Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xjWSY-3OD_gT74qPcsPMWoLXpYM.roa
File: xjWSY-3OD_gT74qPcsPMWoLXpYM.roa (raw, json)
Hash identifier: ffsa3KlIkyJoPi9jxAVZSa8qZxLLPB8kk+IIP0uMUZ0=
Subject key identifier: C6:35:92:63:ED:CE:0F:F8:13:EF:8A:8F:72:C3:CC:5A:82:D7:A5:83
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xjWSY-3OD_gT74qPcsPMWoLXpYM.roa
Signing time: Thu 15 Sep 2022 02:53:12 +0000
ROA not before: Thu 15 Sep 2022 02:53:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C6359263EDCE0FF813EF8A8F72C3CC5A82D7A583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:63:4c:aa:c8:40:c5:bb:56:5a:39:13:25:
23:81:13:b2:69:bc:2c:ce:e1:ba:d2:b0:1f:72:10:
63:fd:25:95:b4:05:45:2a:b5:e5:09:d9:1c:6f:84:
cb:09:30:81:20:a4:96:22:a9:71:c7:8f:25:45:34:
9e:9f:1c:1a:fd:d5:0d:26:7d:91:a0:6c:1b:67:27:
82:36:15:82:35:d2:a7:1a:f3:08:1b:b3:73:69:8a:
e4:73:03:05:78:67:52:4b:63:47:eb:42:22:b1:d6:
ad:f3:40:19:4b:d5:1f:dc:20:d6:ad:47:71:ae:cf:
af:1c:82:cc:3a:1b:a8:5e:0c:1b:0a:54:ed:73:38:
30:bc:90:db:5b:ef:98:14:13:c5:aa:c6:2c:fb:ef:
42:71:1e:af:67:ff:a1:f2:82:31:ae:ab:c9:a7:99:
b1:56:be:59:5b:a0:a0:fe:82:96:75:2c:d8:95:ff:
47:3f:9f:29:e2:5c:27:c9:37:a5:f4:b2:c4:82:f9:
9b:15:2b:cc:ef:6c:37:bd:1e:85:73:78:13:a9:4a:
8c:07:bc:ff:da:01:46:41:ba:ef:52:a0:50:44:81:
41:71:bd:e3:39:68:bc:b8:02:0e:47:bc:ee:03:f6:
5c:a9:89:00:dc:dc:d4:21:87:e3:c0:3c:cc:2b:ed:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:35:92:63:ED:CE:0F:F8:13:EF:8A:8F:72:C3:CC:5A:82:D7:A5:83
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xjWSY-3OD_gT74qPcsPMWoLXpYM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.64.0/18
Signature Algorithm: sha256WithRSAEncryption
49:eb:c7:1a:93:d6:d2:df:a6:69:f5:ad:a8:60:74:39:26:c3:
e4:61:63:01:1b:ea:95:76:8f:aa:81:9b:fd:59:1e:d6:60:7a:
e2:9e:10:76:11:42:8e:ae:29:35:d3:b7:83:ba:24:b8:2a:c3:
a0:63:e7:ca:1f:48:a2:46:44:ac:f5:99:a0:ab:95:5b:14:93:
40:51:03:58:07:98:3b:78:1b:bd:c3:24:3e:76:df:68:d3:c7:
ea:4c:6b:49:82:e9:11:5f:6f:6e:59:3c:65:bf:31:2b:d9:a1:
ea:fc:09:f2:a7:fa:ed:c7:51:c8:6d:88:b9:e9:ad:68:1b:bb:
58:a5:fd:07:34:20:7a:91:6a:71:ae:c9:5d:ea:f8:e6:ba:49:
29:1c:5a:a5:71:5a:08:05:e5:74:e8:8d:6d:3c:35:64:5c:0d:
b4:1e:b2:68:80:70:e1:e5:05:3d:f2:9a:3e:55:0a:0e:e9:91:
c1:c3:82:49:f2:8f:58:c9:ed:56:71:22:c1:f4:69:a8:ab:9c:
62:68:d5:0b:4f:f2:88:de:71:fc:4c:dc:7b:f1:8d:86:92:22:
c2:3c:b0:0b:f4:00:71:9e:93:51:39:d7:18:c3:ec:ba:b7:37:
d7:d2:9a:05:17:d9:ac:ef:bf:57:e8:d8:3a:c6:3a:06:4a:b2:
1e:12:58:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org