Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A8Y-2OlBf3abXOIqa23UlUxwH4Q.roa
File: A8Y-2OlBf3abXOIqa23UlUxwH4Q.roa (raw, json)
Hash identifier: /FJWyIWnppSfpPBYL8BRHgJLQw8Lc/X7fa/0+L+uGGg=
Subject key identifier: 03:C6:3E:D8:E9:41:7F:76:9B:5C:E2:2A:6B:6D:D4:95:4C:70:1F:84
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 10AC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A8Y-2OlBf3abXOIqa23UlUxwH4Q.roa
Signing time: Wed 25 Nov 2020 03:46:28 +0000
ROA not before: Wed 25 Nov 2020 03:46:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4268 (0x10ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 03:46:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=03C63ED8E9417F769B5CE22A6B6DD4954C701F84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:85:63:fc:02:47:f0:aa:99:7b:ac:76:21:
be:d1:ff:28:61:2d:f8:96:8b:09:cd:a6:c8:b4:67:
d8:7d:e1:b7:69:87:c6:a4:7e:16:1e:f2:6f:18:28:
35:2b:c9:50:85:0a:e6:27:ea:60:47:a2:0f:24:09:
8a:d2:bd:6b:5f:f2:67:a3:91:f0:83:0e:64:02:73:
fa:b6:b0:84:b3:b5:a6:32:cb:51:3c:a0:dd:89:21:
ae:20:14:15:97:cd:39:02:85:ba:97:2a:1f:3a:68:
ad:4d:5b:0a:b5:e1:c2:db:1e:d4:0c:bf:45:97:9c:
e7:c7:4e:1a:5b:01:3f:86:0c:02:13:b9:97:e8:b0:
40:01:fc:86:4f:87:f9:ab:c7:01:12:0b:1e:65:0a:
aa:f8:d2:c7:5e:40:42:18:cf:fa:c6:73:b1:b6:c6:
8d:99:7d:de:88:1e:21:71:b4:8f:bf:66:77:2d:91:
47:0e:7c:c6:6d:84:73:d4:45:c3:dc:48:70:be:71:
9a:1a:fb:7f:0f:5a:fb:a7:9c:00:22:67:10:24:0d:
06:86:cb:6e:4a:2b:e8:e4:13:a9:b2:3a:0e:42:7a:
44:10:dc:32:4d:a2:60:41:eb:6e:c3:cc:7e:3b:3c:
15:7c:91:b9:3b:78:cd:ee:57:12:10:82:eb:cf:30:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C6:3E:D8:E9:41:7F:76:9B:5C:E2:2A:6B:6D:D4:95:4C:70:1F:84
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A8Y-2OlBf3abXOIqa23UlUxwH4Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.248.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:d6:3a:29:2c:e5:56:1f:de:19:c9:f3:c7:27:cb:88:a4:ec:
4d:b5:42:66:18:03:a8:db:e6:ed:1b:73:f1:a7:b5:68:fe:05:
f4:3e:98:62:8c:3b:7e:41:bd:5a:3a:b2:eb:58:65:f5:a9:8b:
ee:0e:7f:99:8a:63:b2:7e:b7:a5:0f:05:09:7e:7c:0d:80:e4:
23:bf:c2:8c:b1:0a:bd:02:de:6a:e0:7e:96:97:bf:6f:97:39:
9f:da:64:4a:f4:e5:0a:c3:f9:0a:47:90:ac:70:46:46:2c:14:
38:97:ae:57:83:00:75:47:c0:44:ee:c3:d2:f2:3b:3c:a0:77:
91:ed:cb:7d:bd:24:65:e1:a8:9d:27:10:47:f5:5f:65:6c:b4:
34:b3:20:f5:1e:8e:55:7d:6b:c9:f0:4e:ba:c7:74:ac:da:22:
ac:08:ef:ed:77:49:e2:7e:f7:aa:ea:5a:89:b7:0f:76:1d:8e:
e8:5b:19:2d:b2:56:5f:46:af:2d:69:f2:3d:b5:17:3e:19:ad:
9f:4d:59:ed:8b:20:7c:e1:dd:5a:66:dc:fc:86:3d:ac:b1:67:
88:19:23:10:18:b8:ed:8b:0a:c4:70:85:75:c5:19:34:46:42:
77:3c:00:92:bd:57:27:81:49:bb:29:c5:02:c0:01:de:3a:54:
dd:1a:59:c2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDExMjUw
MzQ2MjhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDAzQzYzRUQ4RTk0MTdG
NzY5QjVDRTIyQTZCNkRENDk1NEM3MDFGODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvnYVj/AJH8KqZe6x2Ib7R/yhhLfiWiwnNpsi0Z9h94bdph8ak
fhYe8m8YKDUryVCFCuYn6mBHog8kCYrSvWtf8mejkfCDDmQCc/q2sISztaYyy1E8
oN2JIa4gFBWXzTkChbqXKh86aK1NWwq14cLbHtQMv0WXnOfHThpbAT+GDAITuZfo
sEAB/IZPh/mrxwESCx5lCqr40sdeQEIYz/rGc7G2xo2Zfd6IHiFxtI+/ZnctkUcO
fMZthHPURcPcSHC+cZoa+38PWvunnAAiZxAkDQaGy25KK+jkE6myOg5CekQQ3DJN
omBB627DzH47PBV8kbk7eM3uVxIQguvPMKKTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUA8Y+2OlBf3abXOIqa23UlUxwH4QwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0E4WS0yT2xCZjNhYlhPSXFh
MjNVbFV4d0g0US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6PgwDQYJKoZIhvcNAQELBQADggEBAJ7WOiks5VYf3hnJ88cny4ik7E21QmYYA6jb
5u0bc/GntWj+BfQ+mGKMO35BvVo6sutYZfWpi+4Of5mKY7J+t6UPBQl+fA2A5CO/
woyxCr0C3mrgfpaXv2+XOZ/aZEr05QrD+QpHkKxwRkYsFDiXrleDAHVHwETuw9Ly
Ozygd5Hty329JGXhqJ0nEEf1X2VstDSzIPUejlV9a8nwTrrHdKzaIqwI7+13SeJ+
96rqWom3D3YdjuhbGS2yVl9Gry1p8j21Fz4ZrZ9NWe2LIHzh3Vpm3PyGPayxZ4gZ
IxAYuO2LCsRwhXXFGTRGQnc8AJK9VyeBSbspxQLAAd46VN0aWcI=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:11 2023 by rpki-client on console-ams.rpki-client.org