Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qcq95PJGv2RuAyEGkDP1qCp0ssc.roa
File: qcq95PJGv2RuAyEGkDP1qCp0ssc.roa (raw, json)
Hash identifier: JZzxTg0vgtnkBmfcgOlAPZZ+VUSJGnLRO7KO3ccDnTY=
Subject key identifier: A9:CA:BD:E4:F2:46:BF:64:6E:03:21:06:90:33:F5:A8:2A:74:B2:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2224
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qcq95PJGv2RuAyEGkDP1qCp0ssc.roa
Signing time: Fri 25 Nov 2022 04:40:49 +0000
ROA not before: Fri 25 Nov 2022 04:40:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8740 (0x2224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A9CABDE4F246BF646E0321069033F5A82A74B2C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9c:d0:39:26:34:f4:bd:15:f9:56:55:1e:41:
12:25:c0:5c:68:a4:6e:71:7d:26:2e:8a:8f:55:cb:
1f:83:7f:6f:94:49:4e:62:a1:27:46:64:03:8e:64:
a5:4d:73:2d:4f:66:a9:31:2d:97:a9:a0:59:d0:76:
51:51:ca:e2:2e:93:43:3c:03:a3:ae:10:46:1f:0d:
99:b9:a0:1b:bd:46:82:b3:56:16:a4:c9:39:eb:b8:
7a:6a:b0:17:92:a4:bf:f0:74:7b:c9:13:26:97:c8:
1f:b4:9d:a6:9f:a4:b8:f9:0c:aa:73:61:c2:44:51:
8a:16:2d:39:8b:84:1f:49:5e:db:db:8d:d6:f9:bd:
ff:e2:a6:d7:ae:2f:73:28:bd:bf:42:a7:4f:55:80:
ac:dc:c8:05:69:16:d6:4b:d7:03:62:b8:6c:a6:42:
e9:5c:b2:37:bd:77:fc:e6:d4:cf:8c:72:7c:52:1a:
28:5e:c5:cf:d1:30:e4:2f:d0:dc:75:32:46:cd:c0:
93:c7:db:c6:ae:40:52:f6:38:12:e5:a4:8a:43:76:
bb:96:96:db:97:de:3f:02:8e:93:24:2c:33:70:c5:
cb:88:aa:0f:0f:fa:f7:9a:26:7d:8c:e8:e3:78:16:
21:e3:3e:eb:7e:83:b8:99:dc:5a:11:04:4b:ae:55:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CA:BD:E4:F2:46:BF:64:6E:03:21:06:90:33:F5:A8:2A:74:B2:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qcq95PJGv2RuAyEGkDP1qCp0ssc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.100.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:75:75:8d:cd:a6:d6:6e:1b:69:12:a2:c1:8f:fd:c7:07:8b:
db:e3:a6:78:1e:7a:87:68:bb:14:ee:85:b3:36:fd:80:c4:9a:
97:d7:23:41:9c:00:50:6b:96:d3:da:b1:e2:0f:e5:83:c4:15:
9b:50:da:a7:06:20:9c:16:a3:9d:2b:77:f5:e2:f8:be:18:f4:
90:6e:91:29:67:5d:06:a9:3d:be:72:12:76:30:7a:c5:4a:5b:
f5:af:54:cd:79:bf:58:b3:6c:14:6b:d5:35:5f:0a:e2:59:aa:
fd:ea:af:ed:16:5d:fc:a7:2a:24:04:68:d1:ee:dc:f2:8f:9c:
a7:b5:c4:27:44:3b:82:fc:58:74:d2:b7:56:34:7a:30:a1:12:
ba:56:1f:75:19:6b:1e:e8:0a:d1:85:41:d7:ea:87:e1:3a:4b:
2b:da:fb:48:e5:09:5f:dc:c6:29:45:8b:01:f5:26:d2:88:bf:
38:4c:de:06:30:b1:56:cd:1e:6d:d8:0c:d7:f3:3a:90:dc:5d:
25:95:d8:c9:f1:9c:a7:3e:0d:8b:11:db:30:2a:cd:af:79:36:
76:38:a8:cd:c4:30:99:1f:e1:73:b4:4c:19:83:b3:87:bf:e2:
0f:2d:c5:2f:98:e7:53:09:30:db:8e:d5:47:69:4c:57:4f:09:
44:11:63:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org