Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mZCeLwb3mlZFc0lLRjbHRkcRmSM.roa
File: mZCeLwb3mlZFc0lLRjbHRkcRmSM.roa (raw, json)
Hash identifier: T9qZFi2bGhhRPAu6DNSadGVLye8nH+B05Gm8C89f7rE=
Subject key identifier: 99:90:9E:2F:06:F7:9A:56:45:73:49:4B:46:36:C7:46:47:11:99:23
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mZCeLwb3mlZFc0lLRjbHRkcRmSM.roa
Signing time: Thu 15 Sep 2022 02:46:35 +0000
ROA not before: Thu 15 Sep 2022 02:46:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=99909E2F06F79A564573494B4636C74647119923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:4e:9c:a5:0c:9a:56:60:15:73:9d:31:bb:
1a:f3:a5:9d:61:a5:d2:19:d8:a5:f6:d3:95:c0:7f:
82:06:57:48:94:41:47:fb:bf:79:42:1b:2a:c6:e0:
f7:b7:9f:3c:aa:ed:70:99:8e:3c:89:98:03:bb:3d:
8f:92:b6:0e:06:58:23:32:f0:88:62:11:79:89:5d:
25:ba:e1:86:eb:56:11:bf:28:8d:ac:9d:7c:8e:0d:
1e:b9:f3:52:9c:1d:6b:ec:b6:01:1b:da:fd:52:e2:
6e:c3:29:4c:07:52:42:f4:54:b4:01:bd:92:2f:9d:
6e:f6:1b:b7:40:51:4c:c5:a6:f7:c1:4d:23:48:99:
97:66:2a:72:72:48:b6:85:ca:7c:4f:11:3e:64:fb:
84:00:f1:1d:52:ae:07:9b:9d:8a:72:e6:f4:1f:d6:
be:75:79:01:bc:0d:16:db:fe:ab:b3:70:d2:e6:65:
37:b0:5b:16:2e:7d:fb:38:93:78:5b:ee:91:d1:93:
e5:3d:b6:0a:ce:f8:e7:3e:9e:00:73:39:a6:89:18:
8d:4c:98:f7:cb:4b:7f:6e:65:07:e1:66:2a:b6:45:
50:a0:77:98:e7:e7:61:23:b2:40:e3:e4:7d:59:53:
a0:11:1b:49:d7:b1:2b:96:2c:6c:21:72:94:c2:65:
21:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:90:9E:2F:06:F7:9A:56:45:73:49:4B:46:36:C7:46:47:11:99:23
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mZCeLwb3mlZFc0lLRjbHRkcRmSM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.128.0/19
Signature Algorithm: sha256WithRSAEncryption
2f:a4:b2:c5:c4:f8:3c:5d:8d:3f:58:f8:aa:c2:7c:1e:8b:b9:
db:ff:6c:4e:36:39:fc:a9:1a:16:5c:38:88:30:c2:ce:a3:91:
c5:f8:e3:e4:e1:ff:00:49:58:99:cc:1b:30:d2:a5:27:a5:dc:
46:e5:f6:71:1e:7a:1c:56:16:f2:30:0a:f2:c6:26:02:46:1b:
1a:f7:69:3e:c1:76:0c:15:06:11:89:58:ae:34:45:96:76:b2:
b9:df:c6:fb:45:f0:0d:d1:c0:b7:1c:6d:b5:44:22:81:eb:61:
da:cc:df:c0:a3:52:b1:d5:e5:90:55:f9:d6:3b:b2:e8:d4:b1:
2d:95:61:6e:3d:d1:6d:cb:9c:09:ec:32:bd:23:2c:2c:f8:35:
43:de:1c:19:17:75:df:1f:a0:1a:e8:32:f0:94:c6:62:c5:a7:
47:d5:33:50:e6:6c:36:a8:91:90:d2:2b:ad:26:e2:37:8e:a1:
77:57:69:20:60:32:ff:d5:0d:15:93:70:39:ef:04:b8:2b:f7:
cf:4e:76:01:43:ae:a5:a4:d3:95:4b:9e:64:22:e8:c5:82:24:
b2:28:4d:e7:7d:48:4e:2d:96:99:99:f2:e7:53:87:ba:90:75:
fe:20:03:5b:a4:b2:92:a3:34:03:e4:8b:91:48:a0:ab:1e:d7:
d5:2f:66:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org