Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ipzaVLGs5KOZ2rjkGRNS3pZbdr4.roa
File: ipzaVLGs5KOZ2rjkGRNS3pZbdr4.roa (raw, json)
Hash identifier: 9I+h4NFmR7UPmwCbucrJxnxzIdETxG5Tsg+Pnljw+Q8=
Subject key identifier: 8A:9C:DA:54:B1:AC:E4:A3:99:DA:B8:E4:19:13:52:DE:96:5B:76:BE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ipzaVLGs5KOZ2rjkGRNS3pZbdr4.roa
Signing time: Thu 15 Sep 2022 02:53:46 +0000
ROA not before: Thu 15 Sep 2022 02:53:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8A9CDA54B1ACE4A399DAB8E4191352DE965B76BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:0d:7e:7a:3b:10:46:da:db:27:27:ab:8d:
10:a3:b9:d9:2e:ff:29:a9:05:98:83:97:f1:cf:1c:
8c:dd:4a:d7:8c:de:68:b1:ac:d0:4f:c2:81:91:cd:
33:f1:33:6e:7f:6e:f2:a9:e1:e3:83:1f:2f:c5:d7:
f9:e6:84:37:27:ad:8f:bc:ed:44:6c:85:88:86:09:
3d:e7:09:e3:f8:b8:cf:ae:b0:1f:ce:a1:ec:3a:99:
c3:7c:49:c5:fa:ce:69:8c:ed:20:7e:57:f3:b5:c6:
3e:8d:aa:8d:83:db:64:23:4b:c7:ca:16:45:df:5f:
ee:a6:86:e1:8c:a9:a6:83:02:b7:0d:f3:0a:d4:de:
fe:84:e3:61:0d:2b:c0:e4:5c:ff:7c:cb:27:6d:29:
f0:6a:93:1e:2d:22:d1:ef:19:2e:2a:d8:29:c5:24:
92:6d:1c:02:7f:eb:4b:c7:e5:14:06:1b:23:8a:8e:
5c:51:ca:fb:73:39:d8:31:45:65:00:34:86:1a:ea:
cb:1c:f0:c1:46:b6:8e:c9:fd:5f:67:98:7a:2f:85:
15:2d:f1:7a:a3:7c:32:bd:8c:e9:b4:56:4f:21:6b:
f8:70:00:68:38:08:37:60:4f:77:d4:ea:89:7e:67:
8d:6e:6f:65:86:b0:82:7f:2f:60:0b:df:23:07:f2:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9C:DA:54:B1:AC:E4:A3:99:DA:B8:E4:19:13:52:DE:96:5B:76:BE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ipzaVLGs5KOZ2rjkGRNS3pZbdr4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.160.0/22
Signature Algorithm: sha256WithRSAEncryption
00:10:80:85:b2:59:aa:79:d9:3f:45:9f:53:66:a4:f1:6a:53:
a4:4f:2b:80:5b:d1:2a:48:e7:25:47:87:e3:68:fa:ec:5f:ef:
69:b4:1c:73:b1:f9:a5:b4:d7:9c:77:f3:b8:e4:84:3f:d2:b6:
31:f9:11:f1:02:dd:c7:00:22:45:9b:bb:2b:53:24:16:80:af:
e6:63:3b:61:e3:58:84:cb:88:d1:e0:0f:5d:f2:08:62:9e:58:
d6:78:88:d6:2e:bf:9a:d0:a6:3d:93:30:21:91:c2:4d:15:08:
28:e7:b6:94:e2:05:41:14:a0:a5:d2:9a:98:6c:43:7e:e7:69:
a6:c8:87:a8:24:f7:c2:64:24:c1:ea:3e:b3:46:77:df:22:59:
b1:e5:7f:22:e5:d0:66:d5:7a:6e:25:b2:65:42:56:99:c0:c2:
6d:2c:7a:ed:ca:26:3c:47:f4:d0:98:29:58:1a:c1:c2:d1:c9:
ab:5d:09:fe:64:62:a7:b3:48:ed:3a:ac:31:ce:91:e2:01:8d:
c7:de:00:db:2c:f9:27:3e:33:93:ca:60:81:a4:5d:8a:6a:82:
ab:c9:55:ea:b6:5a:33:a7:ca:f1:55:5b:fd:1d:97:ec:e7:81:
67:59:dc:51:7a:93:60:c9:53:9c:22:99:07:1b:0c:f2:3d:33:
90:52:45:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org