Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kKsv6xLei_LzHYjAjUvPNNsazFQ.roa
File: kKsv6xLei_LzHYjAjUvPNNsazFQ.roa (raw, json)
Hash identifier: gvGeIC7CUAuYWEeDf8rFNsNN02pLE4xdybe54gfumZo=
Subject key identifier: 90:AB:2F:EB:12:DE:8B:F2:F3:1D:88:C0:8D:4B:CF:34:DB:1A:CC:54
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kKsv6xLei_LzHYjAjUvPNNsazFQ.roa
Signing time: Thu 15 Sep 2022 02:52:39 +0000
ROA not before: Thu 15 Sep 2022 02:52:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=90AB2FEB12DE8BF2F31D88C08D4BCF34DB1ACC54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:da:6e:75:2e:0c:83:07:a3:9a:5c:22:23:
a7:f7:25:58:1d:39:c0:8b:d3:d5:b1:df:f0:a4:69:
dc:3a:3c:17:e7:e6:5f:6b:98:16:cf:d7:28:11:57:
87:2a:f0:80:ad:37:cc:d7:f8:c7:d1:62:7d:7a:ba:
19:5f:e9:a8:6b:ab:c5:54:45:5c:d2:59:66:f4:6c:
2f:e3:fb:d7:66:ff:2a:3c:3c:d0:66:7e:f4:65:ae:
88:66:fe:5c:bb:d5:a1:16:16:bd:fa:b5:60:43:97:
f2:9e:0b:69:f0:8f:47:23:20:76:74:ed:b0:d8:89:
5c:43:1d:c8:e2:14:ba:6c:d7:0d:28:05:24:50:4e:
69:10:3d:ce:2a:a4:0e:0f:81:60:a1:a5:3d:18:c8:
de:ff:3b:73:4b:09:44:2a:5d:54:ce:f3:4f:b3:2f:
d2:46:a5:2a:fb:de:95:c4:ef:b7:df:ab:b4:be:9d:
6c:85:67:0b:a5:49:3a:c3:53:06:e4:6a:04:c6:47:
ca:69:4e:cb:06:31:2a:32:a7:96:9e:1e:8f:83:fa:
09:4d:94:fc:a3:71:f8:e8:81:7e:9d:29:c5:43:69:
a6:27:89:fa:8e:69:cb:0c:00:42:29:57:da:77:3f:
dd:e2:94:70:83:6d:78:bf:f6:21:47:05:8b:21:29:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AB:2F:EB:12:DE:8B:F2:F3:1D:88:C0:8D:4B:CF:34:DB:1A:CC:54
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kKsv6xLei_LzHYjAjUvPNNsazFQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.32.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:e8:d4:10:bb:76:47:a5:15:8e:fb:47:83:e3:6a:99:f2:1b:
0d:a6:c6:8b:ab:ae:eb:b9:7f:b7:aa:c3:35:15:c8:b5:e4:11:
e8:c6:4d:46:d4:ea:cc:54:bd:79:d6:d1:9a:db:66:60:ba:79:
98:ed:4f:ec:43:f1:bc:b4:28:7f:0a:60:0a:4d:ee:dc:60:17:
c3:7e:4f:42:48:b5:30:40:b2:53:0f:7d:ad:b0:a3:64:68:cc:
7b:bb:2a:f9:20:38:9f:17:bb:fb:1b:ab:b5:cc:11:d1:98:b2:
06:b5:2a:9d:11:a6:ed:8a:00:91:b6:0b:84:a9:59:f5:52:37:
0e:04:31:4a:e2:f3:12:c6:73:cd:dd:d0:90:f0:53:66:81:6b:
bd:4c:05:99:23:7e:58:91:28:bc:e1:0c:42:4b:0f:95:75:df:
69:24:90:12:99:35:59:8b:04:e6:b2:9d:ba:53:0a:43:51:0d:
1a:6b:8e:e6:c5:f5:c9:02:f5:76:32:63:ed:d5:5b:10:30:9a:
e4:14:f2:c9:0e:41:76:b6:63:72:04:1f:3e:46:80:ec:66:e1:
ca:7c:83:7d:5e:84:59:2c:89:f0:99:78:7a:66:1f:77:27:e6:
70:5f:f1:f2:9f:49:11:92:87:5b:cf:d1:45:32:8d:d1:2b:30:
2e:e1:b6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org