Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mc7NJLqpLnmHs3dQ9e_qKuGSsak.roa
File: mc7NJLqpLnmHs3dQ9e_qKuGSsak.roa (raw, json)
Hash identifier: QNf+Xz+mriKKgV3Om3MM/owAqF5m2/n8e6Qwowma5ms=
Subject key identifier: 99:CE:CD:24:BA:A9:2E:79:87:B3:77:50:F5:EF:EA:2A:E1:92:B1:A9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2100
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mc7NJLqpLnmHs3dQ9e_qKuGSsak.roa
Signing time: Fri 25 Nov 2022 04:39:23 +0000
ROA not before: Fri 25 Nov 2022 04:39:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.234.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8448 (0x2100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=99CECD24BAA92E7987B37750F5EFEA2AE192B1A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:7f:eb:a7:8c:48:85:d5:bf:4c:a3:95:6e:
ba:45:18:9e:cc:c7:30:5b:12:6f:ea:bb:15:23:17:
24:8d:a3:52:1f:1b:c7:db:db:d9:83:d8:3d:ce:49:
bb:ab:2e:a0:de:5d:85:6e:9f:9f:be:82:ff:11:41:
dc:64:dc:e7:5b:69:11:9a:c8:5c:f0:19:04:dd:0a:
b4:ec:28:4a:9d:d0:74:1e:6b:c2:ee:6b:b3:13:a5:
11:68:d0:2d:63:0c:38:d3:c4:73:b6:14:4b:0c:1c:
03:ef:f4:af:f4:88:ea:45:00:9e:05:37:82:e8:d9:
ec:46:12:a0:c1:49:f7:8a:16:96:10:47:4d:3f:80:
60:44:92:31:64:3e:fe:c8:e6:c1:01:f7:28:e0:20:
c6:3d:d4:60:7e:7b:a7:32:e9:e9:61:62:ef:b7:e1:
0c:6f:ee:c0:39:f6:60:b2:3e:aa:a6:09:59:d5:0f:
dc:54:12:84:da:47:bc:9e:51:bf:1f:b8:3e:ba:a6:
2e:23:ea:0a:e2:e7:e2:59:f5:86:da:f8:5f:07:60:
f0:20:eb:60:66:ad:b1:95:47:65:c7:de:f2:5a:e9:
ca:4e:48:ea:cd:e4:c2:17:54:6e:14:83:b1:04:b3:
64:d0:0e:0e:e7:c0:14:03:56:24:1f:9d:2a:ec:fe:
b0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CE:CD:24:BA:A9:2E:79:87:B3:77:50:F5:EF:EA:2A:E1:92:B1:A9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mc7NJLqpLnmHs3dQ9e_qKuGSsak.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.234.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:4a:d5:44:a2:a4:26:1d:c2:71:1e:28:69:3e:aa:72:42:fa:
d3:e9:6d:28:72:17:42:bc:d6:47:b7:bc:d4:e6:dd:32:4b:dd:
f5:17:de:f3:0e:bc:0a:a2:96:d2:27:76:33:61:bd:65:60:fe:
66:6a:13:d9:ff:7d:b8:49:07:29:a7:a5:32:01:e0:b2:e7:b8:
5d:33:ac:05:fc:1e:dc:c4:e8:0a:07:66:5f:8e:bd:9d:b5:8f:
f9:ca:01:1a:f5:47:72:cb:97:02:cd:9d:c1:32:f5:e5:c0:6c:
44:9a:a0:a1:e7:56:d2:29:80:e2:57:dc:9b:2f:e8:06:64:ad:
15:44:66:e9:fc:e5:ad:76:a2:4c:9e:6a:63:96:2d:25:bb:12:
45:8e:10:72:1f:02:b3:8e:bf:c7:b4:ba:d7:fc:a5:44:28:04:
ca:c4:83:7d:5e:48:f9:f1:82:a3:f8:d2:cf:a6:3c:d3:98:63:
97:65:13:50:73:64:0b:80:8f:8b:ac:55:e6:bb:1e:09:9f:99:
4e:20:cc:40:ce:9c:ab:95:5f:cd:64:4a:86:06:e5:f7:4b:3b:
f7:30:85:e1:0a:1e:cb:90:db:57:52:5c:d9:b9:5b:b3:8c:1c:
c2:da:fa:5e:ce:d0:53:9b:c3:37:da:37:df:a9:e6:63:09:c9:
ac:db:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:10 2025 by rpki-client