Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/umBkoA0UUpVzviyxbAQfqi35UYk.roa
File: umBkoA0UUpVzviyxbAQfqi35UYk.roa (raw, json)
Hash identifier: sK/cvNUZZkobeB6aGGjvtoqyPFWogB+DvF5MRBSEKQA=
Subject key identifier: BA:60:64:A0:0D:14:52:95:73:BE:2C:B1:6C:04:1F:AA:2D:F9:51:89
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/umBkoA0UUpVzviyxbAQfqi35UYk.roa
Signing time: Thu 15 Sep 2022 02:52:23 +0000
ROA not before: Thu 15 Sep 2022 02:52:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BA6064A00D14529573BE2CB16C041FAA2DF95189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:75:33:e2:f2:77:25:21:7b:1d:a0:99:7e:
22:1b:9c:96:95:d1:06:75:ff:c5:0b:c8:90:69:ae:
37:44:a2:9c:e9:41:fa:cf:5e:7f:46:d6:81:25:11:
85:ef:28:6f:96:21:c2:f0:d2:5e:d3:76:28:dd:d4:
bf:05:47:b5:dc:22:ce:8c:4a:33:66:70:4d:a1:20:
92:1b:31:48:a4:1b:dc:4b:fe:78:c4:37:06:a7:5d:
1b:d8:af:e2:53:05:2c:15:d4:5e:ab:12:5d:47:88:
9f:bc:13:81:32:19:b2:30:0c:57:99:7f:04:70:44:
9b:a4:a3:be:5c:10:07:44:f1:31:d1:91:80:04:52:
18:8f:d1:c0:d4:f6:fd:c2:80:a5:2c:69:a7:26:79:
09:93:bc:a9:30:b5:ee:82:26:e2:1d:87:7e:de:f4:
e9:0d:d4:82:00:9c:d3:2e:c8:d9:c6:32:4d:14:b9:
b9:61:2d:d1:c7:77:31:9c:51:bb:2d:e9:92:dd:96:
03:8b:e0:f1:16:61:9d:76:23:a8:b1:91:c8:0f:30:
4b:b0:8d:0b:6b:40:77:74:41:18:ee:cb:a5:63:b8:
a1:cf:44:92:28:fe:25:06:81:6f:e4:1f:fb:3a:fe:
dd:9d:10:b0:7b:c5:83:38:e8:7c:e5:40:a2:e3:8d:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:60:64:A0:0D:14:52:95:73:BE:2C:B1:6C:04:1F:AA:2D:F9:51:89
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/umBkoA0UUpVzviyxbAQfqi35UYk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.36.0/22
Signature Algorithm: sha256WithRSAEncryption
00:d6:3b:53:e7:01:3d:0d:6b:aa:fe:98:8d:0e:2a:dc:f1:fa:
17:a6:3a:aa:4e:dd:3f:15:1a:93:42:ab:1b:99:6d:a5:a9:fe:
8e:48:a8:18:7d:f1:d8:79:e3:79:34:de:ac:9d:5a:2f:83:86:
c4:7e:cc:20:35:91:c3:f0:9a:30:35:fc:9c:c8:49:8a:71:71:
e3:24:45:cf:d4:53:87:54:c2:fc:05:0e:87:10:e8:40:3b:44:
2c:8f:99:28:8c:70:5e:ca:4b:42:e6:9b:f2:a5:ec:88:43:89:
b9:77:ef:80:07:4f:39:37:98:49:ab:b0:4e:39:4c:78:a2:0e:
37:a3:95:94:b3:51:c3:59:72:9b:2b:61:e2:0a:1f:aa:c0:ff:
f0:c1:5b:0d:dd:05:0b:02:e0:bd:cc:31:02:c1:99:90:12:31:
7d:99:3e:44:7b:f7:f8:5c:80:2a:2c:9a:aa:47:c0:54:10:a5:
50:ac:6a:51:45:73:1a:21:fa:fc:31:5d:95:8f:ac:99:e9:4b:
96:32:cf:3e:90:1b:2d:4d:b3:ec:15:f4:83:bc:bd:21:bd:e8:
8b:ee:ab:dd:65:05:4b:63:0d:1b:33:bb:49:fd:0d:0b:fd:c0:
df:c1:94:f8:3d:5a:58:d0:1d:1c:fc:86:25:9e:00:7a:95:5e:
18:a1:a8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org