Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AEWftx1u0vur_7nGIFGI49YBwas.roa
File: AEWftx1u0vur_7nGIFGI49YBwas.roa (raw, json)
Hash identifier: SLka0a9GYW5Qqkq0vtSjzciEspLej+I5QD/hAxLyqrY=
Subject key identifier: 00:45:9F:B7:1D:6E:D2:FB:AB:FF:B9:C6:20:51:88:E3:D6:01:C1:AB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27E3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AEWftx1u0vur_7nGIFGI49YBwas.roa
Signing time: Fri 01 Sep 2023 10:04:41 +0000
ROA not before: Fri 01 Sep 2023 10:04:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 211.76.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10211 (0x27e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=00459FB71D6ED2FBABFFB9C6205188E3D601C1AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:ba:23:5a:ab:c7:46:1e:be:0a:0a:e8:c2:
67:d9:8d:bb:b0:9c:7a:e7:10:cc:46:73:78:d4:0c:
ba:61:a8:96:dd:20:61:14:c9:33:e1:a2:55:00:b1:
91:74:61:cf:9b:5f:b8:c6:2e:50:9d:9c:fe:46:3a:
8e:ba:17:1d:57:15:e9:bb:e0:30:8f:35:56:6a:4c:
18:63:81:2d:40:e0:45:0d:19:2c:af:64:f4:9e:37:
5a:cb:42:80:c6:37:76:65:5f:6f:b6:a8:5a:2d:7a:
2c:a0:93:21:15:44:90:64:25:5b:c8:7f:03:1c:cd:
33:f2:36:ef:d0:59:ea:70:49:23:79:b1:8a:99:b7:
32:b4:5f:e0:93:f6:9f:4d:d2:32:52:de:51:cb:0c:
d5:67:e5:09:ff:48:de:75:33:63:db:a3:88:71:22:
0f:95:28:e5:49:6d:4a:e0:ac:f2:29:18:06:b0:fe:
8c:02:b4:fa:0f:14:c2:12:a2:61:a4:de:c0:c3:88:
61:bd:f2:49:96:84:3c:3d:8b:12:51:14:04:cc:ab:
f7:1f:89:e4:02:0b:da:ae:a8:57:82:2d:cb:28:bd:
3a:b3:16:5b:7c:b7:fd:30:3a:81:61:37:d1:02:3d:
4c:04:f3:3c:53:e8:93:ea:a9:4b:1f:75:86:97:cb:
08:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:45:9F:B7:1D:6E:D2:FB:AB:FF:B9:C6:20:51:88:E3:D6:01:C1:AB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AEWftx1u0vur_7nGIFGI49YBwas.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.112.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:40:36:ff:72:d1:c6:fc:06:1e:a2:4d:b4:8f:3a:70:63:67:
29:9b:e8:78:cd:7e:24:bf:cc:68:f8:3b:7b:aa:21:88:42:40:
20:37:3e:91:19:cd:c0:76:6d:f4:bc:5c:0c:6d:ce:12:fd:dd:
9d:a2:0d:fe:0d:32:62:ba:a7:3d:e4:c4:d9:58:ec:9b:ac:fe:
02:50:a8:24:45:3f:51:91:84:df:13:e7:3d:6f:a9:ce:da:5f:
77:9f:10:8a:da:ff:00:94:6b:a1:2a:64:6f:07:27:e6:e9:86:
37:ef:a3:3f:df:fd:ef:d0:b3:e0:4d:00:cf:2d:ae:e6:98:de:
b3:e8:19:a7:7e:9e:5f:ea:2e:7c:fc:87:a7:c7:e2:c9:d2:38:
0d:56:ac:0a:4d:77:f5:62:ef:00:ed:52:c4:98:69:97:ab:f8:
68:e8:ce:78:2a:bc:c9:28:f2:79:e6:46:30:4a:f8:33:bb:c0:
48:7f:1b:d4:19:db:6e:8d:47:74:85:26:70:34:f2:b1:24:b1:
1b:32:50:6b:fa:ba:94:cd:3a:ea:5d:55:fb:17:82:d0:12:ca:
69:3c:5f:8a:a0:d3:44:13:82:c2:c4:e9:19:19:15:ba:0d:f0:
c4:ab:d9:18:ba:cf:36:4e:b7:61:69:c8:15:b6:bc:5b:d9:4a:
a1:d4:51:fb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJ+MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA0NDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAwNDU5RkI3MUQ2RUQy
RkJBQkZGQjlDNjIwNTE4OEUzRDYwMUMxQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDI5rojWqvHRh6+CgrowmfZjbuwnHrnEMxGc3jUDLphqJbdIGEU
yTPholUAsZF0Yc+bX7jGLlCdnP5GOo66Fx1XFem74DCPNVZqTBhjgS1A4EUNGSyv
ZPSeN1rLQoDGN3ZlX2+2qFoteiygkyEVRJBkJVvIfwMczTPyNu/QWepwSSN5sYqZ
tzK0X+CT9p9N0jJS3lHLDNVn5Qn/SN51M2Pbo4hxIg+VKOVJbUrgrPIpGAaw/owC
tPoPFMISomGk3sDDiGG98kmWhDw9ixJRFATMq/cfieQCC9quqFeCLcsovTqzFlt8
t/0wOoFhN9ECPUwE8zxT6JPqqUsfdYaXywirAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAEWftx1u0vur/7nGIFGI49YBwaswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FFV2Z0eDF1MHZ1cl83bkdJ
RkdJNDlZQndhcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATT
THAwDQYJKoZIhvcNAQELBQADggEBAB5ANv9y0cb8Bh6iTbSPOnBjZymb6HjNfiS/
zGj4O3uqIYhCQCA3PpEZzcB2bfS8XAxtzhL93Z2iDf4NMmK6pz3kxNlY7Jus/gJQ
qCRFP1GRhN8T5z1vqc7aX3efEIra/wCUa6EqZG8HJ+bphjfvoz/f/e/Qs+BNAM8t
ruaY3rPoGad+nl/qLnz8h6fH4snSOA1WrApNd/Vi7wDtUsSYaZer+GjozngqvMko
8nnmRjBK+DO7wEh/G9QZ226NR3SFJnA08rEksRsyUGv6upTNOupdVfsXgtASymk8
X4qg00QTgsLE6RkZFboN8MSr2Ri6zzZOt2FpyBW2vFvZSqHUUfs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:34 2025 by rpki-client