Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/snwEyjO2P0Bk5cuFRc4m_F0An3c.roa
File: snwEyjO2P0Bk5cuFRc4m_F0An3c.roa (raw, json)
Hash identifier: QUZffDC3ci5RWspvATCOic6HpNqWDRowSXbwOvfb12I=
Subject key identifier: B2:7C:04:CA:33:B6:3F:40:64:E5:CB:85:45:CE:26:FC:5D:00:9F:77
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/snwEyjO2P0Bk5cuFRc4m_F0An3c.roa
Signing time: Thu 15 Sep 2022 02:53:57 +0000
ROA not before: Thu 15 Sep 2022 02:53:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 118.232.199.64/27 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B27C04CA33B63F4064E5CB8545CE26FC5D009F77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7c:fb:d4:47:cd:86:d5:63:42:46:35:45:82:
60:05:6d:81:f1:87:cf:30:13:c4:ff:69:90:b7:2d:
28:7d:4f:97:ec:fd:82:da:3f:91:3f:46:03:82:ff:
ce:8e:0d:40:6f:38:60:ee:c6:ca:37:21:b4:66:2f:
b7:39:55:0f:de:a2:81:d4:2c:44:2a:e9:ef:47:72:
7f:26:9b:4e:70:f1:c4:de:da:15:ae:32:72:95:54:
e3:b5:f4:31:aa:2b:88:07:43:76:bc:b3:11:49:cf:
eb:5c:4a:ef:4a:81:a0:b4:5d:18:a6:c1:a3:3c:95:
a2:ee:58:1b:93:f4:21:53:90:45:ff:ff:3b:b1:5c:
50:e0:6f:85:af:a0:07:11:df:32:db:56:3f:bb:ef:
b6:40:e6:16:7a:95:96:d1:bd:60:6f:0e:ae:a9:d5:
e3:cd:5e:fe:c0:00:98:47:1f:d5:2c:27:b7:44:2e:
1f:9c:9c:ba:0e:93:4e:97:42:bf:0b:ad:93:bd:4e:
70:b0:66:f8:40:40:90:49:fe:63:25:cd:8a:03:83:
71:9a:aa:33:b4:17:c2:3e:81:23:7f:28:92:89:af:
86:b9:a3:44:3c:d9:e3:86:ed:c3:4f:fe:8d:fc:a3:
69:26:56:6c:c4:55:7e:92:74:a2:2a:07:a6:6d:18:
4a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7C:04:CA:33:B6:3F:40:64:E5:CB:85:45:CE:26:FC:5D:00:9F:77
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/snwEyjO2P0Bk5cuFRc4m_F0An3c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.199.64/27
Signature Algorithm: sha256WithRSAEncryption
23:0a:1b:70:db:3b:4b:d6:4b:dc:f4:62:b1:ab:b2:b6:a4:8f:
77:b7:a3:6a:b5:ab:3f:ed:51:34:7d:e9:3c:a0:db:24:90:33:
7a:f6:d9:1b:81:1a:b2:52:f3:0a:f6:c9:33:69:d8:3f:ac:59:
c6:c3:43:e9:81:19:82:9f:7f:c4:0b:90:9d:5a:34:7d:50:4b:
89:12:fb:d7:15:16:a1:f2:7c:1c:ed:c5:cb:81:43:cc:33:61:
84:f2:03:00:51:41:d4:41:28:26:6b:33:05:24:fa:0d:e7:4c:
71:f0:b6:7b:aa:82:1d:1a:81:d7:0b:e0:f2:b6:08:98:28:80:
13:87:72:e8:6a:4d:b0:a9:e1:98:4b:f7:c7:40:49:37:d7:6f:
f3:5d:8c:79:35:93:ea:bf:97:a5:37:3d:71:be:7f:2f:b3:0e:
ef:24:57:ad:ac:c7:fa:22:3e:8c:6a:a0:e0:fc:cd:f0:9d:69:
67:08:2d:85:a5:cd:bb:3f:6a:85:d9:03:75:07:c6:f7:36:8f:
60:b2:23:2b:4e:65:b2:dd:44:14:37:f1:95:d2:24:48:19:96:
45:13:71:97:28:ba:f0:05:bc:52:63:b2:70:c6:83:a0:c5:3e:
ab:50:69:4f:f3:30:26:c0:9f:2a:9f:50:bc:2b:1e:60:d5:ad:
e8:6a:fe:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:22 2025 by rpki-client