Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wuCW3dOJh76LGsjmZGHB_t1PDu8.roa
File: wuCW3dOJh76LGsjmZGHB_t1PDu8.roa (raw, json)
Hash identifier: dbtNgzCfpGRPYLvS4xqmFHgDlSzojebv4MNTix4kxa4=
Subject key identifier: C2:E0:96:DD:D3:89:87:BE:8B:1A:C8:E6:64:61:C1:FE:DD:4F:0E:EF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22B0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wuCW3dOJh76LGsjmZGHB_t1PDu8.roa
Signing time: Fri 25 Nov 2022 04:41:31 +0000
ROA not before: Fri 25 Nov 2022 04:41:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8880 (0x22b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C2E096DDD38987BE8B1AC8E66461C1FEDD4F0EEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:29:dc:4f:ba:44:06:76:e3:50:6f:7d:62:e9:
59:dd:11:1a:f5:87:0a:ef:86:db:2d:95:5e:58:8f:
18:bf:8b:d9:0a:cc:0f:d9:c2:e4:89:c3:1e:c5:fc:
87:de:c4:0c:2c:d5:e4:59:40:9c:77:2b:a9:aa:fa:
12:79:58:43:ef:26:aa:f4:bf:2e:31:51:49:e1:d5:
3d:1d:ee:c5:80:77:fb:1a:b8:5b:cd:a2:0c:ac:3d:
2b:4f:80:ae:49:9b:88:90:c3:4f:20:97:c7:1f:2f:
aa:87:07:8e:99:7e:c4:26:d9:92:c0:be:7e:cf:50:
4d:fb:b5:2c:3a:e8:7e:28:f0:bf:42:ae:29:ce:4e:
ad:bc:bd:d3:83:82:f4:31:0c:e2:8b:55:c8:e4:f0:
55:d2:83:55:0b:96:06:8d:1c:64:20:2e:f4:b9:97:
13:dd:2b:16:64:68:97:44:31:15:37:f0:43:58:83:
45:9c:0e:f1:f9:13:f7:2d:c5:30:c9:6f:13:9c:a6:
26:89:86:b3:6a:a7:5c:71:94:e1:1d:4e:af:77:6d:
8c:43:67:b4:c4:ef:cd:20:d0:67:a1:0c:6f:0a:67:
52:c4:c1:4e:70:57:df:89:30:ba:3d:db:c5:dd:ba:
98:8b:0b:f8:e7:6d:f8:9c:0c:77:7f:18:d0:31:43:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E0:96:DD:D3:89:87:BE:8B:1A:C8:E6:64:61:C1:FE:DD:4F:0E:EF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wuCW3dOJh76LGsjmZGHB_t1PDu8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.136.0/21
Signature Algorithm: sha256WithRSAEncryption
90:d5:d2:7f:4f:ee:6d:ba:99:d5:73:a0:ec:1e:49:f3:f7:e6:
fd:8a:1b:ff:bd:dc:bb:64:a3:c7:13:a6:8b:d2:b2:b9:70:d1:
27:22:df:f7:29:9f:87:ff:e7:66:6c:5f:d3:98:30:dc:08:75:
a3:a6:de:59:02:87:9d:ee:8b:e5:b7:ef:a0:c2:97:ea:98:cf:
58:fe:1f:09:f7:f6:a5:33:68:d7:0d:a1:2d:25:8a:5d:dc:bc:
bb:4f:95:aa:dc:93:77:64:d0:e6:9b:03:15:43:75:4a:fd:f6:
3e:f7:fb:b2:77:58:77:02:83:f4:a3:e9:79:fe:bf:61:e6:50:
99:a4:d9:eb:98:3f:4e:88:5a:4a:d3:07:8e:af:9f:11:71:7b:
98:c3:f7:fc:3f:14:45:6a:ae:18:89:27:30:33:25:69:69:60:
8d:17:17:6e:ad:6c:dc:5b:2a:ef:58:2b:ff:31:05:22:21:fe:
d2:ab:81:39:06:2e:91:09:8c:89:1e:69:87:8c:b1:4d:43:78:
83:2c:7a:86:a0:26:29:eb:65:62:ff:dc:64:bc:5f:17:fb:f4:
84:cf:56:72:36:e8:d0:ef:7b:2c:e8:51:1a:54:19:0f:74:d5:
61:cd:08:6b:12:07:5e:cb:67:55:63:1f:eb:f7:45:b3:c3:6a:
d8:21:be:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:45 2025 by rpki-client