Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sOo2g0u10i-bIDp8ddCUZVpJg1U.roa
File: sOo2g0u10i-bIDp8ddCUZVpJg1U.roa (raw, json)
Hash identifier: aZiKfCbJMdOp3EQ9MqP8fBjIq8OiJ5Oy88wYHdvwPXo=
Subject key identifier: B0:EA:36:83:4B:B5:D2:2F:9B:20:3A:7C:75:D0:94:65:5A:49:83:55
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2197
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sOo2g0u10i-bIDp8ddCUZVpJg1U.roa
Signing time: Fri 25 Nov 2022 04:40:06 +0000
ROA not before: Fri 25 Nov 2022 04:40:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8599 (0x2197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B0EA36834BB5D22F9B203A7C75D094655A498355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:f3:59:7e:e8:84:ce:9e:6a:c2:86:5b:c7:
37:7c:10:38:44:9f:d9:c5:9c:ca:49:3b:b9:6d:bf:
61:4e:7a:63:ad:cd:47:8d:4f:a9:90:bd:17:b5:a3:
8b:98:65:41:c2:8c:28:38:ab:cc:a0:bd:87:73:48:
02:b8:66:f0:2a:c8:f3:1e:16:4c:ec:aa:f2:76:26:
ac:f8:44:ae:c5:78:f8:fd:5a:5f:e3:f5:bb:56:a1:
86:90:a8:fc:cb:81:56:71:28:9d:8e:dd:b6:f1:c0:
b2:dd:47:68:58:36:fb:67:94:ff:6c:3e:3b:eb:4c:
2b:04:f5:cb:3a:67:f1:c4:c4:ab:9a:c7:26:7f:5f:
53:8c:11:e7:9d:02:b6:05:c8:f1:2a:cd:70:b3:4d:
9a:23:38:94:82:12:aa:53:ff:b8:55:d6:f3:04:00:
d2:a7:3f:94:2f:9f:d5:09:0d:52:5c:06:42:ea:03:
1c:fd:85:fe:47:fc:0b:51:d4:ef:53:9a:a0:80:35:
27:9e:3f:c3:12:9c:a8:9c:ad:17:05:33:c1:85:75:
45:48:e3:93:03:bd:63:65:3b:b7:66:a9:61:5d:05:
66:de:41:14:02:34:b2:3b:39:7d:14:76:66:98:ca:
40:63:3a:0b:d2:78:74:cd:08:c9:5b:b2:9b:a2:ba:
be:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EA:36:83:4B:B5:D2:2F:9B:20:3A:7C:75:D0:94:65:5A:49:83:55
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sOo2g0u10i-bIDp8ddCUZVpJg1U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.56.0/22
Signature Algorithm: sha256WithRSAEncryption
84:ff:47:98:3f:68:59:eb:a1:3f:0e:ab:0b:ba:46:8c:d6:54:
f5:8c:e9:6a:d8:e5:21:ca:b2:34:49:a2:a9:9f:b9:0e:8b:fe:
59:9a:33:2b:cc:7d:0f:a8:e4:65:da:3b:56:6e:5b:96:c8:85:
7e:31:eb:7e:ae:85:91:7e:31:70:ad:43:57:66:3e:9e:a3:81:
54:0e:07:c3:58:a3:c4:ec:ce:91:ae:16:1a:c8:8f:64:b7:8c:
a6:00:2d:46:95:2b:17:5a:22:12:24:d8:89:cb:fa:d3:0b:d6:
aa:54:51:a7:76:f2:98:84:a9:64:39:52:8a:09:b1:4f:a3:9d:
ef:66:c5:ae:ae:18:c8:37:45:6f:e6:3c:bd:07:30:14:38:91:
ad:1d:46:19:73:a2:1d:af:8a:36:c5:9d:bc:aa:9b:35:9a:2e:
10:00:62:6f:7f:f9:1e:fe:cf:48:cb:56:92:32:d0:cc:3b:fb:
52:b3:f9:92:78:86:e2:a7:e5:00:19:31:9d:85:5e:84:03:7d:
59:da:59:aa:56:2a:3b:ae:c7:c6:95:fd:69:2a:25:90:31:24:
66:f6:cd:b3:fd:01:ac:c9:31:d2:bd:fa:36:43:ed:5a:f3:53:
dc:89:33:e1:cc:5e:b9:6e:70:11:be:4f:14:e2:5c:35:c9:bf:
fe:20:59:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org