Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m9adnwphtbpmu11jHbklTo3YpHw.roa
File: m9adnwphtbpmu11jHbklTo3YpHw.roa (raw, json)
Hash identifier: r3FLs9OaB3/b5uvKV1uOLFHpREfQ5GAZQZjQZz/urPw=
Subject key identifier: 9B:D6:9D:9F:0A:61:B5:BA:66:BB:5D:63:1D:B9:25:4E:8D:D8:A4:7C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m9adnwphtbpmu11jHbklTo3YpHw.roa
Signing time: Thu 15 Sep 2022 02:44:52 +0000
ROA not before: Thu 15 Sep 2022 02:44:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9BD69D9F0A61B5BA66BB5D631DB9254E8DD8A47C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:3d:50:ab:11:d8:df:7f:da:97:af:94:68:
64:69:e8:aa:10:8c:0e:e4:9b:2d:eb:f0:f7:67:1f:
08:20:90:e2:ce:71:0a:7a:2e:ef:7d:f4:6e:23:f3:
4a:2f:33:53:ad:9a:a4:24:32:b2:17:e7:9f:d1:53:
d7:85:21:d5:d8:ec:be:2b:31:2f:ae:77:4a:7c:73:
0a:31:8e:95:76:b4:3c:0e:d5:bd:35:95:1b:9d:fe:
21:f1:ad:29:9a:0d:48:97:f9:21:4d:0f:b4:f6:d7:
68:61:de:2e:1f:5f:79:30:61:1f:94:59:bf:64:99:
5b:36:5d:d4:32:4f:eb:28:d9:80:82:87:ef:7e:fa:
0c:29:f9:40:d5:ff:07:a5:e5:14:5b:5d:c4:f2:a6:
f8:1c:2a:c8:cf:9e:4e:96:5a:10:f0:e0:c0:34:a8:
72:fa:67:93:48:aa:50:bb:8f:a5:c4:0f:11:72:86:
63:0a:29:5c:53:51:5b:f0:09:83:7c:09:c7:a1:28:
ba:84:b4:4c:a9:e4:9a:59:cf:18:7a:8d:1e:04:03:
9f:a1:ae:d7:0d:f7:9e:f5:0e:b4:7f:c2:3b:e8:fa:
fe:56:b5:1c:d4:e5:7b:45:77:32:cc:5d:30:37:ec:
e1:ad:e1:59:00:e1:76:1a:55:3d:39:fe:db:56:ee:
81:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D6:9D:9F:0A:61:B5:BA:66:BB:5D:63:1D:B9:25:4E:8D:D8:A4:7C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m9adnwphtbpmu11jHbklTo3YpHw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.179.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:12:69:4d:fc:41:c9:ac:31:76:5d:d5:03:9d:7e:62:c7:fd:
53:8c:b2:59:f2:17:b8:85:12:55:70:a4:71:a4:86:d7:63:40:
77:7d:6c:22:b9:1e:14:e3:57:59:44:07:fd:3c:2e:91:de:2d:
f2:c8:9e:c5:65:a0:be:bb:00:3c:21:1d:d1:00:e6:2d:f2:a4:
1a:c6:35:94:92:76:8c:43:24:0a:7c:b8:4d:0c:6e:00:6b:e4:
4d:a8:99:59:4b:6b:d1:f7:9f:c6:d0:26:56:a2:04:e6:f2:5c:
9b:e3:ba:3e:20:e8:57:5b:87:a8:9d:b3:7d:ab:c5:85:e4:17:
8f:24:fb:70:54:45:fe:b9:94:2f:ca:28:7e:93:d0:b5:2b:ca:
e0:b0:fa:41:c2:b1:54:64:52:db:1a:31:75:78:4d:e4:e2:dd:
d6:08:cb:f4:da:e3:9e:88:b0:a0:34:bc:e7:94:51:df:c3:24:
3e:3b:94:a9:00:62:60:24:a9:02:04:22:85:a8:70:db:00:13:
36:cb:cb:aa:83:22:99:3c:b7:8a:bb:80:cc:9f:40:7c:79:f7:
11:70:48:1c:1e:89:b1:00:17:9d:9e:fb:d4:18:a4:05:5a:c4:
63:0a:82:e8:34:76:09:2f:26:fb:7c:c9:21:ee:f8:64:0c:5c:
f4:cd:34:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org