Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n0rfSpBEgC0xjGM7vOPCq6hIfIQ.roa
File: n0rfSpBEgC0xjGM7vOPCq6hIfIQ.roa (raw, json)
Hash identifier: 0g40gRVJXLkJWrYlGi9XeqnreiE+63Gj829iwUTwdXk=
Subject key identifier: 9F:4A:DF:4A:90:44:80:2D:31:8C:63:3B:BC:E3:C2:AB:A8:48:7C:84
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21B2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n0rfSpBEgC0xjGM7vOPCq6hIfIQ.roa
Signing time: Fri 25 Nov 2022 04:40:12 +0000
ROA not before: Fri 25 Nov 2022 04:40:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8626 (0x21b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9F4ADF4A9044802D318C633BBCE3C2ABA8487C84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:2e:91:4c:53:22:f0:70:b3:59:c3:9f:47:
84:09:da:be:4c:b9:1a:7f:40:d3:c1:33:97:36:2d:
e2:a2:aa:95:e3:78:96:32:9c:43:e4:22:cd:d1:1c:
1a:b0:b8:43:5f:d9:51:9c:9c:20:45:bf:31:dc:fa:
6c:5c:f6:3f:09:f7:77:fe:e3:44:84:1b:60:e3:b2:
6b:93:b1:aa:97:fc:1a:8b:c4:be:a4:2f:40:a4:c1:
82:0f:6b:ab:04:fb:7d:25:b5:42:bf:6f:cd:e1:3f:
df:f1:2a:6d:75:36:65:af:a6:66:1c:53:12:36:eb:
90:18:b5:fb:81:85:39:62:f6:ba:6c:f3:cc:78:02:
e9:32:4f:c9:35:e6:f3:48:de:3f:67:97:4e:3f:fe:
87:03:50:b5:8a:76:42:68:d1:20:60:e8:6d:ae:4f:
08:d3:36:95:25:21:6d:ff:61:33:c1:f3:64:d5:c8:
91:09:d1:21:96:c9:f1:7f:89:c7:c5:fe:dd:a4:4a:
7f:87:fa:c0:34:70:b3:e0:04:9d:3d:6d:fa:8c:29:
ab:e1:69:53:8a:6e:f0:ac:e1:fe:73:49:32:c3:2e:
eb:ed:b1:f9:7f:55:3e:71:90:75:1a:06:2f:58:68:
3e:77:e2:6f:4d:ee:2d:6e:83:60:89:b4:f2:76:a1:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4A:DF:4A:90:44:80:2D:31:8C:63:3B:BC:E3:C2:AB:A8:48:7C:84
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n0rfSpBEgC0xjGM7vOPCq6hIfIQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.160.0/19
Signature Algorithm: sha256WithRSAEncryption
84:6f:1b:17:03:55:12:ea:e4:29:83:21:06:9a:4f:83:c8:04:
8c:46:cf:02:e0:5e:ce:53:56:48:75:21:07:a4:88:88:d4:82:
ea:f7:9f:8e:6d:ab:23:d1:52:94:7d:5e:eb:1d:cc:0c:b1:a5:
f7:d4:c5:b2:a4:2c:77:d3:55:5a:1c:5e:d1:6a:b2:ee:eb:32:
af:e8:80:1a:44:71:8b:b0:91:fd:cd:4b:a9:eb:b0:aa:5e:58:
37:83:98:f7:79:ca:19:48:70:b5:34:96:9b:f1:fc:9e:ab:9c:
f9:0f:e5:a8:97:cd:a4:fb:c3:3f:fb:33:5b:7a:86:66:43:ca:
87:cd:05:f7:43:81:40:5f:61:93:f9:78:19:07:46:0f:63:ee:
b3:48:e0:78:bc:02:b9:3d:a2:33:05:9a:de:57:8f:82:bf:35:
5d:ea:2a:2e:66:9d:2c:04:47:9c:43:b8:07:6b:99:8e:47:24:
a6:a2:f7:d6:bd:fc:5c:bb:67:16:31:47:98:3c:98:ee:e3:ed:
78:de:43:78:6d:04:e0:d2:5d:78:89:27:3d:14:c2:a4:89:35:
9b:e9:99:3f:6b:d8:17:db:b5:c2:a0:fe:e4:bf:7a:29:c8:60:
bb:b2:cd:9f:20:1e:b8:d1:fb:fd:95:1a:0d:54:f6:65:40:ab:
b4:94:4a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org