Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wxT2aAC3BwqZUpWDYn84mwGWvtY.roa
File: wxT2aAC3BwqZUpWDYn84mwGWvtY.roa (raw, json)
Hash identifier: oNCMlEFTP3MqmVgymPDSOa0DTkzFkvsPxCJ9Uoti6d0=
Subject key identifier: C3:14:F6:68:00:B7:07:0A:99:52:95:83:62:7F:38:9B:01:96:BE:D6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1F09
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wxT2aAC3BwqZUpWDYn84mwGWvtY.roa
Signing time: Fri 01 Jul 2022 02:06:12 +0000
ROA not before: Fri 01 Jul 2022 02:06:12 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.234.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7945 (0x1f09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Jul 1 02:06:12 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C314F66800B7070A99529583627F389B0196BED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:3e:f3:78:f0:99:5a:79:56:1a:3d:b2:18:
11:38:86:07:c7:f6:8b:1f:ed:24:c9:41:cb:41:6f:
41:f2:fb:72:d3:b0:aa:49:4a:02:a9:32:e3:f0:06:
01:8c:67:30:e8:a9:97:a1:af:ee:58:ee:d9:e0:49:
57:53:50:38:f7:71:1a:97:21:d1:bc:5d:82:fe:99:
42:c3:79:da:c2:cf:6c:0c:0e:1c:3e:ad:9f:2e:a5:
2e:b9:a1:0c:0b:da:46:2e:8c:c5:87:6d:9f:87:9d:
79:31:41:ac:0e:6f:c1:4f:35:60:c1:5b:e2:9d:66:
a6:ba:ec:63:64:1b:7c:75:62:96:3e:a8:46:17:ad:
21:06:75:bc:d1:2d:1c:9d:1d:4c:3d:ba:ca:50:c6:
2c:69:3b:d5:58:91:29:5f:1e:83:56:51:28:ea:06:
1f:6d:63:08:9d:1c:bc:08:56:64:0a:cd:a4:11:1f:
19:f0:b1:03:28:0c:5e:35:b4:e9:12:2e:cf:a2:21:
e9:75:b7:53:b9:3f:9b:14:7e:f5:aa:cc:b6:79:63:
6e:09:c0:7a:fe:0c:2f:54:c2:8c:c5:ae:56:6b:b0:
f1:0c:f7:a6:7a:87:02:bd:0f:08:20:9e:62:db:94:
1f:e1:61:42:7c:d2:5e:4d:da:1e:e1:32:c6:cd:9e:
c8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:14:F6:68:00:B7:07:0A:99:52:95:83:62:7F:38:9B:01:96:BE:D6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wxT2aAC3BwqZUpWDYn84mwGWvtY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.234.0/23
Signature Algorithm: sha256WithRSAEncryption
20:e8:ff:12:f1:3a:c9:a9:06:30:c9:3d:5f:42:0b:31:77:2f:
fe:45:dc:cd:b7:ad:4f:45:fd:96:2c:98:ee:f6:4f:62:ed:a5:
59:20:dd:6f:9b:7c:26:3a:0e:80:fc:30:51:07:11:d3:3c:29:
f4:12:01:3c:f4:b1:9a:9b:38:34:cb:b4:00:f6:3c:69:17:26:
2c:42:d6:f1:0b:1c:91:b8:71:69:65:0a:b4:50:2d:9d:a3:cc:
f9:1c:27:c8:37:9f:27:24:94:89:0b:e3:cf:98:e4:e7:56:41:
d7:42:35:24:57:ba:02:90:3a:c7:91:10:0f:d7:aa:29:bd:d5:
e0:b0:21:6c:d3:8b:18:be:8a:ef:33:b7:03:17:a8:22:0f:84:
9a:0e:33:58:29:1b:4b:1b:25:f5:ae:a4:d9:8b:8e:2d:3b:ad:
0b:b1:5d:81:c2:5c:f2:a5:9a:5f:38:83:bd:28:b9:e1:60:0e:
8b:ba:2d:71:22:3e:22:3d:b1:86:c0:31:99:b5:5f:3a:3d:df:
65:af:ae:4b:e7:38:4f:67:36:67:b6:61:82:65:8b:b2:ec:ea:
18:93:b1:58:01:7f:d2:d8:f1:7d:67:87:cc:75:57:25:35:dc:
7f:07:6d:47:c2:bb:15:84:05:21:46:e6:3d:7d:1a:6e:97:79:
8f:14:8a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org