Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o6Z8-4EhTfzGIOhmOqe5bSZUY-U.roa
File: o6Z8-4EhTfzGIOhmOqe5bSZUY-U.roa (raw, json)
Hash identifier: O7EyL6D7fKLoR3+2IOIdGROvyvw5zkWkcrf5H3Q48rg=
Subject key identifier: A3:A6:7C:FB:81:21:4D:FC:C6:20:E8:66:3A:A7:B9:6D:26:54:63:E5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o6Z8-4EhTfzGIOhmOqe5bSZUY-U.roa
Signing time: Thu 15 Sep 2022 02:52:25 +0000
ROA not before: Thu 15 Sep 2022 02:52:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A3A67CFB81214DFCC620E8663AA7B96D265463E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:47:28:82:79:bb:c5:b0:36:0d:9a:40:04:
71:ef:b1:a4:58:ce:76:4e:06:07:ef:a1:4a:11:b7:
44:b9:ac:a8:aa:39:b9:f9:7a:58:93:88:df:c3:ea:
6b:5c:d0:48:a6:81:df:2e:54:93:69:84:75:0e:5e:
c2:ac:31:ee:e8:d2:47:07:1f:20:62:63:54:fe:f6:
ff:8c:e3:0c:2b:54:f6:ad:4e:07:1e:da:e5:72:0d:
0d:fc:4c:fe:0a:66:24:aa:c7:5c:1a:3f:2e:49:98:
3f:b9:a9:0a:32:b5:ba:1d:4e:66:fd:ed:46:da:4e:
56:f1:81:60:a7:5a:19:7e:99:57:be:4f:68:0a:43:
e2:1d:f1:07:3e:43:97:1f:3e:a5:be:fa:20:33:22:
ea:17:41:ce:2b:5f:a7:ce:39:50:54:e1:77:10:7c:
a0:bd:e6:2b:ca:fe:f5:72:84:1a:03:f3:42:c5:7b:
7c:b7:20:7a:dd:91:3a:8d:d1:86:95:0f:27:f8:9a:
1e:d8:ab:02:da:94:c8:3e:f4:dc:69:a1:84:bc:73:
93:7d:7f:4b:9d:a9:55:e8:01:25:3a:bc:45:23:fa:
93:d2:5c:5d:03:6d:dc:79:2b:79:30:d5:8e:3c:af:
8c:be:ec:2b:a3:46:f2:4d:33:21:bd:f3:db:fb:c1:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A6:7C:FB:81:21:4D:FC:C6:20:E8:66:3A:A7:B9:6D:26:54:63:E5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o6Z8-4EhTfzGIOhmOqe5bSZUY-U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.192.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:09:a1:a5:48:3d:b3:e5:f5:4f:8d:d2:09:9d:10:32:ec:dc:
b2:fc:8f:ea:f1:f4:4e:d5:6e:c8:5e:02:56:25:3b:f5:65:56:
1f:b0:df:82:c8:9a:70:80:3f:32:e5:56:20:19:3b:1f:a6:c0:
07:32:2f:d5:98:fd:d4:a3:f4:54:ba:70:f8:3f:46:0c:cc:b5:
7c:97:22:93:8e:0b:85:36:b6:37:8c:f5:36:9c:d2:43:c2:ab:
c3:db:83:51:2a:e6:cf:d8:26:e2:6a:25:45:19:f2:6a:ed:6b:
99:b2:72:c2:f4:dd:01:12:02:bb:5c:81:df:9f:2b:7a:ae:89:
1b:3b:ae:f3:1c:19:c6:d6:c9:94:bc:2d:fb:7c:eb:c5:65:ae:
07:45:e1:0d:dd:de:5c:83:77:3d:f1:5b:20:bb:87:2e:7e:60:
1f:59:21:33:9e:ac:e5:a8:ff:44:b6:76:01:c8:53:9a:65:d7:
04:35:b4:26:a5:07:c7:7a:0d:92:2f:47:09:af:bb:8e:60:68:
d2:e9:cf:cf:4a:c6:4f:4d:5e:bb:ec:1c:0d:ec:10:68:ad:4a:
03:76:6a:92:2b:a7:dc:cc:cf:12:8c:07:6a:c7:24:59:85:41:
14:2e:6c:30:fc:1d:b6:c2:8c:ee:fc:99:ea:ab:e8:1f:e1:11:
ce:f8:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org