Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7onsrNwnlaegFpxC0sJaiESGWJg.roa
File: 7onsrNwnlaegFpxC0sJaiESGWJg.roa (raw, json)
Hash identifier: O9HDxz1wL6ELSoFAHs19GeA84Wj1pnjPuF/JzCtcUA8=
Subject key identifier: EE:89:EC:AC:DC:27:95:A7:A0:16:9C:42:D2:C2:5A:88:44:86:58:98
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7onsrNwnlaegFpxC0sJaiESGWJg.roa
Signing time: Thu 15 Sep 2022 02:53:23 +0000
ROA not before: Thu 15 Sep 2022 02:53:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.246.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EE89ECACDC2795A7A0169C42D2C25A8844865898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:0d:a3:db:c0:fa:24:0a:14:e8:bd:d0:16:
f2:e9:93:8a:65:77:f1:80:16:d0:85:05:ec:96:d6:
33:22:05:53:35:ef:89:d7:9a:e1:39:d7:fa:a5:6e:
72:81:c8:d3:b3:c8:d6:72:3a:22:a4:55:ac:07:75:
7d:4a:80:d6:e5:c2:f5:58:ef:c2:ae:06:52:30:b2:
4e:ef:1c:a6:b1:91:3b:8b:6c:28:b4:b6:f9:cb:3b:
ea:4d:6f:35:de:d9:be:ef:ab:fd:02:08:71:59:d6:
10:ca:16:53:23:95:7e:d6:17:f5:1e:a9:c9:0b:39:
aa:dd:8b:ca:b0:dd:48:36:bc:94:51:54:45:1c:d5:
4d:cc:3e:f6:5e:6a:9c:3f:a9:3a:be:21:25:88:f6:
71:2f:89:34:73:10:a7:e6:9d:ad:9a:83:30:1c:8e:
12:c6:df:f1:70:4e:cb:04:bc:21:bb:bd:ed:f9:f9:
86:ef:3d:33:50:cf:d0:e8:84:88:5b:9d:10:42:6b:
eb:b1:db:9c:16:39:70:1b:78:59:f9:5f:bf:ee:9d:
c6:7a:9e:ca:fe:c8:b7:3e:f6:43:87:20:75:b7:22:
68:7b:ad:25:bc:5c:96:86:e4:af:1f:bb:c5:f5:43:
84:bc:70:c5:4b:ad:6e:f5:d6:e0:dd:08:62:2d:38:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:89:EC:AC:DC:27:95:A7:A0:16:9C:42:D2:C2:5A:88:44:86:58:98
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7onsrNwnlaegFpxC0sJaiESGWJg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.246.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:09:6d:32:4d:67:6f:bd:14:32:50:8e:62:de:dd:10:56:bb:
00:cc:50:52:db:b6:73:36:e4:59:62:4c:99:de:f0:d0:92:8a:
9b:b1:f2:b4:08:9a:b3:2a:e1:32:16:f3:b5:2a:d9:ca:c2:d7:
38:30:46:67:88:97:1f:cb:f0:28:ff:8a:61:07:77:35:f1:dc:
46:23:9f:17:90:ef:3e:e0:1f:f0:73:ae:46:cd:1b:47:ea:0d:
3a:13:d8:de:4b:1a:cd:19:12:37:8a:d2:79:8f:37:e9:0d:d4:
7f:25:09:f3:2a:c5:4d:fe:39:68:9a:1d:5e:76:fe:93:f9:cf:
94:1d:a9:12:aa:a9:75:d0:af:e4:fc:9e:c0:72:0e:70:de:6e:
0c:1a:be:36:a9:d4:a8:96:3f:c7:64:ac:2c:78:0f:a6:31:d6:
d2:83:05:9b:08:7c:e1:73:51:d4:cb:b6:ab:89:a2:ce:39:0b:
f8:01:42:78:17:84:c8:28:19:c9:67:95:14:44:4a:74:ba:96:
d9:e3:49:d2:db:b3:ca:49:ca:e2:63:b4:78:17:74:d9:35:db:
51:52:75:15:0d:35:51:bd:e3:1a:2c:26:88:97:40:99:18:13:
8b:fd:f2:81:5c:4d:fc:eb:9c:9f:1d:9c:6d:af:09:15:90:31:
31:7b:05:cc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzMjNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVFODlFQ0FDREMyNzk1
QTdBMDE2OUM0MkQyQzI1QTg4NDQ4NjU4OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4Qw2j28D6JAoU6L3QFvLpk4pld/GAFtCFBeyW1jMiBVM174nX
muE51/qlbnKByNOzyNZyOiKkVawHdX1KgNblwvVY78KuBlIwsk7vHKaxkTuLbCi0
tvnLO+pNbzXe2b7vq/0CCHFZ1hDKFlMjlX7WF/UeqckLOardi8qw3Ug2vJRRVEUc
1U3MPvZeapw/qTq+ISWI9nEviTRzEKfmna2agzAcjhLG3/FwTssEvCG7ve35+Ybv
PTNQz9DohIhbnRBCa+ux25wWOXAbeFn5X7/uncZ6nsr+yLc+9kOHIHW3Imh7rSW8
XJaG5K8fu8X1Q4S8cMVLrW711uDdCGItOIS7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7onsrNwnlaegFpxC0sJaiESGWJgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdvbnNyTndubGFlZ0ZweEMw
c0phaUVTR1dKZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2
6fYwDQYJKoZIhvcNAQELBQADggEBAKQJbTJNZ2+9FDJQjmLe3RBWuwDMUFLbtnM2
5FliTJne8NCSipux8rQImrMq4TIW87Uq2crC1zgwRmeIlx/L8Cj/imEHdzXx3EYj
nxeQ7z7gH/BzrkbNG0fqDToT2N5LGs0ZEjeK0nmPN+kN1H8lCfMqxU3+OWiaHV52
/pP5z5QdqRKqqXXQr+T8nsByDnDebgwavjap1KiWP8dkrCx4D6Yx1tKDBZsIfOFz
UdTLtquJos45C/gBQngXhMgoGclnlRRESnS6ltnjSdLbs8pJyuJjtHgXdNk121FS
dRUNNVG94xosJoiXQJkYE4v98oFcTfzrnJ8dnG2vCRWQMTF7Bcw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org