Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/voAQv64nCqp63HSLuhMsTqylDIE.roa
File: voAQv64nCqp63HSLuhMsTqylDIE.roa (raw, json)
Hash identifier: sCntNi5L5Zd3Rp3T3pDOBBx65cUkZoSLhKr6KlGtvDs=
Subject key identifier: BE:80:10:BF:AE:27:0A:AA:7A:DC:74:8B:BA:13:2C:4E:AC:A5:0C:81
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B7B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/voAQv64nCqp63HSLuhMsTqylDIE.roa
Signing time: Wed 29 Sep 2021 02:46:39 +0000
ROA not before: Wed 29 Sep 2021 02:46:39 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7035 (0x1b7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:39 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BE8010BFAE270AAA7ADC748BBA132C4EACA50C81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:b1:35:60:bb:00:9a:b8:02:a0:e9:94:8f:
66:4b:9e:1c:8f:42:6f:cd:ff:d3:07:83:85:7e:af:
17:de:51:aa:4a:2d:51:e9:ed:dd:e0:74:c0:ff:ae:
92:1e:bd:4c:8c:4a:85:d5:4b:a2:85:bf:cb:13:ef:
62:bf:da:ae:ae:a0:e0:a8:21:92:a7:3c:aa:1b:7c:
76:0a:87:4b:f0:76:67:70:ac:1a:bb:98:99:cc:ff:
37:7c:88:ea:b7:54:84:13:5a:ca:71:de:67:b8:42:
2b:db:bb:3e:08:79:68:19:ec:d3:88:a4:74:25:24:
95:04:fa:70:f3:10:41:9a:36:bf:a7:bf:fe:c2:3c:
23:15:80:b1:c9:9b:7d:0f:5d:1c:6a:ec:48:35:46:
37:cc:cd:a7:bc:e7:d4:91:16:02:98:42:c6:b8:22:
98:40:60:bb:35:da:0a:79:11:93:51:1d:93:b0:23:
54:7c:93:a8:14:21:b6:88:b0:fb:49:ab:21:f7:2b:
5a:55:2e:5c:c4:91:aa:1f:76:fd:b4:f5:60:ed:98:
72:3e:30:7e:0b:18:05:57:e5:ad:7f:e2:f9:c7:c7:
4f:38:1c:43:58:e4:fc:28:68:b4:df:b6:7f:3a:27:
f3:1b:89:6c:d4:54:e0:78:ec:f9:32:86:e6:bf:02:
db:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:80:10:BF:AE:27:0A:AA:7A:DC:74:8B:BA:13:2C:4E:AC:A5:0C:81
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/voAQv64nCqp63HSLuhMsTqylDIE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.118.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:2c:05:89:a1:88:f3:5a:a9:49:f4:9c:96:e0:c1:35:9b:8b:
41:60:83:50:7d:2c:4f:d5:e1:89:be:1d:19:86:12:f7:94:5c:
2b:9b:c6:7e:23:3d:b7:76:b1:a0:5c:8a:8c:25:ac:7f:11:2c:
c6:49:6b:05:34:de:7f:34:84:b8:27:b0:cf:4e:34:5a:53:35:
9c:b8:ea:a8:86:77:e1:19:cf:31:51:93:be:0b:0b:1c:35:26:
72:3a:4a:dc:33:59:1e:ad:78:d9:89:a5:60:b3:73:45:b6:df:
4a:cd:79:e0:8c:5c:05:9d:68:e6:4c:0a:56:0e:5b:93:e5:18:
e6:24:37:52:23:a5:db:d4:aa:82:d0:51:f5:ad:02:e4:14:7d:
f3:8d:34:de:ca:ab:57:0a:6c:f9:9d:cd:22:c1:57:e2:dd:98:
35:5b:73:f3:79:d7:40:15:e2:da:31:08:37:ef:78:ee:ed:bb:
7d:0a:92:89:c8:d2:d7:ac:fe:3a:32:f5:b1:e2:14:6d:27:2e:
67:56:da:6c:a1:87:aa:68:6d:08:61:75:ca:4f:42:e9:d5:50:
32:20:ce:45:fe:8a:8d:bd:27:74:15:c6:64:4b:30:94:a7:33:
b9:ed:52:8b:a1:eb:0c:86:54:33:fc:ce:6b:f4:73:15:76:dc:
e1:c7:b9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:46 2025 by rpki-client