Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mAX2liqolqMyl8t5mtZHIxhDRm8.roa
File: mAX2liqolqMyl8t5mtZHIxhDRm8.roa (raw, json)
Hash identifier: wqrrn8SL/koyzG7vPJXvRlvevLJ5zgRwK2UNfelKi4M=
Subject key identifier: 98:05:F6:96:2A:A8:96:A3:32:97:CB:79:9A:D6:47:23:18:43:46:6F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mAX2liqolqMyl8t5mtZHIxhDRm8.roa
Signing time: Thu 15 Sep 2022 02:53:55 +0000
ROA not before: Thu 15 Sep 2022 02:53:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9805F6962AA896A33297CB799AD647231843466F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:4b:71:b2:fe:2c:eb:ed:1f:8d:61:88:cc:
3d:36:d9:e3:26:b4:1d:05:ce:4c:85:bc:47:49:29:
71:a7:6f:40:63:9d:85:41:c9:82:bf:f0:0b:f1:25:
35:ee:24:cc:d8:31:1c:71:fc:db:c5:ed:f5:13:92:
b2:74:5f:6e:d4:25:8b:3d:9d:b6:f8:aa:f9:4d:67:
c3:52:b8:2f:da:8c:23:4f:db:25:71:97:72:6d:29:
93:ea:e1:61:e3:9f:1d:a4:34:64:bf:ee:11:99:b2:
c6:c2:65:19:a1:4f:a9:09:46:6c:3b:a5:07:59:e1:
20:1f:48:7a:31:0b:9b:fd:7b:81:4f:46:eb:58:50:
90:e9:09:05:ee:13:9d:1a:b5:e0:d9:15:fe:67:16:
cf:58:2b:49:6b:82:dd:f9:96:25:03:a2:29:ad:d9:
c5:3d:b2:c7:d8:15:5d:4c:e6:f4:4c:a9:60:51:aa:
d1:3e:bd:63:e4:be:c3:f0:15:b4:9d:df:88:6a:5a:
72:11:c0:e1:86:af:ea:8b:bc:5a:63:f5:2d:fc:1f:
23:13:83:cb:42:e1:29:11:30:83:5b:e8:68:93:0d:
cd:dc:5d:d8:3d:56:66:f4:a6:26:24:05:ad:1b:eb:
90:e6:ba:ec:31:2c:69:48:90:94:32:6b:12:5f:95:
a0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:05:F6:96:2A:A8:96:A3:32:97:CB:79:9A:D6:47:23:18:43:46:6F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mAX2liqolqMyl8t5mtZHIxhDRm8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.100.0/22
Signature Algorithm: sha256WithRSAEncryption
30:bb:d4:0d:8f:e8:4d:99:43:cd:03:7c:64:98:e5:9d:24:93:
98:d6:26:47:0c:2b:6e:83:8b:1f:ac:a1:96:6f:e2:fd:8e:80:
69:f3:60:87:3b:b2:f5:0e:8f:02:fd:ae:76:f0:e6:a2:5b:c4:
47:89:47:69:ff:72:e3:38:0a:8b:cf:b4:37:9e:1a:c5:05:52:
61:19:2e:9d:2f:0b:2c:a6:f6:b7:44:f9:90:26:bd:18:38:9e:
d9:55:46:c3:75:e2:40:03:3b:b4:d9:5b:8d:5d:02:6d:f9:60:
73:65:5b:2a:81:1c:88:e8:c0:24:b5:f2:37:89:47:9e:5a:26:
e6:7a:21:a3:60:10:ab:2f:91:2e:c0:80:ad:47:5e:25:9a:e4:
c4:92:fa:23:13:07:e3:35:95:96:3e:d1:2b:38:a0:df:3d:24:
6a:c9:47:65:22:04:b5:f4:99:b3:cb:f1:2c:c5:95:ab:fe:f0:
66:b6:ef:06:f3:9e:19:cb:b8:c3:35:3d:e9:bc:27:ad:b7:a6:
79:d5:21:7f:a0:e3:7c:e0:25:9d:af:2d:e7:17:b1:c7:10:3f:
b7:61:89:73:a9:cf:97:79:3f:38:49:8b:5b:56:5b:40:d7:6d:
7a:7d:54:b8:18:b1:7e:93:d5:6c:7f:58:6c:fa:a5:8d:dd:4a:
6b:fe:31:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org