Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wSm0k7g73lWzX3H5u8FRETOVroI.roa
File: wSm0k7g73lWzX3H5u8FRETOVroI.roa (raw, json)
Hash identifier: rt/e9nH9i+M1AsXbIQ+kmbOkIe6KBDvvgDRrYO51wVg=
Subject key identifier: C1:29:B4:93:B8:3B:DE:55:B3:5F:71:F9:BB:C1:51:11:33:95:AE:82
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2178
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wSm0k7g73lWzX3H5u8FRETOVroI.roa
Signing time: Fri 25 Nov 2022 04:39:58 +0000
ROA not before: Fri 25 Nov 2022 04:39:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8568 (0x2178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C129B493B83BDE55B35F71F9BBC151113395AE82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:6f:4b:fb:86:c8:a7:fd:0a:d6:0a:67:8b:
4a:85:aa:51:53:f6:00:28:94:d9:b8:d7:fa:d8:8d:
4e:35:15:17:fb:e0:7c:bc:ad:8c:62:b7:36:aa:9a:
16:18:49:a3:4a:9b:e2:d0:fb:5f:8a:29:9c:5b:8d:
32:81:d1:9d:ae:2d:ba:f0:33:5f:26:03:71:40:75:
0f:f7:5f:90:51:fd:7a:d9:a7:d5:ed:8d:73:53:23:
41:01:83:80:cc:b0:b1:c1:4b:28:8d:f3:06:85:73:
d9:ef:8f:18:f0:78:5c:32:e2:1c:60:4c:9d:e6:ac:
a8:e0:be:5e:6d:56:c2:79:66:62:bd:4a:99:76:53:
99:b3:6a:42:94:b2:02:b9:4d:78:06:50:c4:7f:9a:
27:19:76:97:a4:6e:83:34:4f:3b:c7:12:ac:34:00:
98:62:42:16:80:98:40:64:f9:1b:49:00:a8:ad:b5:
d2:2f:8e:50:20:62:da:2c:c6:5a:85:10:f6:32:25:
43:6c:16:a4:5d:ab:3a:29:5b:f3:35:6e:54:3e:b2:
d5:fd:1a:65:4d:8a:32:45:64:3b:90:8e:fd:6d:62:
6a:40:f7:4d:69:f4:d4:63:4c:d2:5d:5d:1e:57:e0:
08:d9:7b:51:a2:19:13:a7:29:ff:8c:7e:d4:08:1e:
63:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:29:B4:93:B8:3B:DE:55:B3:5F:71:F9:BB:C1:51:11:33:95:AE:82
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wSm0k7g73lWzX3H5u8FRETOVroI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.36.0/22
Signature Algorithm: sha256WithRSAEncryption
02:5b:70:0d:66:23:f8:42:46:d9:e6:19:12:05:90:ac:b9:3a:
21:30:fd:42:e2:29:77:af:f8:32:9f:76:22:13:33:52:a9:90:
29:ce:95:99:1a:bd:f7:db:73:df:b1:93:eb:9f:bc:6a:ac:c8:
7c:a6:df:00:e4:7a:1f:b2:f9:30:b9:78:ae:70:00:58:bf:28:
4d:17:9a:57:08:d2:c1:cf:b7:77:74:0d:9d:e9:66:f4:7a:cc:
0f:0e:4b:d5:df:d9:ed:55:83:83:40:7d:1f:d6:0e:0e:c7:eb:
2b:80:1b:68:8d:4d:1c:10:01:b7:e4:63:74:af:13:0f:5a:df:
bc:df:7a:b7:bd:be:5b:43:da:bb:7f:a5:a0:db:c6:58:c8:cf:
6b:cd:0d:bd:de:84:a6:13:30:2f:6b:2a:a3:87:fc:12:60:e2:
85:9a:da:2a:e4:7c:8e:7d:ad:e8:70:f2:ab:b6:35:62:88:35:
27:8d:bc:cb:24:a3:f9:9f:00:71:1d:a4:bd:a4:b9:68:e4:97:
e4:2e:4e:f4:d3:a9:82:21:de:10:d8:93:fc:ff:17:fd:91:3a:
ea:b6:0b:13:b0:cb:ea:c2:87:c3:48:40:a7:7e:20:9c:12:d8:
93:6c:96:60:e9:21:35:2c:19:44:ed:c1:68:87:12:35:a7:87:
8b:db:02:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org