Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sTNnwSO3IV0e56jT8YDUHhAtAOM.roa
File: sTNnwSO3IV0e56jT8YDUHhAtAOM.roa (raw, json)
Hash identifier: X/qI9SKQu4yMJuzzjusjjPbPOGn/F8MHgT7EfE8QARQ=
Subject key identifier: B1:33:67:C1:23:B7:21:5D:1E:E7:A8:D3:F1:80:D4:1E:10:2D:00:E3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21C2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sTNnwSO3IV0e56jT8YDUHhAtAOM.roa
Signing time: Fri 25 Nov 2022 04:40:22 +0000
ROA not before: Fri 25 Nov 2022 04:40:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8642 (0x21c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B13367C123B7215D1EE7A8D3F180D41E102D00E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:98:29:c5:ba:3c:9c:74:80:00:4b:bc:06:
15:5b:7d:4e:7a:3d:79:15:32:31:4f:13:94:25:fb:
73:cc:85:27:ae:8b:01:6c:3c:28:1b:57:5b:f8:98:
1a:28:8f:8d:a2:69:a3:c0:3f:64:2e:76:e1:fa:f1:
64:80:5a:5e:00:8c:5f:3f:11:54:19:3a:51:4c:76:
20:60:b3:09:90:db:35:7c:e0:3e:62:6c:cc:7b:82:
d9:08:cd:4a:60:de:63:8a:9d:a4:d2:0a:4a:33:87:
18:81:c3:c6:a0:07:0b:b8:c4:2f:19:61:3d:49:1f:
fc:c6:07:fc:d9:2b:96:ec:44:3f:33:0e:6e:d6:7d:
1b:93:20:0b:86:aa:34:a5:60:61:67:4e:3f:15:98:
99:9a:37:c1:d7:95:25:d6:2d:22:c6:ce:70:30:db:
1d:b5:bc:99:5b:40:03:ed:7d:34:dc:f3:1d:72:7b:
4e:8f:f0:5d:10:9e:c4:d7:ff:a5:95:6e:e5:12:8e:
82:87:96:80:2d:ef:b0:63:84:66:23:7a:62:74:e6:
f7:0a:04:d4:8c:f4:e4:93:04:2a:df:02:79:74:32:
c5:92:ca:38:be:e8:c7:9a:97:c2:72:83:b7:f9:e0:
24:73:66:e9:41:1c:0d:17:a2:5f:d5:88:c4:8d:f4:
fb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:33:67:C1:23:B7:21:5D:1E:E7:A8:D3:F1:80:D4:1E:10:2D:00:E3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sTNnwSO3IV0e56jT8YDUHhAtAOM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.32.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:81:14:13:2b:1d:28:64:e8:30:cf:53:70:47:79:86:50:96:
fd:e9:b2:38:c8:c2:28:61:84:9b:fa:66:b6:dd:b8:0e:34:68:
0c:87:2b:9f:ac:cb:84:0b:16:d3:4c:f0:6d:1e:0a:31:c7:78:
5f:18:f1:30:bc:72:83:1a:19:61:f7:89:2b:f8:27:f0:ef:f9:
d2:21:21:2d:7c:6e:43:a6:9e:ab:36:8b:be:04:9f:52:8e:33:
e0:75:a8:57:1b:ee:23:21:21:1a:de:3a:98:4e:89:c6:f4:82:
54:86:1f:b7:d9:eb:d7:16:e2:b8:4b:a9:23:ac:85:7c:9c:22:
f0:b0:2a:51:4e:11:55:fd:71:54:d5:0f:9d:81:6a:bb:77:f5:
a6:d0:ee:93:42:5c:02:d5:c3:b2:57:aa:88:28:2e:00:f4:33:
2f:54:12:1a:8a:eb:30:04:36:35:85:08:5a:cf:33:c2:c1:32:
c9:b3:93:ec:2a:6b:f1:58:06:c4:53:b4:70:54:2c:dc:aa:1c:
2c:89:f7:ec:ce:bd:86:57:b2:4a:af:0c:64:4b:1f:57:fd:b9:
e5:1e:9a:d1:7c:6c:b3:81:ee:c3:04:46:b4:b2:b2:85:09:a6:
b2:3c:26:6d:77:7c:ec:68:6d:d9:d2:51:83:e1:f3:4f:5a:31:
2a:94:ba:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:56 2025 by rpki-client