Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Wle4jotc4s0LRLrFv2JdSDk5zk.roa
File: 8Wle4jotc4s0LRLrFv2JdSDk5zk.roa (raw, json)
Hash identifier: S9JJjh1a3FHSTXA/jPs2gCGO8M7cFlfSO4igm2p+kok=
Subject key identifier: F1:69:5E:E2:3A:2D:73:8B:34:2D:12:EB:16:FD:89:75:20:E4:E7:39
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Wle4jotc4s0LRLrFv2JdSDk5zk.roa
Signing time: Thu 15 Sep 2022 02:46:26 +0000
ROA not before: Thu 15 Sep 2022 02:46:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F1695EE23A2D738B342D12EB16FD897520E4E739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ac:78:d9:77:7b:a1:49:9d:4d:57:dc:ce:c3:
d9:59:71:a1:6e:81:9a:7d:2a:ca:d5:73:4f:d4:d1:
a7:e9:f8:71:eb:00:f8:d2:a5:3b:80:df:74:d8:fe:
1b:13:3a:d1:b6:8b:18:d1:e3:ae:3a:69:00:b7:4d:
c3:31:79:5f:63:41:2e:09:83:fa:5b:8d:f7:e7:ae:
c3:d2:0c:34:57:61:ef:14:fe:e3:29:cf:37:65:f6:
3e:b3:43:37:a2:b9:71:04:65:5d:4f:d6:e4:0f:1b:
64:a8:fc:03:8f:e6:8a:dc:75:c6:d9:6a:32:54:6c:
50:2c:b6:1d:7a:9e:9a:78:22:88:ff:94:a5:48:bf:
1b:bd:c1:4a:3b:0b:62:45:ab:58:80:f2:77:9b:13:
12:29:48:52:3f:2d:46:c5:34:e7:1b:d3:0d:d2:dc:
e8:64:40:25:62:fb:11:15:03:9b:a9:01:48:38:ba:
97:e1:84:69:60:0f:b2:ed:09:e8:29:3f:8b:74:be:
dd:a2:dd:9a:9c:2d:82:2f:5f:39:0b:a5:93:47:87:
84:8d:d8:48:58:d1:75:4f:90:aa:fe:29:f5:ea:ba:
34:9c:08:ae:25:94:4e:15:5a:57:4b:3d:3f:d4:33:
e7:7f:e0:dd:ad:d1:fd:3b:60:f0:ee:7c:a0:ad:b6:
29:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:69:5E:E2:3A:2D:73:8B:34:2D:12:EB:16:FD:89:75:20:E4:E7:39
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Wle4jotc4s0LRLrFv2JdSDk5zk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.0.0/19
Signature Algorithm: sha256WithRSAEncryption
13:0d:b4:67:1d:ba:fd:b2:94:9f:43:ec:94:59:f4:26:ea:12:
4a:e1:e5:b7:63:0f:93:cf:c9:bb:c3:4a:29:32:c6:2d:8e:75:
86:a7:2a:8e:af:b1:a9:d5:f7:6f:45:09:7d:82:ee:b9:be:ae:
8a:5e:04:e7:e9:b1:92:5a:fb:2d:e6:47:a5:f7:b6:ae:4d:36:
00:dc:dd:72:fd:05:1a:1b:43:99:9a:5d:4e:94:bd:6c:09:3f:
b5:66:b3:a3:6d:b6:26:b0:4f:ba:5c:2d:f2:27:b3:2e:cf:02:
4d:34:c1:0b:27:2d:c4:a4:44:5a:ad:a4:60:52:18:35:84:96:
e4:3b:36:9a:59:1e:62:fb:65:03:d7:c2:8f:2d:ee:6b:a4:4d:
2d:37:d8:81:4c:aa:38:40:b3:fa:7f:00:ed:b2:c8:00:aa:ab:
e6:c0:81:24:a9:37:9f:35:31:e4:34:d6:1e:c2:89:e8:a5:9d:
74:e1:fa:f5:0a:6d:1d:e2:b3:8d:ca:35:40:e6:31:42:fc:07:
16:28:fb:25:4c:e5:a5:e0:ba:23:b0:0b:65:43:65:48:00:fd:
ab:8e:8d:7e:72:a0:4f:43:4d:39:40:64:85:a6:a4:02:d4:e0:
ad:ca:ce:81:f0:2c:b1:d8:de:b0:7c:63:aa:33:1c:c9:84:aa:
73:e2:d6:6c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ2MjZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEYxNjk1RUUyM0EyRDcz
OEIzNDJEMTJFQjE2RkQ4OTc1MjBFNEU3MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDsrHjZd3uhSZ1NV9zOw9lZcaFugZp9KsrVc0/U0afp+HHrAPjS
pTuA33TY/hsTOtG2ixjR4646aQC3TcMxeV9jQS4Jg/pbjffnrsPSDDRXYe8U/uMp
zzdl9j6zQzeiuXEEZV1P1uQPG2So/AOP5orcdcbZajJUbFAsth16npp4Ioj/lKVI
vxu9wUo7C2JFq1iA8nebExIpSFI/LUbFNOcb0w3S3OhkQCVi+xEVA5upAUg4upfh
hGlgD7LtCegpP4t0vt2i3ZqcLYIvXzkLpZNHh4SN2EhY0XVPkKr+KfXqujScCK4l
lE4VWldLPT/UM+d/4N2t0f07YPDufKCttimfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8Wle4jotc4s0LRLrFv2JdSDk5zkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhXbGU0am90YzRzMExSTHJG
djJKZFNEazV6ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2
6AAwDQYJKoZIhvcNAQELBQADggEBABMNtGcduv2ylJ9D7JRZ9CbqEkrh5bdjD5PP
ybvDSikyxi2OdYanKo6vsanV929FCX2C7rm+ropeBOfpsZJa+y3mR6X3tq5NNgDc
3XL9BRobQ5maXU6UvWwJP7Vms6NttiawT7pcLfInsy7PAk00wQsnLcSkRFqtpGBS
GDWEluQ7NppZHmL7ZQPXwo8t7mukTS032IFMqjhAs/p/AO2yyACqq+bAgSSpN581
MeQ01h7CieilnXTh+vUKbR3is43KNUDmMUL8BxYo+yVM5aXguiOwC2VDZUgA/auO
jX5yoE9DTTlAZIWmpALU4K3KzoHwLLHY3rB8Y6ozHMmEqnPi1mw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org