Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s6YkvX3DiGkNQ-C9B15-038ULoY.roa
File: s6YkvX3DiGkNQ-C9B15-038ULoY.roa (raw, json)
Hash identifier: WPzQFu9RVn97jVQxG8b9pIP9qbob1Eveispf/CmNYHg=
Subject key identifier: B3:A6:24:BD:7D:C3:88:69:0D:43:E0:BD:07:5E:7E:D3:7F:14:2E:86
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21F1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s6YkvX3DiGkNQ-C9B15-038ULoY.roa
Signing time: Fri 25 Nov 2022 04:40:35 +0000
ROA not before: Fri 25 Nov 2022 04:40:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8689 (0x21f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B3A624BD7DC388690D43E0BD075E7ED37F142E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:29:ba:c3:0c:4f:ee:29:fd:3e:50:3b:c5:
08:f6:1b:4d:e9:0c:e9:6f:51:c0:09:be:d8:40:64:
8e:39:44:0b:19:1d:07:13:86:5d:08:4d:99:24:95:
2f:62:a8:f8:a2:b0:fe:b9:92:6a:20:68:2f:ce:be:
c7:24:21:51:bd:f8:1c:a5:b0:ad:04:c7:cb:85:38:
73:8b:e8:aa:a3:a0:0f:8c:7a:6e:8a:62:15:0f:28:
b2:fc:0f:ef:8a:60:2c:27:eb:6c:5c:3b:0f:ab:70:
f5:4e:d1:6d:11:f8:79:02:69:e6:10:53:28:0e:94:
a0:3a:88:fc:a8:2f:5c:78:f2:7f:f3:5d:32:cc:4a:
3c:88:88:41:45:28:1e:e4:80:8e:4d:3e:8d:21:f9:
2a:76:4e:f2:e0:80:e9:c4:e9:64:66:5a:27:ae:7f:
43:f1:69:89:d9:bc:63:e5:5f:d2:c0:fd:0f:62:1f:
e9:f8:18:48:e7:15:6e:ae:4f:08:e9:0c:28:05:86:
9d:f8:a8:a2:aa:cc:e2:67:21:a6:85:42:6e:a5:db:
1d:b3:e1:4c:05:00:07:f8:b6:7b:56:bb:9a:6e:04:
e3:35:95:db:c8:9a:30:21:e4:49:03:13:0b:3e:86:
af:0d:20:f7:eb:47:20:79:8b:9b:0b:96:5a:71:89:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A6:24:BD:7D:C3:88:69:0D:43:E0:BD:07:5E:7E:D3:7F:14:2E:86
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s6YkvX3DiGkNQ-C9B15-038ULoY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.248.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:7a:0b:04:d1:ba:da:93:75:06:4c:30:a4:9e:6f:ee:b3:73:
8e:aa:64:5d:1d:2a:69:63:b1:c2:54:e1:f5:d1:bc:92:ab:06:
ce:db:17:98:2d:08:4c:09:66:d9:9d:8e:1d:d1:34:5e:37:92:
ee:67:ab:01:5d:22:87:63:d3:f3:6f:82:78:88:2c:23:e8:70:
d6:af:ad:18:50:4d:a8:e3:69:7e:53:c9:41:0a:ff:c7:91:8e:
9c:5e:21:32:94:ca:6d:5c:5a:a6:73:76:a7:13:e6:15:c7:c8:
8b:b2:ee:ff:32:1a:b4:ad:94:17:b7:40:a2:75:6a:14:31:e7:
43:d1:ed:fd:69:f3:71:20:08:2e:1b:07:78:0f:69:24:0c:39:
af:a5:53:d9:f5:5e:27:ef:83:ad:a7:f9:74:43:70:01:33:56:
ec:1d:00:f6:de:95:25:a7:64:d1:c3:46:0d:a6:22:2c:28:77:
ff:84:cd:bf:80:b7:77:dc:78:09:79:36:5b:2a:e3:f1:27:50:
40:98:0e:e8:97:18:54:7b:37:27:01:77:08:2f:2f:97:f8:04:
c8:2a:ec:18:4f:f0:3f:67:a2:50:61:30:d5:9e:06:5b:e1:17:
b0:c2:29:ca:d0:75:22:3c:df:60:10:72:e5:87:4f:b6:ae:7f:
4f:05:99:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org