Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-Pf9c76Wd98reB_kYWmXgPR_6TI.roa
File: -Pf9c76Wd98reB_kYWmXgPR_6TI.roa (raw, json)
Hash identifier: GqBo3/L0cCaNijYHQjcW53lAlLuZWCYM9qaBTlbV/k4=
Subject key identifier: F8:F7:FD:73:BE:96:77:DF:2B:78:1F:E4:61:69:97:80:F4:7F:E9:32
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-Pf9c76Wd98reB_kYWmXgPR_6TI.roa
Signing time: Thu 15 Sep 2022 02:54:07 +0000
ROA not before: Thu 15 Sep 2022 02:54:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 45.64.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:54:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F8F7FD73BE9677DF2B781FE461699780F47FE932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:74:f4:5f:d6:8b:80:95:2c:37:9d:23:cd:
ca:ae:d2:1d:df:c0:04:0e:ee:98:45:76:0b:6d:9a:
73:23:50:be:79:40:7d:5f:b1:75:9a:53:b8:6a:29:
a0:23:e6:bd:d5:69:e8:86:18:af:63:46:83:cf:4f:
86:56:ca:67:81:71:2a:f7:6c:4b:93:5f:fa:df:71:
0b:24:9e:eb:71:4c:53:e5:12:79:c8:71:75:6c:0a:
1d:aa:b4:c9:32:d1:4c:1a:24:20:6b:4e:9f:4c:5b:
44:da:2c:6a:43:67:40:8f:52:61:81:7d:42:e0:24:
f0:6a:0c:bf:c0:f4:a8:66:b3:47:48:69:fa:8c:12:
26:9a:53:31:cd:65:f6:96:38:12:a0:eb:ff:46:ad:
83:d8:df:96:fd:a8:3c:d5:55:e7:b1:88:f6:44:92:
3d:12:3f:c7:f2:41:dd:0d:89:16:20:8b:17:62:98:
1c:0e:d8:46:ee:59:d1:45:e0:95:f0:81:0d:ac:4c:
35:36:24:66:77:e2:04:0a:fc:73:8c:f1:00:35:15:
a8:d3:75:25:51:ca:aa:5d:ef:87:53:76:8d:a2:34:
04:3d:c2:80:60:e9:9c:e8:5a:1b:fd:ec:ab:14:59:
57:da:5d:02:75:5a:6c:9b:02:2d:8f:ff:a2:df:ba:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F7:FD:73:BE:96:77:DF:2B:78:1F:E4:61:69:97:80:F4:7F:E9:32
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-Pf9c76Wd98reB_kYWmXgPR_6TI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.28.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:bc:ca:9d:e7:19:70:b4:2a:a6:dc:1d:b6:6e:81:23:a7:24:
36:a1:74:bf:50:aa:92:0e:9a:7f:1f:56:53:07:20:da:60:6a:
45:76:72:36:94:ea:e1:e0:4e:bc:2f:b3:a1:0c:79:d3:9f:ca:
90:32:d8:60:2e:4b:1f:bc:ed:dd:dc:e9:2d:ab:6e:78:d0:65:
8d:c1:cf:6a:cf:e8:f7:59:58:87:75:10:00:a7:ec:f1:52:25:
79:d6:28:29:60:c1:40:2e:ad:63:7b:4e:c5:42:8d:36:9a:6d:
e9:8a:d9:6f:5a:ad:85:fd:e9:48:3b:fd:b1:f6:a9:82:92:09:
27:c1:3e:73:56:68:4d:7e:e4:92:04:40:31:69:0d:0c:a8:78:
52:93:56:d7:1b:b0:4a:4d:1d:69:2d:77:fb:33:a8:64:6c:aa:
5b:47:ff:f2:1e:5c:97:04:a4:52:f9:84:79:30:2f:28:1c:40:
fd:58:0b:da:8a:44:26:f2:2e:e1:68:10:ad:e3:7a:19:5f:26:
39:3b:ff:f9:4d:a1:0f:aa:26:52:06:18:5b:81:94:8a:0d:4e:
43:ed:ef:79:95:be:6d:b8:d9:31:f7:c5:a0:88:97:58:c7:57:
1d:67:cc:8f:7f:d2:56:5a:d7:bb:b4:08:b1:0a:fa:11:0e:29:
d4:fc:5a:93
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjU0MDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEY4RjdGRDczQkU5Njc3
REYyQjc4MUZFNDYxNjk5NzgwRjQ3RkU5MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8BnT0X9aLgJUsN50jzcqu0h3fwAQO7phFdgttmnMjUL55QH1f
sXWaU7hqKaAj5r3VaeiGGK9jRoPPT4ZWymeBcSr3bEuTX/rfcQsknutxTFPlEnnI
cXVsCh2qtMky0UwaJCBrTp9MW0TaLGpDZ0CPUmGBfULgJPBqDL/A9Khms0dIafqM
EiaaUzHNZfaWOBKg6/9GrYPY35b9qDzVVeexiPZEkj0SP8fyQd0NiRYgixdimBwO
2EbuWdFF4JXwgQ2sTDU2JGZ34gQK/HOM8QA1FajTdSVRyqpd74dTdo2iNAQ9woBg
6ZzoWhv97KsUWVfaXQJ1WmybAi2P/6LfunoNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+Pf9c76Wd98reB/kYWmXgPR/6TIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1QZjljNzZXZDk4cmVCX2tZ
V21YZ1BSXzZUSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt
QBwwDQYJKoZIhvcNAQELBQADggEBAK28yp3nGXC0KqbcHbZugSOnJDahdL9QqpIO
mn8fVlMHINpgakV2cjaU6uHgTrwvs6EMedOfypAy2GAuSx+87d3c6S2rbnjQZY3B
z2rP6PdZWId1EACn7PFSJXnWKClgwUAurWN7TsVCjTaabemK2W9arYX96Ug7/bH2
qYKSCSfBPnNWaE1+5JIEQDFpDQyoeFKTVtcbsEpNHWktd/szqGRsqltH//IeXJcE
pFL5hHkwLygcQP1YC9qKRCbyLuFoEK3jehlfJjk7//lNoQ+qJlIGGFuBlIoNTkPt
73mVvm242TH3xaCIl1jHVx1nzI9/0lZa17u0CLEK+hEOKdT8WpM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org