Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l2ijocV4D1EekxML0jD-qSTfCiw.roa
File: l2ijocV4D1EekxML0jD-qSTfCiw.roa (raw, json)
Hash identifier: GOKdxDmsIIYPdw9tCgglY6M9BfVXgc2PjILxnmpArTE=
Subject key identifier: 97:68:A3:A1:C5:78:0F:51:1E:93:13:0B:D2:30:FE:A9:24:DF:0A:2C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 210A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l2ijocV4D1EekxML0jD-qSTfCiw.roa
Signing time: Fri 25 Nov 2022 04:39:26 +0000
ROA not before: Fri 25 Nov 2022 04:39:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8458 (0x210a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9768A3A1C5780F511E93130BD230FEA924DF0A2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:4c:27:ae:b2:65:13:8a:37:c2:c4:6a:8e:
74:f6:b2:33:6e:8c:1b:01:5d:70:8c:f7:dd:ca:eb:
ef:17:7f:48:e9:d7:0b:62:55:74:a0:e2:fd:d3:ec:
69:ae:a3:7f:ed:a7:d5:d3:37:fd:2f:b9:67:2f:c5:
69:9c:81:a7:0b:08:b6:d0:70:de:57:fd:ac:1f:28:
51:0d:7a:a7:f1:ac:85:44:e2:82:c6:d4:28:5a:34:
50:7e:4a:14:af:3b:fe:32:b2:8d:c3:ed:c2:92:e5:
6a:8f:4f:7d:b5:5e:e9:73:93:7d:da:44:e3:e8:97:
b2:56:25:fd:7f:21:23:ab:f6:81:70:67:ef:8d:4b:
4e:46:31:53:b5:53:b5:78:d9:06:b1:da:06:ad:e7:
23:82:36:aa:5b:ef:d1:5b:fa:af:b9:08:2b:cb:78:
81:95:a1:d5:1e:16:b0:8a:4b:e2:27:16:c3:64:ba:
ee:e3:99:f7:e0:2d:bb:5c:d0:b5:12:fa:37:8a:ef:
c6:b7:38:9e:8e:99:0b:e4:58:0f:89:c9:ad:c0:a8:
27:82:c9:a1:55:21:fa:f5:5b:a3:48:17:e9:ca:fa:
43:23:1e:9b:bf:a5:7c:fa:b2:99:77:50:bd:8b:76:
fa:88:3b:34:b1:88:a6:98:ef:ca:8f:55:6f:a8:dd:
b1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:68:A3:A1:C5:78:0F:51:1E:93:13:0B:D2:30:FE:A9:24:DF:0A:2C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l2ijocV4D1EekxML0jD-qSTfCiw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.128.0/18
Signature Algorithm: sha256WithRSAEncryption
09:06:92:90:25:25:21:61:d2:f2:b8:ea:82:c2:dc:53:68:0b:
2d:57:5e:d5:bb:a7:6f:6f:82:4c:c9:b3:b9:8e:a9:59:c8:c0:
4d:1f:2a:7d:3b:c3:be:b7:eb:93:a3:8b:20:c2:79:91:ac:ab:
d9:9c:08:a6:00:83:c9:14:72:76:e7:92:66:68:23:91:6a:aa:
db:e1:64:60:1a:6b:3f:d6:fd:30:fd:e4:4f:d8:ac:ad:e4:d3:
ce:a5:61:c4:0d:2d:43:ed:20:2e:3d:30:b5:88:af:99:7b:da:
41:be:c3:3c:42:1d:23:f7:cc:d9:06:10:80:3a:0f:4d:d4:1a:
92:0c:0c:b5:0e:52:ea:e7:11:29:ee:85:91:03:c5:13:32:7c:
b6:5f:12:a4:c6:df:13:f3:42:21:5a:71:aa:6c:ef:b6:52:cb:
0f:66:b7:75:65:1a:a4:3e:2d:6f:bf:51:0c:8a:10:e3:57:3f:
54:38:91:1a:73:8a:61:ac:51:0b:d6:7f:26:29:e9:19:44:e3:
a2:ba:5c:c3:3e:b4:77:22:c7:33:9d:5e:16:69:cf:cf:09:52:
33:4f:06:bc:d6:89:cf:ef:28:19:90:1f:fe:db:05:b7:92:6e:
6e:24:fe:66:44:ae:7d:23:76:73:5f:52:03:97:83:9b:2b:a8:
53:70:e4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org