Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-mhRwFtb5oL1JesN7xb9suJfXWM.roa
File: -mhRwFtb5oL1JesN7xb9suJfXWM.roa (raw, json)
Hash identifier: pU2dRAPqco2NfeNT2d8TzSLnGMlPuK4k4DBaR2C2iZE=
Subject key identifier: FA:68:51:C0:5B:5B:E6:82:F5:25:EB:0D:EF:16:FD:B2:E2:5F:5D:63
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B79
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-mhRwFtb5oL1JesN7xb9suJfXWM.roa
Signing time: Wed 29 Sep 2021 02:46:38 +0000
ROA not before: Wed 29 Sep 2021 02:46:38 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 45.64.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7033 (0x1b79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:38 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=FA6851C05B5BE682F525EB0DEF16FDB2E25F5D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b9:dd:bf:4c:48:2a:dd:bc:26:1e:94:6f:e1:
f0:9b:1f:d9:96:dd:6d:bc:a5:7c:d3:b8:f7:f0:2e:
4c:32:b9:5c:f2:05:d5:3b:41:9e:3f:0f:80:cf:d5:
7f:50:fa:f2:1f:9a:93:a8:63:d4:0c:88:08:73:dd:
22:8e:34:33:73:9b:a6:e1:02:9a:e6:33:25:0f:eb:
14:0c:9d:91:6f:ba:95:97:93:4c:da:dd:b9:aa:ac:
72:3a:a0:08:38:5e:f2:66:8e:7f:de:73:62:6b:3b:
83:61:4d:e0:b1:24:4d:2d:07:9b:01:81:d7:a7:07:
3c:59:4c:6a:29:4d:82:66:56:e9:8b:53:24:cf:dd:
52:a4:28:21:5c:2c:83:75:ca:53:ea:51:97:a5:32:
18:d5:ea:98:96:50:6f:70:7b:84:69:0f:bf:27:56:
7c:bf:62:b1:0e:38:ca:8e:ae:2c:d4:0a:9a:93:1a:
c6:1d:f3:a2:57:d3:da:09:e5:0e:95:61:5d:45:d0:
c3:66:d6:ea:3a:1f:87:a5:cd:1b:5a:4d:a7:ca:d9:
41:11:01:a2:23:27:50:0a:75:7c:01:6b:03:0b:35:
47:f4:ef:94:c8:9b:7d:5b:c4:4e:f7:7c:61:14:81:
3b:1d:b0:2d:4b:b7:4c:10:96:6a:90:f7:04:7f:d0:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:68:51:C0:5B:5B:E6:82:F5:25:EB:0D:EF:16:FD:B2:E2:5F:5D:63
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-mhRwFtb5oL1JesN7xb9suJfXWM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.28.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e1:32:bd:ed:64:a7:54:b2:33:59:cb:a5:63:c6:80:20:6e:
08:7e:33:50:52:07:86:b9:0d:60:48:c3:6c:1a:99:a9:5b:ac:
db:47:9b:6c:08:cb:b1:2c:a8:47:09:85:2e:4a:0b:13:53:f8:
e5:03:5b:9d:c2:0d:0c:38:90:8c:64:5b:dc:17:b6:df:24:78:
37:55:47:5e:cc:4c:96:aa:41:fe:31:7d:51:91:a2:c0:f0:80:
4c:da:7e:15:12:98:64:17:64:e0:d2:d8:b6:cb:f7:29:2d:8b:
8f:e4:bd:aa:39:6c:f1:d1:f7:56:b3:34:72:ba:01:95:09:07:
cb:7b:ef:94:1b:5b:6e:f1:cb:4a:6d:e9:ef:2b:2a:96:3d:c1:
60:88:a7:e2:54:ef:4b:96:2b:ba:1d:6b:06:a2:e3:12:7b:bb:
d8:bf:0a:69:a7:2c:0d:cb:e1:ba:68:c7:df:39:7a:26:9d:f6:
b4:ff:5a:7f:c7:71:4c:e6:a2:71:8d:4d:1f:c7:cf:3e:a6:eb:
11:ac:9c:f6:b8:d8:a4:9c:b0:84:07:b4:0d:00:4a:f0:f7:a9:
59:3b:60:4e:ca:6d:85:b2:f1:8e:31:49:60:90:b6:36:9c:38:
4e:92:8e:0e:0e:99:3b:4b:2c:f8:8a:48:3a:13:cd:85:41:e2:
0a:3d:49:9b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2MzhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEZBNjg1MUMwNUI1QkU2
ODJGNTI1RUIwREVGMTZGREIyRTI1RjVENjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD2ud2/TEgq3bwmHpRv4fCbH9mW3W28pXzTuPfwLkwyuVzyBdU7
QZ4/D4DP1X9Q+vIfmpOoY9QMiAhz3SKONDNzm6bhAprmMyUP6xQMnZFvupWXk0za
3bmqrHI6oAg4XvJmjn/ec2JrO4NhTeCxJE0tB5sBgdenBzxZTGopTYJmVumLUyTP
3VKkKCFcLIN1ylPqUZelMhjV6piWUG9we4RpD78nVny/YrEOOMqOrizUCpqTGsYd
86JX09oJ5Q6VYV1F0MNm1uo6H4elzRtaTafK2UERAaIjJ1AKdXwBawMLNUf075TI
m31bxE73fGEUgTsdsC1Lt0wQlmqQ9wR/0EDDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+mhRwFtb5oL1JesN7xb9suJfXWMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1taFJ3RnRiNW9MMUplc043
eGI5c3VKZlhXTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt
QBwwDQYJKoZIhvcNAQELBQADggEBAEzhMr3tZKdUsjNZy6VjxoAgbgh+M1BSB4a5
DWBIw2wamalbrNtHm2wIy7EsqEcJhS5KCxNT+OUDW53CDQw4kIxkW9wXtt8keDdV
R17MTJaqQf4xfVGRosDwgEzafhUSmGQXZODS2LbL9ykti4/kvao5bPHR91azNHK6
AZUJB8t775QbW27xy0pt6e8rKpY9wWCIp+JU70uWK7odawai4xJ7u9i/CmmnLA3L
4bpox985eiad9rT/Wn/HcUzmonGNTR/Hzz6m6xGsnPa42KScsIQHtA0ASvD3qVk7
YE7KbYWy8Y4xSWCQtjacOE6Sjg4OmTtLLPiKSDoTzYVB4go9SZs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org