Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBDcZQGpcPNrwQh73tmQfuwk5so.roa
File: cBDcZQGpcPNrwQh73tmQfuwk5so.roa (raw, json)
Hash identifier: pxvF/6DAPFJX1HGpFB8F+rZI1SnjT+vVfuKe3MNDoj4=
Subject key identifier: 70:10:DC:65:01:A9:70:F3:6B:C1:08:7B:DE:D9:90:7E:EC:24:E6:CA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 221C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBDcZQGpcPNrwQh73tmQfuwk5so.roa
Signing time: Fri 25 Nov 2022 04:40:46 +0000
ROA not before: Fri 25 Nov 2022 04:40:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8732 (0x221c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7010DC6501A970F36BC1087BDED9907EEC24E6CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:7d:a4:8e:89:44:7d:73:30:64:4f:41:e0:
72:a1:43:1b:30:95:1b:50:95:ec:1c:11:2a:77:4d:
86:8a:e8:23:92:3f:cd:52:3e:7f:6c:3b:b4:7d:aa:
6d:16:2b:eb:2c:77:95:3c:e8:b4:d8:1e:a4:ee:d6:
e8:a2:97:3b:4e:ca:d2:8c:15:4d:42:f4:a4:b4:33:
f3:a0:a8:b7:f8:cf:40:af:f5:2c:b1:f9:4c:1e:82:
93:d7:5a:ec:e8:70:45:7e:8d:1e:c1:a6:a0:c7:7a:
de:85:ab:ea:e5:59:42:d0:a3:8a:6a:27:c2:ac:6d:
76:6b:70:06:a3:55:8c:32:fc:9e:32:08:dc:cb:88:
7e:50:65:74:71:9e:2b:b2:d6:6f:93:95:cf:59:f6:
fc:00:fb:38:6e:5c:67:05:fc:42:5d:89:43:45:ed:
e6:ec:04:86:ac:05:ea:87:e6:c8:76:9e:2f:ad:67:
bb:3f:63:ef:93:8f:bf:78:41:c6:e0:0a:9a:5d:ec:
10:57:2a:94:cc:28:0e:20:eb:36:ab:6d:bf:74:db:
7c:9c:71:4b:99:1c:b0:c9:3d:25:bb:31:fb:39:70:
5d:1f:98:51:6b:4a:57:e4:82:59:7d:ca:10:21:b7:
4f:4e:a7:08:57:88:1b:56:e1:d2:ff:d5:77:ba:5f:
8d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:10:DC:65:01:A9:70:F3:6B:C1:08:7B:DE:D9:90:7E:EC:24:E6:CA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBDcZQGpcPNrwQh73tmQfuwk5so.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.192.0/18
Signature Algorithm: sha256WithRSAEncryption
5a:cc:47:33:a8:eb:a5:ab:a1:ea:67:5a:b5:d9:ff:93:fa:7c:
5f:c9:62:fa:f8:f9:78:8c:ad:ff:3f:c4:13:48:f0:54:9f:f8:
fb:ac:2c:71:fd:27:f1:c4:36:95:d4:ea:d6:86:47:da:19:a7:
8b:c2:62:b1:6b:97:90:1b:bd:cc:af:3f:84:15:bb:50:b3:32:
b2:37:27:4f:93:58:ae:05:2b:a0:a7:24:93:51:8a:45:88:f1:
64:80:a9:71:87:a2:5b:09:46:90:de:07:b1:b1:99:66:c5:36:
2a:8d:8c:4b:34:51:3f:bf:2c:02:a8:bc:d2:da:98:e8:bd:d4:
8d:52:80:9d:7d:c9:16:93:97:0d:69:a5:27:c9:79:d6:9e:77:
8e:ec:2a:82:e6:ba:f6:cc:2e:9c:a8:28:eb:dd:c3:72:f4:02:
6e:5e:0e:66:2b:45:ce:af:b4:d4:2e:ba:a6:0e:54:e5:8e:0b:
13:d7:93:4b:b7:52:f7:c0:5d:b5:ab:0d:e1:33:ff:c4:06:08:
a2:af:c1:49:91:e1:b1:d8:89:d2:dc:c6:61:48:c1:f7:73:4b:
8b:ed:ee:be:45:5b:38:ce:f0:a9:a2:37:d2:49:aa:cb:a2:19:
15:e2:90:aa:f4:7c:04:2e:d8:44:a1:32:3e:fa:a9:9c:65:29:
50:d2:e4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org