Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qooDfhRZ37YTFGCCsI02_9SXpZs.roa
File: qooDfhRZ37YTFGCCsI02_9SXpZs.roa (raw, json)
Hash identifier: OUhZS4RPh33QjYbUqG2I4zCJO+1IiTMXIAbsuCC708A=
Subject key identifier: AA:8A:03:7E:14:59:DF:B6:13:14:60:82:B0:8D:36:FF:D4:97:A5:9B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21CA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qooDfhRZ37YTFGCCsI02_9SXpZs.roa
Signing time: Fri 25 Nov 2022 04:40:24 +0000
ROA not before: Fri 25 Nov 2022 04:40:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8650 (0x21ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AA8A037E1459DFB613146082B08D36FFD497A59B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b1:79:40:d4:5f:5c:6d:91:f0:7b:9a:c7:b6:
2b:52:ed:f1:3e:c7:fd:89:63:4e:ef:d9:f6:10:57:
93:2d:1d:7e:62:b0:54:7c:39:b6:ba:5e:51:a6:6d:
5f:4d:53:09:41:53:a6:01:75:c2:1a:88:f9:0f:6f:
0e:72:4b:c0:96:09:2a:04:2b:27:1b:f4:22:c6:62:
c0:35:8b:c3:e5:67:a8:f1:4f:96:13:cb:19:0f:fc:
3b:6c:9a:9d:d3:e5:80:9f:75:19:92:d4:8e:09:0c:
28:0c:70:8b:58:43:73:e1:4d:43:06:1f:8e:f6:0e:
3f:43:48:f4:a6:71:2c:c9:04:62:a3:80:59:83:fb:
01:cd:fd:a1:83:b1:d6:bf:ae:b5:4e:7b:84:d2:be:
29:11:8a:25:cf:ad:0b:99:b2:c9:fc:23:26:1f:ea:
6d:53:52:09:98:85:15:d5:2c:26:b8:77:26:55:41:
d0:d8:e5:37:fa:b7:dc:ee:42:81:84:f0:a0:b4:5e:
d1:8b:49:cc:20:17:51:0b:e6:95:41:93:cc:84:e7:
62:3c:10:d7:22:12:31:bd:23:e1:42:b5:0e:58:b0:
72:42:59:31:1f:7b:14:64:39:26:e9:ac:1b:6a:b4:
36:a5:3e:30:ae:ac:ad:a6:dc:97:91:3e:09:b7:77:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8A:03:7E:14:59:DF:B6:13:14:60:82:B0:8D:36:FF:D4:97:A5:9B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qooDfhRZ37YTFGCCsI02_9SXpZs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.212.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:be:26:e0:92:fb:e3:bc:76:0f:0e:7b:75:93:82:cb:ed:09:
50:c6:e3:89:1a:23:e4:b8:7e:7a:57:82:17:33:2a:16:ed:72:
c7:e9:de:fb:d6:0f:a1:7a:ec:87:ca:75:44:57:fe:61:77:7b:
2c:7e:12:7d:06:ac:be:15:3a:8a:1d:61:08:ec:6b:3c:54:12:
14:08:29:10:d8:6d:74:a5:a9:fe:2d:e4:6e:52:ad:34:38:9a:
07:72:cb:25:27:3c:54:36:5b:a8:a5:51:2e:55:26:9b:63:70:
35:dd:98:28:b4:06:d3:aa:78:a6:db:3b:28:22:b2:b0:ab:7b:
45:a5:67:68:06:fb:25:76:bb:6b:21:79:b6:5f:bf:4a:3e:71:
0a:62:2b:0b:e7:d5:d9:8e:2b:ab:d6:58:a7:93:e8:7b:a5:7e:
d9:3d:ae:f1:11:37:eb:52:07:f3:03:0d:79:03:64:d3:3f:19:
f3:da:85:c3:ad:e2:2e:7c:3c:55:37:6d:9a:48:17:84:db:4f:
f4:47:e1:77:6b:c9:91:78:56:cd:67:26:cd:6a:75:7c:a1:86:
85:f6:d3:33:c6:07:e9:78:ab:8f:90:1b:bd:28:b2:f4:d9:24:
3a:45:21:0a:a3:81:ef:35:29:ea:2e:24:f5:b7:d9:a6:df:42:
ce:65:a4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:48 2025 by rpki-client