Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vGYrQM967Xc1InWNiCZEs0A0Eh8.roa
File: vGYrQM967Xc1InWNiCZEs0A0Eh8.roa (raw, json)
Hash identifier: KhmOkjS1eL9yS8Fp+WmAKSszJvSZAGkddAPhi2GG6uQ=
Subject key identifier: BC:66:2B:40:CF:7A:ED:77:35:22:75:8D:88:26:44:B3:40:34:12:1F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vGYrQM967Xc1InWNiCZEs0A0Eh8.roa
Signing time: Thu 15 Sep 2022 02:52:45 +0000
ROA not before: Thu 15 Sep 2022 02:52:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BC662B40CF7AED773522758D882644B34034121F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:37:b4:eb:10:fd:f4:cf:91:41:51:dd:ed:
fc:61:fd:58:9b:03:80:ca:b5:5d:3d:33:95:3f:1a:
3b:e7:37:3b:c8:46:f6:e1:31:9e:56:3f:ad:80:bd:
4b:d1:da:06:6e:1a:17:27:c2:8b:9b:90:a0:54:50:
f9:c1:a2:f1:c9:3c:0e:23:56:17:d7:95:4b:14:36:
5c:6e:d1:65:e0:ea:64:17:3a:ee:02:fe:12:cd:52:
5e:2c:8e:0c:cc:d3:e1:c8:b4:cf:43:07:a9:63:f2:
0a:3f:32:9f:84:ac:b3:1b:f2:cf:70:28:f2:91:35:
9d:8a:b3:f3:6d:19:59:65:1b:4a:6b:47:c9:8e:6e:
2a:cb:4d:f7:8b:3a:1c:63:8f:e0:9c:c0:c5:5c:85:
b7:a4:b2:f9:dd:3b:24:8d:ed:59:78:0b:1e:e2:78:
15:43:9e:70:3f:a6:15:75:e2:9a:8b:0f:fb:72:af:
01:c9:74:9a:fa:bb:1a:b5:b1:14:2f:1f:24:0a:4f:
9f:27:47:52:57:e1:7a:34:e6:b3:ff:b4:75:18:d1:
60:dc:ee:2d:3a:81:af:2c:75:9b:b8:14:fa:17:ab:
e8:9a:ed:8b:78:aa:44:92:d5:56:e5:ce:7a:cd:e7:
4f:b8:81:22:49:98:9c:29:9c:d0:4b:be:57:76:04:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:66:2B:40:CF:7A:ED:77:35:22:75:8D:88:26:44:B3:40:34:12:1F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vGYrQM967Xc1InWNiCZEs0A0Eh8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.232.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:2c:8b:30:d1:87:c8:f4:3b:29:d5:1d:ed:55:34:3b:e7:47:
40:ed:a1:76:a6:bf:b3:8e:26:a8:dc:c6:03:6e:ce:4f:19:99:
ce:1e:83:b7:10:b3:59:8e:e1:b8:f8:a9:87:4e:c4:fe:81:9d:
52:6f:5d:7d:da:a8:90:60:7d:ed:61:c4:fb:79:1c:97:70:4e:
86:d6:e6:ba:9a:e8:37:c2:d2:8f:e5:93:da:38:3b:d8:45:70:
ec:a0:04:c8:69:e4:80:1a:96:75:1e:a4:1f:df:9e:c4:b9:ee:
3b:e6:6b:5e:88:e4:0c:cf:96:a4:02:cc:67:70:3c:14:20:10:
21:37:6a:bd:14:75:8d:a3:34:7e:63:ad:f3:21:00:a0:dc:b4:
aa:55:b0:23:7f:42:0e:db:a2:46:73:f0:c3:9e:fc:a6:64:8a:
bd:75:94:c5:9a:6f:3d:de:5a:77:d2:29:4f:ae:b8:65:2e:73:
07:0f:38:fc:17:f2:71:1e:6c:a8:e4:51:97:93:f3:11:a4:20:
fc:74:a1:40:f6:81:d2:06:9b:cc:46:1b:be:23:c1:16:6a:3e:
a0:0c:8e:24:79:33:30:33:c4:a1:ef:8e:60:73:ef:48:c1:2f:
05:e2:dc:75:83:65:85:91:dd:4d:29:b1:3f:2f:90:6a:27:29:
44:7b:e4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org