGADUiVw.roa
File: ZVqkhYaR3f4zeTHQIZjaGADUiVw.roa (raw, json)
Hash identifier: M/iDuHLsJ8hemdGOU69s0yfU6tgjG1G+t2jABUV3dGM=
Subject key identifier: 65:5A:A4:85:86:91:DD:FE:33:79:31:D0:21:98:DA:18:00:D4:89:5C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22F0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZVqkhYaR3f4zeTHQIZjaGADUiVw.roa
Signing time: Fri 25 Nov 2022 04:41:50 +0000
ROA not before: Fri 25 Nov 2022 04:41:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 45.64.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8944 (0x22f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=655AA4858691DDFE337931D02198DA1800D4895C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c8:2d:b7:cf:78:d1:cc:40:df:15:c3:7f:04:
33:42:34:7b:e6:20:04:57:bf:92:5b:6c:85:7d:72:
88:9d:12:09:db:ed:e4:1e:53:aa:a5:61:f5:39:a5:
f1:d0:bc:63:c6:b4:d0:b5:69:93:49:5b:99:9e:64:
92:16:1e:67:da:b7:46:44:2e:7e:95:eb:3b:77:61:
de:12:36:77:26:04:6e:cc:d3:92:cb:5d:b0:aa:91:
51:6c:3d:36:83:c7:eb:1c:2b:a4:6b:83:2e:29:ad:
49:e4:54:71:e9:34:7c:e7:b0:de:b0:dc:bd:d9:98:
38:3f:0f:0d:d7:99:52:b7:22:93:e2:ff:af:b9:4b:
93:fd:01:7d:ed:81:b2:fe:6d:85:11:55:9f:88:a8:
a7:59:88:8e:1f:7f:80:02:65:7b:0e:33:8f:bd:3c:
9e:b9:28:f5:3a:37:27:94:c0:56:61:2f:6f:30:48:
33:79:4e:6e:13:8b:18:61:fe:21:81:72:8d:60:3b:
f9:7a:25:df:ed:de:2b:7a:2b:3e:d5:44:78:ea:19:
84:89:76:d6:3e:a0:ea:46:a3:f7:30:98:86:d7:39:
21:8e:f7:9c:85:0a:d9:90:93:45:5d:43:ae:ab:ae:
8b:bb:09:fb:ce:fe:f7:e3:d5:6e:b9:f1:35:79:93:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5A:A4:85:86:91:DD:FE:33:79:31:D0:21:98:DA:18:00:D4:89:5C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZVqkhYaR3f4zeTHQIZjaGADUiVw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.30.0/24
Signature Algorithm: sha256WithRSAEncryption
79:03:b3:2c:e5:5a:b0:38:9e:98:70:96:3b:2e:2d:1c:3f:3e:
44:01:93:05:bf:5a:25:f6:70:28:ea:77:04:e5:83:3f:59:59:
91:4f:17:44:9c:19:ad:06:76:a1:d1:08:8b:d7:0d:4a:5e:6f:
f0:28:35:f5:b5:07:fa:35:b8:32:37:44:62:30:fc:e3:bf:03:
e3:7a:22:16:35:a4:aa:3b:29:2e:39:74:fa:c4:4c:0b:b7:f0:
2b:fd:8f:3c:c5:d7:60:65:b8:00:13:0a:fa:c0:66:6a:94:00:
a9:51:2c:9e:28:99:30:d6:3f:9c:16:f3:03:cd:5e:7c:56:10:
60:3c:5c:23:3c:a4:dd:4e:98:d5:32:c5:73:2a:94:d6:92:00:
a6:90:d1:2f:bf:43:ac:8c:68:e6:13:be:fd:48:80:59:7b:71:
7f:34:fc:e9:26:83:4a:c8:fb:5e:46:9a:80:af:ca:8c:f8:4b:
11:06:e3:ac:4c:81:85:10:b6:ad:23:95:74:ad:d7:1a:cc:5c:
ae:22:47:d2:90:15:13:d3:83:74:90:f5:1a:e8:e6:7f:a2:df:
ca:a3:41:d4:3e:39:d6:6e:f0:19:76:78:b3:54:52:66:d7:4a:
19:55:ef:05:a6:6c:9b:3a:44:3a:9a:57:85:ec:c5:76:e8:42:
49:c8:81:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org