Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7HWj51xO4yr1AlnnxE1m7_PN9Ng.roa
File: 7HWj51xO4yr1AlnnxE1m7_PN9Ng.roa (raw, json)
Hash identifier: xTAoWD+DAqbSbzz/nycYOQyP2Yb5S93+2qWqYa8xcS0=
Subject key identifier: EC:75:A3:E7:5C:4E:E3:2A:F5:02:59:E7:C4:4D:66:EF:F3:CD:F4:D8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 238E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7HWj51xO4yr1AlnnxE1m7_PN9Ng.roa
Signing time: Fri 16 Dec 2022 03:59:32 +0000
ROA not before: Fri 16 Dec 2022 03:59:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.200.0/21 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9102 (0x238e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Dec 16 03:59:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EC75A3E75C4EE32AF50259E7C44D66EFF3CDF4D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:5c:5d:a0:e7:cd:68:f5:e4:42:3f:66:b1:
a5:d9:5c:36:25:a6:a2:b3:01:bf:43:c3:06:d4:4a:
b6:a3:67:5e:41:46:f7:15:96:e7:74:44:ed:9d:c5:
e4:ad:d6:ae:d7:5c:45:96:ac:a1:b1:17:3c:cb:25:
e0:13:b8:bd:7c:8e:f8:1d:96:5c:d6:fc:05:f7:88:
60:fd:d8:7e:db:77:16:b9:69:a5:96:cb:15:d1:f2:
cc:ed:81:d0:43:8b:e9:fe:4d:0b:51:e2:d5:71:a6:
bd:f5:57:9e:37:22:14:82:c8:9d:7c:0e:9e:72:d1:
da:fa:75:8a:35:51:7c:08:a0:96:f5:d6:93:90:57:
97:6a:ff:ed:02:2b:e8:b5:1d:20:ff:73:a7:63:69:
12:2e:de:f8:83:27:e1:1e:5b:64:a9:f2:82:a8:cc:
5f:46:3a:63:00:88:d3:26:85:48:b5:78:84:b2:5e:
dc:67:85:fa:91:5a:5b:4c:85:ce:50:ee:b8:d8:16:
ce:57:e4:d8:b1:cb:5b:5e:30:0e:f0:b1:74:9a:9a:
1a:6d:01:ac:63:fa:4b:f1:5f:3d:ad:91:82:e4:3d:
64:6e:84:63:4a:f9:80:79:60:1f:f5:d3:c3:39:60:
1e:d7:c1:07:39:e1:e5:ab:4c:27:f2:22:fc:4a:e8:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:75:A3:E7:5C:4E:E3:2A:F5:02:59:E7:C4:4D:66:EF:F3:CD:F4:D8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7HWj51xO4yr1AlnnxE1m7_PN9Ng.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.200.0/21
Signature Algorithm: sha256WithRSAEncryption
00:eb:df:09:9d:da:14:91:4d:e4:09:a7:c0:39:a8:87:11:a3:
54:a3:e8:01:74:39:59:8e:4a:10:af:dd:67:13:75:70:c1:c4:
3a:37:8d:62:2b:a0:c6:2b:df:26:32:a6:fd:57:21:25:c3:2d:
eb:0e:45:3d:40:d5:65:4d:50:fb:0c:8f:7a:ae:42:61:6b:47:
5a:7b:b4:95:d7:17:61:3f:5b:d8:0b:74:ea:9c:17:c3:10:ff:
37:c5:56:53:48:f7:90:82:2d:b9:55:ca:35:35:da:ed:f4:74:
26:a4:bc:48:2c:3f:d3:cb:1d:e1:32:dc:03:8c:82:9f:ad:2e:
19:0c:c9:e8:cf:bc:57:b9:2d:47:e2:98:e2:d4:07:c6:12:81:
7e:95:2f:83:8f:ca:db:b5:47:42:80:f9:d5:f1:6e:25:1d:41:
b6:d1:ec:1b:2b:bc:95:90:5c:e9:ce:c6:88:e2:01:5f:bf:e2:
e4:8f:46:de:09:12:1c:6f:d6:f9:04:d0:8e:83:26:b5:8b:dd:
50:e5:11:ad:13:5a:2f:0f:44:0a:d4:b5:66:cc:87:8d:48:b5:
f4:38:12:40:a7:2a:5a:39:28:d9:46:e0:47:59:e4:7b:86:0e:
08:8a:e5:f9:d3:d6:dc:43:cb:b4:34:bd:40:12:c0:66:5b:f7:
ab:c0:8c:0a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICI44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjEyMTYw
MzU5MzJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVDNzVBM0U3NUM0RUUz
MkFGNTAyNTlFN0M0NEQ2NkVGRjNDREY0RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNTVxdoOfNaPXkQj9msaXZXDYlpqKzAb9DwwbUSrajZ15BRvcV
lud0RO2dxeSt1q7XXEWWrKGxFzzLJeATuL18jvgdllzW/AX3iGD92H7bdxa5aaWW
yxXR8sztgdBDi+n+TQtR4tVxpr31V543IhSCyJ18Dp5y0dr6dYo1UXwIoJb11pOQ
V5dq/+0CK+i1HSD/c6djaRIu3viDJ+EeW2Sp8oKozF9GOmMAiNMmhUi1eISyXtxn
hfqRWltMhc5Q7rjYFs5X5Nixy1teMA7wsXSamhptAaxj+kvxXz2tkYLkPWRuhGNK
+YB5YB/108M5YB7XwQc54eWrTCfyIvxK6KxHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7HWj51xO4yr1AlnnxE1m7/PN9NgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdIV2o1MXhPNHlyMUFsbm54
RTFtN19QTjlOZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6MgwDQYJKoZIhvcNAQELBQADggEBAADr3wmd2hSRTeQJp8A5qIcRo1Sj6AF0OVmO
ShCv3WcTdXDBxDo3jWIroMYr3yYypv1XISXDLesORT1A1WVNUPsMj3quQmFrR1p7
tJXXF2E/W9gLdOqcF8MQ/zfFVlNI95CCLblVyjU12u30dCakvEgsP9PLHeEy3AOM
gp+tLhkMyejPvFe5LUfimOLUB8YSgX6VL4OPytu1R0KA+dXxbiUdQbbR7BsrvJWQ
XOnOxojiAV+/4uSPRt4JEhxv1vkE0I6DJrWL3VDlEa0TWi8PRArUtWbMh41ItfQ4
EkCnKlo5KNlG4EdZ5HuGDgiK5fnT1txDy7Q0vUASwGZb96vAjAo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org