Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZmTMWtx-FzVldVeccSUDUSOwY9Q.roa
File: ZmTMWtx-FzVldVeccSUDUSOwY9Q.roa (raw, json)
Hash identifier: 3H8WzXuDiuOK4s9/SluE5/0kuTEOfZrN+1WnJiWylVY=
Subject key identifier: 66:64:CC:5A:DC:7E:17:35:65:75:57:9C:71:25:03:51:23:B0:63:D4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2120
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZmTMWtx-FzVldVeccSUDUSOwY9Q.roa
Signing time: Fri 25 Nov 2022 04:39:32 +0000
ROA not before: Fri 25 Nov 2022 04:39:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8480 (0x2120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6664CC5ADC7E17356575579C7125035123B063D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:38:f4:73:a1:09:0d:5d:80:cd:5f:64:85:
e9:85:54:b5:e3:e8:f5:cd:23:29:8d:96:da:ab:f2:
1a:37:7f:a1:20:5c:54:f1:92:ab:14:41:e7:11:78:
4d:37:fb:ac:1e:8b:92:6c:fc:33:6a:9e:9f:04:3c:
9f:1c:88:fb:91:32:d2:28:8a:0e:2d:59:03:c9:8c:
42:d3:1e:60:48:60:84:b9:67:f9:08:bc:c8:09:cd:
e9:48:f5:18:c9:a8:84:df:9a:f9:1a:d4:1e:b3:42:
e1:4b:11:4e:b4:87:c1:a9:2d:94:f1:a8:62:22:83:
07:b3:b6:31:0f:11:ba:a0:7e:50:f5:c5:15:50:d1:
eb:de:eb:c2:dc:b0:8f:1a:a1:5e:a0:74:72:7e:02:
0d:19:97:01:aa:0d:74:a4:23:8e:c8:ea:f6:19:f5:
4e:45:0f:ee:b8:6b:4b:93:9f:75:a6:b5:bb:89:36:
55:b2:8f:03:f7:1f:91:7d:d9:2c:3a:aa:2a:d6:54:
76:e7:ae:02:46:ae:d3:03:99:63:cb:37:6c:cb:41:
bd:d9:a4:98:a2:0f:aa:f5:d6:5e:d6:5c:15:95:11:
a4:c5:ec:83:ca:ca:a6:ac:5f:65:4c:42:ca:15:b0:
8a:88:a3:f2:14:80:91:11:ff:f3:17:d6:25:b6:30:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:64:CC:5A:DC:7E:17:35:65:75:57:9C:71:25:03:51:23:B0:63:D4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZmTMWtx-FzVldVeccSUDUSOwY9Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.252.0/24
Signature Algorithm: sha256WithRSAEncryption
19:8e:8d:f8:84:83:db:57:ab:d8:28:7a:86:b6:26:af:e0:fd:
5e:f5:63:f9:95:52:82:62:7b:0d:2d:9c:69:76:92:eb:4e:c1:
39:c3:22:6b:08:ad:86:08:6e:91:c6:4e:50:13:95:bf:2f:c5:
55:c0:32:dc:71:4d:57:e2:e9:93:da:e9:39:fd:17:c0:4f:89:
8f:a4:65:b4:19:0b:aa:99:31:e1:af:74:b2:fe:33:56:c1:05:
de:99:a6:48:e2:7c:0d:cf:91:99:ac:ed:89:87:9a:ab:10:86:
25:43:88:96:1b:fa:eb:d9:23:74:7c:f2:c2:df:42:b1:aa:be:
cb:ae:f8:40:48:4d:ee:68:f8:fb:9d:bd:54:4e:ee:7b:57:c2:
db:24:2f:48:8c:5d:7d:4d:d5:6c:30:2b:ef:80:4a:ea:4b:d3:
e2:7c:f1:12:05:d2:93:76:06:29:ce:77:3b:26:da:be:d0:a1:
de:79:e9:1e:c1:a8:03:4b:ae:60:e7:6e:38:e5:18:00:4f:41:
3e:e1:e5:2e:8e:59:86:7e:61:ba:0e:95:60:ff:fd:51:72:72:
58:b0:e7:82:0f:fb:9c:7b:3f:ed:47:8a:96:e8:2d:ec:1f:8e:
9d:6a:1e:8d:a9:eb:75:ee:88:0b:80:55:1a:9b:50:fe:45:2c:
2e:a2:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org