Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/shWH8TziBjvKmpocz5WM6vT6LDA.roa
File: shWH8TziBjvKmpocz5WM6vT6LDA.roa (raw, json)
Hash identifier: AWfLcWvS3lMdq22Eb7Ye69eb+ce7PfWiU3GhJC+tAu4=
Subject key identifier: B2:15:87:F1:3C:E2:06:3B:CA:9A:9A:1C:CF:95:8C:EA:F4:FA:2C:30
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21F7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/shWH8TziBjvKmpocz5WM6vT6LDA.roa
Signing time: Fri 25 Nov 2022 04:40:37 +0000
ROA not before: Fri 25 Nov 2022 04:40:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8695 (0x21f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B21587F13CE2063BCA9A9A1CCF958CEAF4FA2C30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1b:28:95:97:59:d2:e6:4c:9c:28:07:c7:02:
22:0b:25:e9:37:c7:a1:2d:24:53:e5:56:96:5a:73:
4a:90:10:d7:3f:a7:bb:59:3b:a5:2c:8a:f7:0a:6f:
b2:4b:6e:53:b1:4a:9d:27:39:32:c8:af:66:48:58:
d5:ff:56:8f:c3:2f:9d:20:3e:ea:51:37:b2:4a:da:
b0:1b:d4:41:46:68:6e:02:0b:87:54:55:e6:7a:3d:
9e:10:54:0f:78:c0:7b:3d:a0:fb:98:29:ed:d6:ed:
4f:0b:81:75:6f:8f:53:ef:bc:d2:0d:d0:67:b8:9b:
df:78:ad:98:90:12:65:af:96:d0:57:4e:67:b8:26:
d7:64:f1:5f:9e:77:b3:37:be:a0:48:55:67:51:f7:
8e:b9:58:42:05:bc:19:37:1f:97:bb:a4:c5:63:77:
12:53:74:0d:92:27:26:d7:92:07:09:dc:3d:27:f4:
fd:26:4c:6f:82:35:09:8b:fa:da:a2:a4:d1:45:ee:
7a:de:c0:77:65:6e:0f:ca:a1:88:20:11:bf:96:a1:
3c:cf:bb:5e:17:e1:7c:84:1d:a0:7c:d6:d0:cf:d7:
dd:26:55:a0:fe:79:4b:a7:79:3f:6b:13:ce:27:34:
3a:d5:94:0d:39:15:73:21:a9:05:29:4b:ca:f0:f1:
3e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:15:87:F1:3C:E2:06:3B:CA:9A:9A:1C:CF:95:8C:EA:F4:FA:2C:30
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/shWH8TziBjvKmpocz5WM6vT6LDA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.80.0/22
Signature Algorithm: sha256WithRSAEncryption
88:20:bf:8c:4e:62:0a:59:73:c3:d7:d9:4a:fb:91:ea:15:8b:
63:02:af:13:4a:53:64:ea:90:51:ac:57:54:e4:1d:46:f1:86:
8d:86:87:07:cb:bd:e6:18:bf:04:9b:15:54:36:b4:f7:f2:bc:
5b:3a:63:a7:31:7c:86:0c:38:85:7d:ac:d5:11:f2:95:61:54:
83:de:27:80:c3:fc:45:fa:d7:9d:c9:bb:cb:80:4b:d5:af:41:
71:7d:e0:73:41:7e:5a:3b:b5:cb:83:82:c9:d4:80:ef:8b:7b:
4b:95:e9:fa:8c:97:cc:97:6e:72:72:2e:64:e8:47:71:57:99:
d8:55:91:3a:50:08:50:82:4c:dc:0e:88:1e:f9:2f:2c:11:1f:
dc:13:1d:ac:74:3e:21:74:79:e6:da:4a:04:ef:85:65:6c:06:
1f:b6:00:18:87:10:f1:fd:e1:64:eb:4d:65:3e:80:13:0f:3b:
93:df:9c:a7:47:71:66:45:a8:64:7b:e2:60:bc:29:73:cd:04:
fa:99:8c:b2:cc:46:d2:d1:89:43:32:0f:31:42:79:c2:79:04:
32:5a:f2:0f:d5:f5:e9:30:fd:8f:97:8a:ef:1e:f5:1c:d8:79:
2f:ad:c8:21:70:a2:bd:76:4e:8a:72:79:b8:e2:35:c2:be:e0:
71:28:6e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org