Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sNZGN59EvIKBKpMWO5xpBluSERs.roa
File: sNZGN59EvIKBKpMWO5xpBluSERs.roa (raw, json)
Hash identifier: BhUqqskaCWUmPB78jnxXeV/L4GXjAzgB04/ZTdtRKGM=
Subject key identifier: B0:D6:46:37:9F:44:BC:82:81:2A:93:16:3B:9C:69:06:5B:92:11:1B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21D7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sNZGN59EvIKBKpMWO5xpBluSERs.roa
Signing time: Fri 25 Nov 2022 04:40:28 +0000
ROA not before: Fri 25 Nov 2022 04:40:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8663 (0x21d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B0D646379F44BC82812A93163B9C69065B92111B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:b7:15:dd:99:54:2b:1f:55:16:81:27:10:
fe:f3:2c:5d:42:ad:79:ed:f5:80:e0:5c:00:fd:a8:
79:a7:a2:4e:b0:41:8c:fb:d6:a2:0b:3b:d3:00:0f:
88:6d:dd:8f:1b:0f:5c:e2:01:8f:f2:ab:7b:a2:ee:
2f:1b:3b:48:43:ad:de:59:0f:63:e2:d2:0e:0d:82:
fe:3f:e6:d1:ae:ba:9d:c3:5d:70:14:10:ea:21:22:
c7:a0:43:57:f6:6a:b7:81:a6:74:0b:97:d7:b3:45:
15:69:ac:15:e9:d0:4e:bc:9f:74:06:8c:70:d4:78:
3f:0b:1f:d1:30:ff:9c:fb:53:be:e9:2c:0a:78:c5:
2d:91:d5:0f:ea:92:fa:87:75:31:14:e2:ab:c5:c0:
82:24:98:0e:48:66:ab:09:72:1c:92:25:83:a4:18:
0f:f3:a2:94:6f:5b:11:d1:82:76:83:87:08:67:b2:
f1:59:32:59:96:b9:e1:5e:d4:79:e8:b0:4b:b7:b5:
fa:9c:a1:cc:a1:a1:2b:b2:79:49:b9:01:61:48:30:
8d:28:aa:c5:e3:51:ad:d5:bb:48:3d:56:87:81:77:
63:a6:62:fc:22:b7:5a:e8:e2:c1:b8:38:b5:11:04:
9e:63:e3:08:ee:41:56:d9:69:ce:cc:84:96:fd:9e:
e3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D6:46:37:9F:44:BC:82:81:2A:93:16:3B:9C:69:06:5B:92:11:1B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sNZGN59EvIKBKpMWO5xpBluSERs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.0.0/18
Signature Algorithm: sha256WithRSAEncryption
7a:98:2d:e5:90:a4:41:d0:0f:cd:b7:d7:59:e0:b6:58:cd:74:
67:08:58:59:c1:05:fc:f2:eb:12:79:eb:8c:cb:91:5f:db:d5:
fb:42:29:ff:80:7f:6f:25:ed:30:b3:aa:fe:d8:fa:a5:08:7b:
c6:66:89:88:28:6d:f7:a3:83:21:05:cb:6e:78:7c:5c:ba:b6:
a6:54:e9:13:55:93:69:77:74:84:d0:59:d7:98:ed:ba:a1:8f:
b9:0d:95:8c:12:1a:93:e9:bc:dc:24:ad:cd:bc:19:60:7a:72:
ec:01:ef:41:29:ec:26:fa:0b:65:8b:29:bf:25:41:b1:d9:99:
99:7a:8d:d8:f0:8e:42:08:93:d7:c4:6b:4b:a6:cc:7c:1f:0b:
47:b7:03:c6:53:fe:bf:c6:0e:6f:b3:39:2e:05:3c:05:1f:60:
27:63:7e:9e:42:10:44:ab:ce:a0:c9:2a:de:c9:ac:ad:5d:66:
0e:a6:b6:9f:30:1f:97:52:58:b4:6f:7c:5a:d8:67:4b:cc:e9:
99:79:fc:2e:0a:31:11:a5:25:9a:02:13:00:e7:ae:b6:dd:b6:
70:f6:0c:d0:76:fc:5a:41:d3:c8:54:b9:98:0d:27:79:38:97:
23:7e:16:9b:b8:22:31:75:f8:f4:bb:2d:26:3f:4c:38:f3:64:
61:57:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org