Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ksdJTy4CUzydWMOxR4zw-1E8_us.roa
File: ksdJTy4CUzydWMOxR4zw-1E8_us.roa (raw, json)
Hash identifier: xoG4KTA4/pSVyliiXFxG6Pkv/4QDeF+jyiG9Mr7Udp4=
Subject key identifier: 92:C7:49:4F:2E:02:53:3C:9D:58:C3:B1:47:8C:F0:FB:51:3C:FE:EB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A8A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ksdJTy4CUzydWMOxR4zw-1E8_us.roa
Signing time: Wed 29 Sep 2021 02:45:28 +0000
ROA not before: Wed 29 Sep 2021 02:45:28 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6794 (0x1a8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:28 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=92C7494F2E02533C9D58C3B1478CF0FB513CFEEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:a7:47:2d:a7:57:c2:ce:3c:b2:f9:9b:de:
56:27:f2:75:5b:8b:90:7e:a8:dd:77:a3:2a:36:df:
84:f9:b1:8e:7b:ef:4b:ec:dd:6e:9b:99:f6:c0:8b:
05:59:a4:e1:9a:dc:1b:5b:28:ec:3b:92:4c:24:6e:
8d:97:fe:ab:52:24:c4:59:b7:d9:7a:87:e2:14:20:
9f:63:bc:a2:30:6a:ee:a3:98:3c:73:17:ed:e6:a5:
fd:3a:fa:64:b2:60:47:86:a5:45:5d:2d:c4:88:a2:
40:5d:e0:85:d8:44:8e:c5:fa:77:9e:34:e5:a2:b6:
07:ae:52:e4:5b:6f:71:f8:5b:5e:8e:4a:a6:bd:bb:
41:9d:80:7e:5a:e9:e6:21:7e:5d:17:f8:d9:1d:2f:
7a:82:57:0d:86:d5:46:6c:a2:1d:36:56:3a:5d:e1:
5c:36:38:e8:cc:3d:c6:91:71:83:30:45:26:40:4f:
22:c2:5d:18:d0:d6:26:1d:ea:cc:a8:b5:b0:64:64:
93:72:35:46:47:a7:b4:9b:a4:a2:eb:cd:99:df:a9:
5c:33:e3:2d:ca:9c:a0:08:93:f3:5c:67:7d:c3:37:
cc:66:e1:cb:93:dd:24:a7:b8:61:17:3f:a6:91:2e:
2f:50:bd:e3:88:d9:79:b6:66:a9:cc:2c:60:11:fa:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C7:49:4F:2E:02:53:3C:9D:58:C3:B1:47:8C:F0:FB:51:3C:FE:EB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ksdJTy4CUzydWMOxR4zw-1E8_us.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.68.0/22
Signature Algorithm: sha256WithRSAEncryption
62:0f:99:c5:e7:43:79:67:3c:3a:e0:fc:3b:fc:2c:1d:79:da:
45:23:76:00:a6:c8:a1:59:72:a1:2d:4c:d1:98:02:9e:37:d9:
a7:b7:53:56:b2:9d:34:c4:58:08:9b:c9:4a:0c:76:d4:e0:d9:
45:4c:15:7f:1c:e0:1b:59:05:0b:0b:a8:7b:40:19:5e:18:2a:
ff:42:22:3a:e7:eb:fb:7f:d4:bf:9c:d1:93:13:42:04:82:2b:
e9:9f:4f:ce:eb:e9:d4:90:66:b5:5e:2e:d0:2a:8a:28:f0:97:
15:94:4f:a2:29:12:36:d3:9d:48:9d:ea:ed:74:20:2d:c7:1a:
3b:f9:b3:35:9a:91:10:7e:54:70:a8:e8:3d:f6:b7:28:8f:ca:
54:05:c7:74:c4:33:43:8f:de:3d:49:30:6a:f6:6c:da:c9:18:
56:6f:69:22:fa:39:82:56:70:24:85:e0:48:e9:32:4f:3a:78:
e9:a1:f3:55:f2:cd:02:36:7b:77:2b:96:b4:e6:06:8f:88:77:
05:be:03:66:e8:c4:e2:f1:be:d2:83:cb:52:26:e2:92:c1:82:
a4:a1:97:95:bc:d5:1b:19:2d:91:78:03:fd:b3:78:5f:ca:2a:
8d:7f:3b:4c:51:8d:c9:83:62:c1:bf:7a:25:10:74:92:fe:32:
ff:b7:0c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org