Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xlDgZ2SyGtI3EIOXn8rJaFyumQ0.roa
File: xlDgZ2SyGtI3EIOXn8rJaFyumQ0.roa (raw, json)
Hash identifier: z3bq36B/jzbMEal3RTY9tvppGIy0dZyBYBdaRgpVmkM=
Subject key identifier: C6:50:E0:67:64:B2:1A:D2:37:10:83:97:9F:CA:C9:68:5C:AE:99:0D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xlDgZ2SyGtI3EIOXn8rJaFyumQ0.roa
Signing time: Thu 15 Sep 2022 02:44:55 +0000
ROA not before: Thu 15 Sep 2022 02:44:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C650E06764B21AD2371083979FCAC9685CAE990D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:05:f4:6d:61:4d:38:19:36:06:65:a6:d9:
5a:a8:1b:82:c8:c0:75:42:3d:33:f7:03:bf:9a:f4:
d3:67:01:49:67:b8:e7:c3:11:5d:96:ed:b3:06:4a:
a5:3c:29:9b:1a:1d:1e:0f:44:7a:53:43:4e:30:44:
03:f0:43:c4:e1:b5:cd:47:d7:db:76:72:36:05:a8:
51:42:af:a3:e2:80:52:9d:8d:da:e7:db:9d:3f:ae:
33:69:57:0e:0e:2b:0a:4d:b3:1b:5c:62:5c:95:19:
a6:f0:e4:2a:22:20:0e:86:dd:08:47:f8:33:36:53:
85:fc:88:0a:f2:c0:e9:ee:8e:4b:43:0f:31:2f:b9:
e8:78:30:17:09:42:56:ec:ca:0e:c0:d7:37:ef:2a:
07:e6:71:4f:df:d1:3e:f7:37:d9:ef:ec:81:d3:ad:
bf:ca:c4:ed:18:bb:00:7f:8b:1a:97:d1:08:3c:96:
eb:14:0d:ce:d4:1d:da:af:8a:60:e9:b1:99:f8:f4:
b5:09:98:7e:e2:8a:13:10:77:58:7f:20:b7:52:05:
ae:5e:dc:f6:9b:fa:5d:a8:bb:df:14:67:14:0d:56:
ab:dc:10:7c:04:3e:13:db:68:65:10:04:06:7a:58:
7f:95:e5:e8:b2:a7:d8:f1:de:ef:99:bc:cc:74:88:
5c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:50:E0:67:64:B2:1A:D2:37:10:83:97:9F:CA:C9:68:5C:AE:99:0D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xlDgZ2SyGtI3EIOXn8rJaFyumQ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.64.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:02:75:be:81:bf:cb:0d:a9:79:ed:d9:33:91:8c:56:87:72:
1e:c7:6f:ab:7a:3f:9b:91:78:86:db:ef:89:60:87:a0:18:d6:
46:41:a4:bb:7d:3e:51:a2:92:8f:dd:70:49:09:d9:7e:16:0c:
4e:fa:31:39:53:89:0c:d0:13:37:4c:07:42:18:33:33:68:99:
3f:4b:0b:98:9f:f8:6e:2b:2a:f5:d0:45:86:1d:ee:e0:c8:82:
2c:33:ae:cb:3e:82:ee:9c:34:d3:10:c7:4c:f3:fb:e9:2a:2f:
4c:94:6b:0f:87:cb:47:6b:77:36:67:02:dd:ac:57:76:9b:38:
7e:f2:1c:6d:09:a5:da:a9:ec:e5:fb:be:ce:49:5d:f5:9c:f4:
22:f3:be:59:9c:46:16:c2:60:e5:e9:2a:2d:8b:66:3e:e5:82:
5f:2f:b4:18:14:bc:a8:f2:06:6b:26:e1:af:82:b3:90:12:39:
96:63:b8:93:b7:43:51:43:c7:8b:c4:18:0e:62:92:a0:20:e3:
61:c0:fc:49:10:df:4a:5e:6e:8b:a7:d8:a9:0a:3d:76:5e:69:
cb:cc:f3:d1:94:40:87:6f:9e:44:6c:06:77:ef:8b:69:e4:e8:
a7:39:96:fc:8c:67:c6:f7:9e:cc:1f:ac:fb:50:84:62:4f:3e:
7b:3b:25:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:41 2025 by rpki-client