Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mqQr3PsAMW8x4kgqQ5ERg0XOssU.roa
File: mqQr3PsAMW8x4kgqQ5ERg0XOssU.roa (raw, json)
Hash identifier: ovyWl54DAhuJiYiLT/CzS0WI1oA667Lp+x63bWl9IPU=
Subject key identifier: 9A:A4:2B:DC:FB:00:31:6F:31:E2:48:2A:43:91:11:83:45:CE:B2:C5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mqQr3PsAMW8x4kgqQ5ERg0XOssU.roa
Signing time: Thu 15 Sep 2022 02:46:35 +0000
ROA not before: Thu 15 Sep 2022 02:46:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9AA42BDCFB00316F31E2482A4391118345CEB2C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:d7:60:54:b0:a6:51:87:af:37:87:c1:bf:
7b:84:db:30:f7:5b:a2:53:86:68:3f:e7:e8:1a:a3:
ce:0f:c2:38:40:5d:c5:36:1e:5a:bb:ab:ea:80:e5:
92:3a:32:c0:4d:bb:1a:d4:c4:d1:4e:6d:00:26:af:
9d:e3:56:dc:ca:e1:b2:d7:50:42:5c:cd:78:29:6a:
27:09:ab:99:34:11:53:f3:1f:f1:55:e9:89:2b:41:
e4:b4:da:60:6f:5d:e4:87:23:fc:b9:d9:22:fa:6f:
e6:09:70:05:26:ac:09:67:36:3f:62:78:95:d0:2e:
99:c6:17:f6:87:9b:1f:d9:72:81:df:26:6e:fd:03:
5e:aa:17:50:d7:9e:97:20:55:b2:89:9a:58:c6:a3:
d0:b2:34:a4:c0:31:aa:8a:fc:2c:b5:35:6e:6e:f4:
73:ec:e7:37:d7:6b:4d:d7:aa:18:ac:4e:5e:14:a7:
c3:4d:4a:71:40:48:cf:0b:d3:92:5b:ba:be:0a:40:
6c:a6:8a:54:19:f9:12:b3:d6:4d:4f:6f:cb:66:ce:
1d:d9:b0:45:79:68:2d:b5:23:fa:9d:fb:10:9e:08:
f1:c6:13:ab:69:27:70:73:c8:f5:ab:28:22:9a:e8:
bf:df:ae:8d:99:eb:6a:3f:90:1a:e8:ac:15:b2:65:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A4:2B:DC:FB:00:31:6F:31:E2:48:2A:43:91:11:83:45:CE:B2:C5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mqQr3PsAMW8x4kgqQ5ERg0XOssU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.245.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:34:0b:89:ba:a4:45:fc:12:4f:51:80:db:9d:57:8b:2a:af:
09:a6:b1:16:8c:3f:68:90:61:a1:1b:49:d3:5f:8f:4d:74:de:
4f:bd:4c:49:de:46:e8:3a:3f:c6:9b:21:10:2e:18:c4:95:73:
c9:f3:01:56:e3:f5:23:ca:0f:e5:cd:e8:40:5a:c1:21:f8:c7:
f2:48:14:89:f2:9d:43:f7:f5:49:c2:5a:85:54:fa:3d:63:58:
97:0e:ec:2c:91:a5:0b:c9:97:4f:c4:99:98:9b:05:fe:61:a3:
03:72:49:b1:9f:45:cc:11:df:2f:62:77:98:73:ff:9a:38:25:
c8:f0:81:9f:c4:7e:85:87:c1:dd:0b:97:ca:6e:43:8a:a6:86:
4c:0f:54:cc:ff:0f:85:c0:8a:44:b2:72:f3:b4:12:46:f1:1e:
91:63:eb:63:9b:8d:e1:f2:b5:16:ae:0b:a0:25:6c:b3:54:ce:
dd:2d:88:4e:3f:80:46:ea:a6:0e:e7:f1:c5:39:9d:19:6e:c2:
07:62:a3:a8:e1:de:ef:c8:be:fc:56:fd:54:30:19:c0:ee:89:
8c:b6:98:25:ac:b5:5e:83:d1:63:00:f9:ef:1f:d8:57:28:b4:
2d:0c:bc:95:a4:aa:a5:e1:e8:53:75:52:21:b5:08:6d:7a:e6:
fc:f3:34:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org