Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Wofr4Rf3G28Uhqn4ofeuaXkOAw.roa
File: 7Wofr4Rf3G28Uhqn4ofeuaXkOAw.roa (raw, json)
Hash identifier: yQDkBvqa/4zWrQEUERYkUoiJEe6906KNCYGC2aK4bqM=
Subject key identifier: ED:6A:1F:AF:84:5F:DC:6D:BC:52:1A:A7:E2:87:DE:B9:A5:E4:38:0C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22AD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Wofr4Rf3G28Uhqn4ofeuaXkOAw.roa
Signing time: Fri 25 Nov 2022 04:41:30 +0000
ROA not before: Fri 25 Nov 2022 04:41:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8877 (0x22ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ED6A1FAF845FDC6DBC521AA7E287DEB9A5E4380C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:7c:f4:3b:61:0d:d2:e6:38:e1:e8:1e:de:
f0:59:0a:e3:06:b5:1b:44:50:7d:83:f4:b5:c9:6c:
81:61:eb:f8:67:c5:f5:46:06:02:b5:aa:64:57:d8:
42:e6:b1:2b:3f:26:37:d1:8d:ad:fc:d0:ad:0c:01:
db:40:8d:86:d9:92:ea:ec:c7:7c:3c:82:95:0f:91:
52:8f:2a:5f:3a:36:f4:91:5a:49:99:cb:e0:e9:1f:
20:80:4a:59:b5:fa:31:d3:5a:66:00:6f:ba:6e:ee:
1a:33:77:18:cf:c0:d4:d4:8f:6b:bf:34:7e:07:ec:
11:b6:ab:78:0d:05:ce:47:33:d6:05:ef:7a:e3:2d:
a9:fa:7b:6c:33:6a:d9:a8:52:55:40:b5:b2:fb:95:
66:2e:fe:03:2e:57:c1:0d:0e:46:9d:db:42:d4:21:
13:0b:6f:9e:ca:77:39:62:24:1a:60:20:c5:ba:e0:
0b:67:76:97:57:6a:50:c7:a6:ea:e6:36:6b:25:d9:
04:0e:c2:5f:ae:22:b0:ed:99:35:3c:bb:57:4d:fd:
96:20:8d:34:66:94:69:f3:15:d1:92:62:8d:69:ad:
d7:14:fa:1c:b1:b3:3e:6a:76:63:d1:07:fb:8a:52:
e5:90:54:3b:85:44:4b:bb:50:08:79:7f:a2:ae:85:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6A:1F:AF:84:5F:DC:6D:BC:52:1A:A7:E2:87:DE:B9:A5:E4:38:0C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Wofr4Rf3G28Uhqn4ofeuaXkOAw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.64.0/20
Signature Algorithm: sha256WithRSAEncryption
01:ea:6a:ba:f3:13:33:65:91:4a:64:36:7c:c8:3d:c6:16:b5:
80:15:ca:e7:e0:0b:ad:64:2a:c7:87:63:b1:a3:d2:87:86:1a:
d3:1a:ec:ac:be:6a:4a:c0:49:ac:55:9f:c3:36:68:30:91:ca:
7c:4d:6f:6f:f4:2c:18:84:ae:96:03:67:97:69:fa:cc:fa:ab:
41:70:bb:c1:37:4e:ed:ab:08:56:54:92:9e:e4:75:99:7b:69:
45:03:16:76:3e:4c:21:3e:77:be:7c:18:47:fe:59:0f:9f:81:
3a:1a:c9:33:6c:d8:47:fc:f2:b0:e0:c2:fc:1e:8c:2c:1d:e1:
a0:68:b6:82:1d:88:95:e9:54:5c:99:21:09:c5:4d:c1:e0:a8:
87:16:c7:bf:4e:8d:51:d5:ae:97:04:a7:da:c5:98:4b:b6:d5:
ac:ee:1d:4f:f5:fd:2c:31:bd:15:2a:64:fa:f7:01:24:31:d3:
fd:61:ef:ea:23:60:69:63:bc:f7:ad:52:68:b3:43:01:79:3f:
f2:20:d1:3c:33:25:e1:90:40:ec:25:6f:c7:05:51:ed:52:a7:
e8:3e:5c:2a:2d:2d:7f:1f:58:a9:e0:53:d0:01:14:bc:11:29:
e3:02:75:4a:d3:2f:9f:0b:44:37:6d:4a:c4:b7:28:7f:0f:3f:
25:81:4b:66
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIq0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxMzBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVENkExRkFGODQ1RkRD
NkRCQzUyMUFBN0UyODdERUI5QTVFNDM4MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5qHz0O2EN0uY44ege3vBZCuMGtRtEUH2D9LXJbIFh6/hnxfVG
BgK1qmRX2ELmsSs/JjfRja380K0MAdtAjYbZkursx3w8gpUPkVKPKl86NvSRWkmZ
y+DpHyCASlm1+jHTWmYAb7pu7hozdxjPwNTUj2u/NH4H7BG2q3gNBc5HM9YF73rj
Lan6e2wzatmoUlVAtbL7lWYu/gMuV8ENDkad20LUIRMLb57KdzliJBpgIMW64Atn
dpdXalDHpurmNmsl2QQOwl+uIrDtmTU8u1dN/ZYgjTRmlGnzFdGSYo1prdcU+hyx
sz5qdmPRB/uKUuWQVDuFREu7UAh5f6KuhVKBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7Wofr4Rf3G28Uhqn4ofeuaXkOAwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdXb2ZyNFJmM0cyOFVocW40
b2ZldWFYa09Bdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR2
6UAwDQYJKoZIhvcNAQELBQADggEBAAHqarrzEzNlkUpkNnzIPcYWtYAVyufgC61k
KseHY7Gj0oeGGtMa7Ky+akrASaxVn8M2aDCRynxNb2/0LBiErpYDZ5dp+sz6q0Fw
u8E3Tu2rCFZUkp7kdZl7aUUDFnY+TCE+d758GEf+WQ+fgToayTNs2Ef88rDgwvwe
jCwd4aBotoIdiJXpVFyZIQnFTcHgqIcWx79OjVHVrpcEp9rFmEu21azuHU/1/Swx
vRUqZPr3ASQx0/1h7+ojYGljvPetUmizQwF5P/Ig0TwzJeGQQOwlb8cFUe1Sp+g+
XCotLX8fWKngU9ABFLwRKeMCdUrTL58LRDdtSsS3KH8PPyWBS2Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org