Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wT1VFJps29oiYEG8JVvKe0OTOCo.roa
File: wT1VFJps29oiYEG8JVvKe0OTOCo.roa (raw, json)
Hash identifier: 4L+SOPtq283wdbgf3EDwC/BvJdVvEZO196T++bDK5Pc=
Subject key identifier: C1:3D:55:14:9A:6C:DB:DA:22:60:41:BC:25:5B:CA:7B:43:93:38:2A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EF3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wT1VFJps29oiYEG8JVvKe0OTOCo.roa
Signing time: Tue 29 Sep 2020 09:56:20 +0000
ROA not before: Tue 29 Sep 2020 09:56:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3827 (0xef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:20 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C13D55149A6CDBDA226041BC255BCA7B4393382A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:42:28:1f:26:04:2e:7a:16:f6:34:db:f8:
63:fa:bc:4d:12:dd:d0:fe:ab:3c:a4:c1:5b:5d:63:
23:0f:10:8a:a7:40:14:8f:97:aa:75:66:41:08:67:
7e:39:b8:53:51:af:81:c1:43:9d:da:a5:e7:05:af:
59:9f:f3:e7:ab:82:92:01:dd:64:92:d9:ca:ba:d9:
3a:83:17:80:ab:61:1a:89:16:ce:59:e6:06:7f:f7:
35:65:a0:74:56:42:d6:d5:78:b7:8f:f8:20:06:af:
b8:b0:d9:6f:04:78:91:5c:a1:20:62:e8:48:2f:75:
69:5b:13:e9:48:27:df:29:4c:b3:3d:ed:77:4d:b1:
82:6b:81:95:1c:a8:c1:8a:9c:97:00:b6:ba:e9:0a:
69:0f:4e:54:67:f1:53:aa:71:c3:06:6a:52:d1:2d:
91:d7:84:7d:eb:9c:d6:89:c6:73:23:cd:9d:cb:87:
9b:e8:29:bf:16:02:bc:61:90:d8:60:0c:64:b8:61:
4b:af:e1:b5:eb:7a:c6:40:bf:00:c5:2c:a1:bf:7e:
c1:75:88:4b:c1:04:ee:2c:a3:44:5f:f4:d2:ad:8a:
ca:10:14:cb:ed:27:2d:c1:e8:f3:9e:ba:da:6f:bf:
61:18:97:92:10:df:a1:1f:0c:61:92:52:f5:1b:c3:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3D:55:14:9A:6C:DB:DA:22:60:41:BC:25:5B:CA:7B:43:93:38:2A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wT1VFJps29oiYEG8JVvKe0OTOCo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.156.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:1b:ab:4e:56:47:c7:f6:b8:c7:58:05:cc:6a:e2:f2:44:55:
a7:f0:9b:43:dd:57:a9:54:f2:f6:ba:a8:22:f4:1b:02:95:fa:
ab:53:58:e8:dc:a3:a9:3e:0c:1c:18:b8:0c:52:92:4f:8f:d6:
61:f8:d7:3a:6c:26:83:50:12:0d:ea:b0:fe:ce:59:c7:1f:42:
1b:cc:6b:ec:42:bd:7e:37:75:fe:bf:3f:b4:61:7c:5f:a7:e8:
2e:0a:76:af:05:89:55:f1:6c:23:91:aa:f9:4e:10:75:74:a6:
98:c5:3f:5f:56:b6:6c:90:9c:62:e1:20:52:cd:31:52:09:c0:
f9:9b:88:28:d7:df:5b:8f:59:65:62:80:3b:a3:9b:e2:fd:eb:
f9:20:9e:f6:f5:14:3a:eb:d6:50:60:57:b2:e7:8d:7f:dc:a8:
6e:25:24:fa:c1:d5:0c:6f:46:ea:8e:44:c6:88:89:f7:aa:4b:
43:e8:af:4c:50:bc:c1:07:a4:dd:08:bb:c5:2a:a3:ad:85:a5:
38:da:0e:1c:92:10:5e:3c:16:1f:aa:c2:70:70:7e:e3:52:35:
48:0f:57:b4:75:71:5b:78:6e:ca:5d:a0:fc:a3:e2:c9:30:9d:
19:85:87:2e:47:44:9f:55:23:ce:98:b2:2a:cc:2b:3e:10:69:
94:5a:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:31 2025 by rpki-client