Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f9TEmBYqk6-14L3X8x4gShQVFGk.roa
File: f9TEmBYqk6-14L3X8x4gShQVFGk.roa (raw, json)
Hash identifier: NmYGQzGJg+LZbkBT48rO2W9u+8r8AHgIQ/CVmbvAMOY=
Subject key identifier: 7F:D4:C4:98:16:2A:93:AF:B5:E0:BD:D7:F3:1E:20:4A:14:15:14:69
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2046
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f9TEmBYqk6-14L3X8x4gShQVFGk.roa
Signing time: Fri 25 Nov 2022 04:38:32 +0000
ROA not before: Fri 25 Nov 2022 04:38:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8262 (0x2046)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7FD4C498162A93AFB5E0BDD7F31E204A14151469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:be:81:48:63:24:b9:4f:18:77:db:26:25:44:
c9:c0:f1:df:ed:32:96:fc:2b:ca:72:0b:97:38:65:
c4:1e:0f:bb:b7:cb:9b:86:cd:99:8d:51:9e:00:7d:
ba:6f:ff:28:63:38:3f:d5:f3:1f:58:e3:39:5f:23:
1d:90:67:ab:4c:40:e4:5b:9c:6e:99:eb:1b:0d:84:
0c:c1:e0:8d:f8:e2:1f:0e:f2:41:f5:f6:da:ec:44:
ab:dd:2e:0c:44:33:d7:2f:5f:65:a6:8c:bb:46:1c:
60:22:30:40:a5:b7:fa:6c:05:82:2b:ea:77:06:c6:
79:ba:69:75:a7:3a:f6:08:df:92:d5:c1:64:4c:3b:
e1:26:eb:62:0e:88:08:fa:ac:8e:9e:62:64:87:77:
b7:f7:88:5f:c2:c7:3b:71:a5:29:7e:78:f0:ad:7f:
18:32:18:fa:10:b8:84:70:93:68:90:41:27:00:c5:
c5:0e:f8:e8:3d:5c:b0:17:49:ad:af:98:56:d0:b3:
55:8f:0d:8d:50:c8:f7:ae:13:f6:e4:2d:88:75:40:
74:30:e5:45:3d:77:a0:28:be:50:e7:50:67:1d:a5:
5e:96:7b:80:bd:2a:92:3e:c5:2b:b2:50:28:c2:fb:
71:73:c0:62:28:b1:7c:bc:66:32:4a:cb:cd:b0:d2:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D4:C4:98:16:2A:93:AF:B5:E0:BD:D7:F3:1E:20:4A:14:15:14:69
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f9TEmBYqk6-14L3X8x4gShQVFGk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.64.0/22
Signature Algorithm: sha256WithRSAEncryption
77:44:d1:3a:e1:2a:82:3d:20:a8:04:a0:a2:a0:c5:2c:14:8d:
bb:f9:4e:87:89:1f:47:ab:6e:2b:0b:94:14:55:10:77:3e:3d:
5f:8c:43:e1:ea:ed:48:ba:29:2d:db:f2:d2:98:2c:b5:cf:63:
65:55:dc:8a:4e:2d:54:1f:38:e9:cc:33:90:13:2f:fd:fc:95:
de:5e:38:a8:49:a3:ad:c8:55:d2:76:1f:c8:34:9d:12:4b:be:
59:7d:2f:50:66:43:f3:34:d4:24:c3:5d:36:e0:35:4d:0c:ff:
48:0f:f2:03:a1:ad:0e:f8:0c:36:4f:f9:20:64:88:82:f2:5b:
36:00:c0:91:91:d7:cd:da:e1:1e:e9:5d:41:7f:be:7d:25:bb:
cb:42:97:3e:32:48:c2:e3:9d:6d:2c:32:61:7d:db:3b:39:f5:
9d:62:63:75:0f:72:ca:a0:9a:40:fd:52:8d:91:a8:e3:82:6e:
e5:da:f4:c8:ab:ff:e8:34:ff:08:ca:20:3b:31:f2:09:74:56:
8d:e3:9a:30:b5:af:03:6b:6d:b1:15:a2:af:e1:0a:13:60:64:
cc:cb:82:6a:3a:6e:b0:63:78:b3:d0:be:57:e1:d3:8a:59:e9:
09:d7:9d:a3:97:ff:70:36:88:b1:96:e4:bd:25:5c:76:f3:d3:
84:5f:78:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org