Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZzQSsa1oxUdnc0qxCp9_nz2P-F8.roa
File: ZzQSsa1oxUdnc0qxCp9_nz2P-F8.roa (raw, json)
Hash identifier: RE4Sa3KtMVJ2SkFgrFB8UONVMcT0V7yskZNHc0Q5nzU=
Subject key identifier: 67:34:12:B1:AD:68:C5:47:67:73:4A:B1:0A:9F:7F:9F:3D:8F:F8:5F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 223A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZzQSsa1oxUdnc0qxCp9_nz2P-F8.roa
Signing time: Fri 25 Nov 2022 04:40:55 +0000
ROA not before: Fri 25 Nov 2022 04:40:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8762 (0x223a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=673412B1AD68C54767734AB10A9F7F9F3D8FF85F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:59:1d:09:62:14:4e:21:e7:29:f0:b4:e0:
12:45:ab:ba:41:a4:61:23:0b:e4:3a:fa:5e:ed:68:
bc:5d:69:c7:7e:26:d0:84:75:a1:68:f2:48:4f:5b:
ac:28:68:9a:7a:62:3d:a7:10:a2:f2:48:6e:67:f4:
72:f5:e5:20:a7:b1:71:72:61:b7:18:bf:e1:c7:23:
04:cc:72:3b:42:11:38:2d:49:e6:d2:e6:24:cd:94:
90:1c:5a:76:83:2c:c4:13:15:63:e4:cc:f5:1e:0b:
6d:4d:07:9c:44:93:fd:8a:aa:b4:fd:21:cd:a4:a1:
12:ab:bc:25:7e:44:d8:15:e3:33:22:f0:2f:4c:89:
78:a3:71:41:e1:01:44:1f:85:28:01:91:b2:14:4e:
07:d8:d4:10:89:b1:ac:31:8e:df:ac:5a:7a:b1:be:
54:f6:a1:76:be:03:df:d3:4b:36:12:32:c6:c2:fe:
8e:a6:12:2c:0e:99:19:14:7f:90:1c:58:8c:45:ff:
e2:cb:eb:d1:2f:8f:a7:45:16:88:9a:b2:58:89:2f:
f8:70:6f:bd:41:67:23:e2:10:b3:e4:90:5e:2c:da:
26:26:4f:be:4b:a9:90:72:72:c5:2b:05:6c:27:a5:
0d:08:ec:4e:17:4b:35:63:23:01:b1:fb:9d:59:ca:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:34:12:B1:AD:68:C5:47:67:73:4A:B1:0A:9F:7F:9F:3D:8F:F8:5F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZzQSsa1oxUdnc0qxCp9_nz2P-F8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.216.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:86:7a:51:91:9d:a7:c4:43:d9:64:29:d8:5a:40:b1:d0:b0:
b3:7b:a9:94:ab:46:19:d9:36:7f:68:a9:a1:2a:55:5a:0e:5b:
f8:76:f4:5b:4d:22:8e:f8:c1:53:c0:92:ce:22:e7:45:aa:6b:
60:d5:ab:41:16:e9:36:b7:60:ce:ce:17:97:f6:ce:b6:bb:dd:
81:37:82:79:ec:c6:15:c3:b6:29:7b:34:40:0d:05:f4:22:0a:
4b:37:8d:b0:d0:55:bc:92:05:cc:a6:68:89:82:10:29:1c:9d:
55:56:90:f0:7a:c1:31:6a:80:84:5d:ff:e2:16:46:2a:47:f3:
58:50:7e:9b:79:a4:80:39:c4:da:52:d8:8f:d8:af:77:f8:96:
f8:43:e2:f5:f6:ef:83:f7:f9:aa:bd:06:1d:fd:4e:4c:f5:aa:
78:02:d3:c7:e1:29:6b:44:00:46:16:02:32:ab:57:93:26:f3:
80:27:4c:86:77:e6:8f:83:46:b2:a2:98:87:06:00:b3:63:67:
1e:d0:4f:d5:c9:cf:a1:6e:66:cc:74:56:72:9c:88:59:d1:21:
8a:c6:b2:31:32:0d:88:fe:ff:73:49:f8:8b:19:c2:8c:48:c1:
98:ba:86:d1:91:7c:52:4d:64:65:3a:8f:97:d9:70:33:06:b1:
f6:a5:db:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org