Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kwX0MnfDd0G5ucK46wEG0843OJM.roa
File: kwX0MnfDd0G5ucK46wEG0843OJM.roa (raw, json)
Hash identifier: M5Lkg7mdjb3NaAPa4ca/XUNHqL0Aaw+HW3BYDGVpKLA=
Subject key identifier: 93:05:F4:32:77:C3:77:41:B9:B9:C2:B8:EB:01:06:D3:CE:37:38:93
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C5A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kwX0MnfDd0G5ucK46wEG0843OJM.roa
Signing time: Wed 29 Sep 2021 02:47:39 +0000
ROA not before: Wed 29 Sep 2021 02:47:39 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.242.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7258 (0x1c5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:39 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9305F43277C37741B9B9C2B8EB0106D3CE373893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:74:73:cb:53:a2:38:0c:a9:18:29:2d:41:e7:
fa:30:57:ec:d9:30:73:1b:42:08:51:9d:64:69:8e:
e4:e0:6b:ec:77:4a:f2:a8:a8:5f:90:25:9e:6d:9d:
a0:96:3d:ee:33:ad:9d:12:00:6c:a1:f9:08:89:4b:
8f:d9:0a:57:87:5a:38:3a:26:db:3b:82:4e:f3:bb:
d0:44:bc:a8:87:86:44:aa:3f:bb:4a:76:5b:d4:be:
e4:25:e7:12:10:28:5d:76:7d:21:3c:03:ef:78:46:
af:f1:e9:23:a6:ca:14:79:29:dd:84:f1:9e:04:b1:
fe:d3:73:5f:29:a5:57:6f:89:e6:d4:2b:2c:f7:45:
47:c8:d6:1f:36:70:de:7a:16:a1:95:dc:c2:52:63:
16:f9:55:0f:cf:15:45:dc:e3:1c:db:fc:96:e2:db:
10:2e:e5:8f:47:44:cb:03:87:5c:66:7f:91:84:4e:
85:ec:92:bd:d5:70:e7:ff:1c:69:c8:b7:ba:c4:ea:
28:ee:4f:97:4e:9a:6e:0b:f9:bc:5d:d7:b6:8d:a1:
f3:19:9f:bc:a9:a7:3e:3a:a6:ca:fb:f0:2e:a3:7d:
61:f3:74:22:c9:3f:95:40:31:21:7c:67:9c:70:c7:
e6:d2:bc:b8:b5:91:39:6d:96:17:b2:fe:07:7d:d3:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:05:F4:32:77:C3:77:41:B9:B9:C2:B8:EB:01:06:D3:CE:37:38:93
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kwX0MnfDd0G5ucK46wEG0843OJM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.242.0/23
Signature Algorithm: sha256WithRSAEncryption
72:b0:30:ae:9c:fb:e4:58:b5:7e:c8:cc:4e:71:36:df:5e:e2:
67:98:ea:6d:fb:f1:c5:f9:25:ad:85:9c:6d:f5:09:12:94:aa:
27:9c:21:91:16:f1:5d:ea:27:48:b0:6a:9e:1e:1b:f2:ca:be:
ce:f4:7e:e8:81:77:66:6c:a6:fc:0c:d4:7e:c8:46:cd:81:a0:
4c:87:7e:25:93:cb:05:42:43:b3:64:ef:c7:de:6c:f4:7a:65:
70:3e:45:b7:dc:38:de:56:10:61:f1:99:10:b4:dd:a2:7a:4b:
4f:a3:25:78:a2:48:1f:30:f2:70:e2:8a:03:d0:b2:75:eb:ce:
0a:d7:6e:cb:85:61:b5:8a:2c:eb:35:91:f9:08:c8:df:b3:46:
77:19:c6:87:49:f9:3e:8e:89:d4:51:79:e1:ee:10:51:e1:40:
78:01:c4:0a:f5:02:96:6a:93:53:97:3f:a5:2d:a5:38:d5:fe:
ba:ed:09:9e:95:01:96:8e:d2:c2:30:d2:c6:a8:0f:65:33:44:
6c:6c:76:48:8f:4f:52:27:6d:2a:fb:20:a8:1f:d4:d6:8c:16:
53:10:a5:3a:27:3f:39:c5:34:e4:8c:df:23:bb:9a:2d:a6:f8:
4c:c6:38:12:fb:54:b2:cc:39:4b:0e:58:73:3d:2a:f7:17:cb:
e7:a1:ee:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:15 2025 by rpki-client