Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oKjlSLxyNGdDtPaeWoZ5ytBYYhc.roa
File: oKjlSLxyNGdDtPaeWoZ5ytBYYhc.roa (raw, json)
Hash identifier: T2b6kum1Vo3+Wx1heV/ETELBLG8YkoMzdlIeZcTJQXI=
Subject key identifier: A0:A8:E5:48:BC:72:34:67:43:B4:F6:9E:5A:86:79:CA:D0:58:62:17
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1F07
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oKjlSLxyNGdDtPaeWoZ5ytBYYhc.roa
Signing time: Fri 01 Jul 2022 02:05:10 +0000
ROA not before: Fri 01 Jul 2022 02:05:10 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7943 (0x1f07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Jul 1 02:05:10 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A0A8E548BC72346743B4F69E5A8679CAD0586217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:41:ce:8e:f8:cf:b0:34:e0:ba:ed:a8:8b:
db:4b:bc:7d:6f:cc:5f:60:7e:b4:1f:94:18:2f:aa:
ed:ba:6a:df:51:cf:96:4b:ba:3d:23:9a:57:dc:6c:
58:96:3c:79:eb:e3:74:49:b8:fb:79:0a:b9:51:ca:
bc:f9:8a:95:11:be:54:c0:e8:04:b9:fb:82:3b:4f:
9c:26:12:6a:6c:76:f1:56:10:8a:ea:ae:61:12:98:
e7:61:3e:7c:51:d4:d2:6d:4e:d9:34:d9:5c:a8:28:
6c:16:d7:5f:9e:a4:fa:4e:03:a2:f1:ae:d5:f2:d6:
bf:07:5b:e3:20:62:3e:ad:a4:2b:0a:d8:4f:e0:47:
1d:e7:11:d2:fb:50:5d:df:8a:93:33:d1:8e:d4:11:
88:f7:41:ae:35:3e:66:b0:df:4d:bf:9f:0e:a0:7b:
bd:71:9d:6d:70:d3:51:15:c1:83:37:f4:4c:8d:93:
1d:7a:e4:81:0a:2d:ba:2e:64:7f:59:f3:f2:e4:bd:
c8:4b:f3:a4:f9:45:3e:db:bb:a3:e9:ca:dc:67:a6:
5b:49:8a:d0:81:bc:a8:cc:36:58:23:00:58:42:f2:
96:8d:54:61:a5:37:73:56:d0:b8:31:6b:79:96:5b:
3a:d5:2b:80:69:da:cd:4f:7b:61:5e:03:66:61:b9:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A8:E5:48:BC:72:34:67:43:B4:F6:9E:5A:86:79:CA:D0:58:62:17
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oKjlSLxyNGdDtPaeWoZ5ytBYYhc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.232.0/23
Signature Algorithm: sha256WithRSAEncryption
60:93:74:b3:d3:64:af:95:15:4f:16:24:f3:d7:3e:7a:37:eb:
11:77:34:19:20:df:ed:a4:f6:06:60:95:44:6c:89:96:fc:66:
88:9b:09:b5:84:e9:0c:1d:eb:2d:ac:aa:a6:5c:3d:89:86:ad:
12:67:5f:34:fd:79:74:00:01:0b:f4:9b:1e:98:b1:a5:30:fe:
ba:0f:a2:cd:ec:4c:1e:05:f0:ae:41:bd:a0:9d:3c:13:b7:8b:
d5:1a:68:31:45:4b:ce:1a:5d:8f:87:1c:da:68:25:fb:ce:0c:
e2:cd:39:e1:c9:92:41:7d:5f:73:a8:82:2b:bf:87:15:3c:63:
39:2c:80:a9:1c:b7:85:99:f5:79:dc:86:e9:a1:6e:06:8e:29:
f4:69:02:73:38:24:1d:35:9c:9e:6f:7c:d4:61:23:46:8f:05:
89:03:43:7b:08:56:c1:3f:12:23:24:97:e1:55:8e:4e:a7:ec:
77:6f:45:10:1c:92:cc:ba:3b:18:8a:12:b2:56:4c:44:20:a3:
a7:f0:b9:0e:75:53:11:59:57:17:1f:19:ff:24:56:7b:2f:f7:
6a:9d:d6:5c:aa:51:10:ed:3b:e1:0c:c3:85:1d:6d:c3:28:bf:
fe:3b:0d:73:fe:57:ae:ea:c2:9f:bc:57:1e:03:4b:46:88:a7:
b7:67:4f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org