Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lRKHHIbjKx_5s6cn1w4607LtuvA.roa
File: lRKHHIbjKx_5s6cn1w4607LtuvA.roa (raw, json)
Hash identifier: RHXda0iYeCPP+rV0EShGrw/VdD6iSqqf3fiaN7P4pkI=
Subject key identifier: 95:12:87:1C:86:E3:2B:1F:F9:B3:A7:27:D7:0E:3A:D3:B2:ED:BA:F0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2214
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lRKHHIbjKx_5s6cn1w4607LtuvA.roa
Signing time: Fri 25 Nov 2022 04:40:44 +0000
ROA not before: Fri 25 Nov 2022 04:40:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 118.232.196.64/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8724 (0x2214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9512871C86E32B1FF9B3A727D70E3AD3B2EDBAF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:52:c5:01:36:01:15:14:d8:e0:1d:03:84:
fa:e7:68:65:d5:d1:0f:d9:b3:fd:02:a1:e7:ba:40:
20:fa:e6:e5:a9:f6:2b:e5:55:00:20:0f:fb:a9:5a:
7e:73:a4:6b:26:e7:96:b1:ad:12:77:52:b1:0e:14:
31:e5:de:82:5e:ea:26:86:49:23:42:7b:c8:33:79:
5a:0d:67:63:65:fd:1b:c5:7b:8a:44:b0:97:c4:54:
2e:e5:ed:0b:81:5d:72:37:a6:de:e2:46:a7:ec:52:
f2:7d:e8:15:b1:46:dc:7f:47:2e:8a:9c:da:a8:42:
5d:1e:bc:e3:10:26:c0:5d:35:0d:ec:b9:16:39:2d:
ad:2e:8c:78:4f:5a:6f:99:0b:55:3b:4a:25:f1:29:
92:8b:e7:1a:62:d7:68:44:4e:d0:b9:fd:6f:e2:06:
3a:0c:49:be:67:03:40:95:47:e8:b6:69:67:34:f6:
69:22:3e:47:92:27:04:13:2e:95:35:34:73:fe:6c:
24:3a:0a:26:03:15:a9:15:84:d7:26:61:3a:04:5e:
dc:92:5a:ea:98:7a:41:fd:d5:91:29:82:98:9d:bc:
9a:1e:d0:3a:ef:52:db:b9:78:70:20:b0:9b:04:3e:
11:9e:28:71:1c:9b:5c:35:3a:43:e4:c3:0e:5d:05:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:12:87:1C:86:E3:2B:1F:F9:B3:A7:27:D7:0E:3A:D3:B2:ED:BA:F0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lRKHHIbjKx_5s6cn1w4607LtuvA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.196.64/26
Signature Algorithm: sha256WithRSAEncryption
ab:38:4f:c1:58:d1:f7:e0:e5:5c:82:7b:d0:0f:1d:4c:c1:a4:
22:1a:c7:9c:4b:7b:b5:3e:22:fa:37:cb:0d:c4:30:12:ea:92:
39:c8:9c:ee:56:43:1a:1a:02:f5:1a:5d:2d:b3:81:f4:5b:9b:
57:0d:23:33:bb:2a:1e:91:6f:98:85:11:a1:12:a5:1f:cb:8f:
67:19:35:e9:70:5d:d5:d7:da:54:b1:65:5e:a0:f4:28:5f:cd:
a5:e0:25:6e:32:cb:14:9a:1a:56:30:f0:3b:7e:dc:12:0d:13:
fe:50:86:26:f1:91:35:e8:7c:4c:e0:69:31:27:f1:4c:c7:7a:
39:1d:58:ba:2a:a2:b3:4e:ee:1b:2a:e2:b8:d5:6f:e3:53:43:
3d:d5:dc:e4:e2:b4:41:9e:c9:86:6a:6b:1a:73:a4:15:07:64:
db:bd:3a:55:66:35:6e:d6:5b:52:6a:f9:30:c6:34:5e:99:a0:
6b:fa:d4:b9:c7:ae:fd:59:b3:bf:50:d1:24:0e:c6:9a:16:f0:
cd:ed:eb:e7:f3:1b:01:9a:6e:ba:5b:bc:90:b9:16:eb:52:90:
b8:27:09:f4:06:ab:1f:28:32:ee:55:a7:07:69:fc:ec:22:35:
7f:dd:8b:09:35:65:f8:92:31:32:ad:c8:44:40:8e:ac:05:d3:
04:bd:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org