Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3BY9zCPIq5Ifa11ip_OM48KTLhk.roa
File: 3BY9zCPIq5Ifa11ip_OM48KTLhk.roa (raw, json)
Hash identifier: n+OWCyq00tTCqFzXZvHgfLUnN11D3zJA1HKz3EAhhec=
Subject key identifier: DC:16:3D:CC:23:C8:AB:92:1F:6B:5D:62:A7:F3:8C:E3:C2:93:2E:19
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18A7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3BY9zCPIq5Ifa11ip_OM48KTLhk.roa
Signing time: Sun 07 Feb 2021 12:50:45 +0000
ROA not before: Sun 07 Feb 2021 12:50:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 118.232.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6311 (0x18a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:50:45 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DC163DCC23C8AB921F6B5D62A7F38CE3C2932E19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:85:57:79:91:44:7e:86:fc:1e:fa:47:ae:
51:c2:2e:c1:a7:0a:50:45:f6:56:d8:32:6d:fd:a2:
d6:ee:73:66:c7:d2:07:26:18:7b:02:44:8e:51:e2:
02:87:d2:af:37:0c:41:ed:67:41:86:c6:59:71:c6:
4b:3c:a4:a6:f8:c9:e3:42:58:59:f3:9b:77:29:6a:
15:a9:21:af:e7:df:71:25:4f:3f:30:c7:64:32:f7:
6f:d5:9a:19:07:47:7f:4a:81:8c:01:e6:46:3b:33:
c7:5b:9e:8e:84:60:ef:71:f8:cb:96:f4:33:88:ec:
4f:d8:a6:87:98:6b:c7:8e:19:92:2a:a1:08:0a:5e:
64:3b:68:d3:90:a8:23:ea:7a:a6:89:2b:6e:1e:58:
c2:68:0e:ec:89:a0:07:f4:c3:71:62:03:8f:fd:7a:
ba:e1:b5:9a:fe:d6:56:5f:3e:87:16:9a:46:fb:79:
72:2f:0e:bc:41:d2:4d:66:0e:be:09:ff:cc:12:3d:
61:a1:8e:21:0a:13:03:17:78:5f:43:21:0b:c2:c8:
73:37:e0:71:03:64:59:df:12:8b:11:25:34:45:4f:
fd:ab:05:97:e3:3c:b4:de:64:63:0b:85:7e:80:ad:
13:5e:ea:e6:b5:62:c6:45:67:c3:6d:59:76:ef:55:
ee:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:3D:CC:23:C8:AB:92:1F:6B:5D:62:A7:F3:8C:E3:C2:93:2E:19
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3BY9zCPIq5Ifa11ip_OM48KTLhk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.64.0/19
Signature Algorithm: sha256WithRSAEncryption
92:ad:22:ab:4c:7b:46:04:24:db:4b:d7:a7:7a:06:72:41:1c:
45:93:7c:de:ad:5d:f1:7f:8b:80:18:2f:cf:2f:df:61:48:77:
02:b3:2e:e3:06:5f:e7:bb:50:f1:5c:03:bb:ea:b0:0f:1c:b3:
74:59:ed:3b:1e:6e:48:62:ed:9d:e3:3c:c5:0c:f8:c1:58:08:
93:55:96:54:53:3d:28:83:00:58:13:ff:68:b2:00:c6:3e:dd:
37:52:1a:91:72:1d:bf:88:f7:59:c2:23:c0:93:84:04:96:8e:
4a:33:f8:11:4c:6b:be:e1:79:3b:1c:df:1a:51:87:14:16:32:
8e:c8:ed:c7:d1:fa:21:00:09:5b:e0:56:c6:7e:44:55:4d:5c:
7a:61:ca:13:a6:2d:64:2c:41:2e:63:80:64:eb:7b:ab:02:da:
7b:6d:8c:51:c9:e7:c3:aa:bb:94:11:a2:96:44:76:5d:a3:7a:
28:45:47:82:9c:4f:80:07:f4:56:e6:0c:51:4b:24:89:0a:87:
b8:99:c6:47:14:08:f0:2c:d6:b0:96:5e:34:97:a4:8d:58:5f:
3a:1a:20:ef:51:b7:4f:80:a7:97:ac:51:76:28:19:c9:d6:30:
8b:67:51:25:54:a7:f6:d6:8b:e2:da:fa:1d:5e:ca:f6:32:8f:
ae:a4:62:eb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjUwNDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKERDMTYzRENDMjNDOEFC
OTIxRjZCNUQ2MkE3RjM4Q0UzQzI5MzJFMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC95oVXeZFEfob8HvpHrlHCLsGnClBF9lbYMm39otbuc2bH0gcm
GHsCRI5R4gKH0q83DEHtZ0GGxllxxks8pKb4yeNCWFnzm3cpahWpIa/n33ElTz8w
x2Qy92/VmhkHR39KgYwB5kY7M8dbno6EYO9x+MuW9DOI7E/YpoeYa8eOGZIqoQgK
XmQ7aNOQqCPqeqaJK24eWMJoDuyJoAf0w3FiA4/9errhtZr+1lZfPocWmkb7eXIv
DrxB0k1mDr4J/8wSPWGhjiEKEwMXeF9DIQvCyHM34HEDZFnfEosRJTRFT/2rBZfj
PLTeZGMLhX6ArRNe6ua1YsZFZ8NtWXbvVe7xAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU3BY9zCPIq5Ifa11ip/OM48KTLhkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzNCWTl6Q1BJcTVJZmExMWlw
X09NNDhLVExoay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2
6EAwDQYJKoZIhvcNAQELBQADggEBAJKtIqtMe0YEJNtL16d6BnJBHEWTfN6tXfF/
i4AYL88v32FIdwKzLuMGX+e7UPFcA7vqsA8cs3RZ7Tsebkhi7Z3jPMUM+MFYCJNV
llRTPSiDAFgT/2iyAMY+3TdSGpFyHb+I91nCI8CThASWjkoz+BFMa77heTsc3xpR
hxQWMo7I7cfR+iEACVvgVsZ+RFVNXHphyhOmLWQsQS5jgGTre6sC2nttjFHJ58Oq
u5QRopZEdl2jeihFR4KcT4AH9FbmDFFLJIkKh7iZxkcUCPAs1rCWXjSXpI1YXzoa
IO9Rt0+Ap5esUXYoGcnWMItnUSVUp/bWi+La+h1eyvYyj66kYus=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org