Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D0wsY6gmDY1jwOId-eSs8iHH1mw.roa
File: D0wsY6gmDY1jwOId-eSs8iHH1mw.roa (raw, json)
Hash identifier: PbjYLz/1Os8qPDIFVhoXRacmLg5llPNW7wUhMLb2nJ0=
Subject key identifier: 0F:4C:2C:63:A8:26:0D:8D:63:C0:E2:1D:F9:E4:AC:F2:21:C7:D6:6C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D0wsY6gmDY1jwOId-eSs8iHH1mw.roa
Signing time: Thu 15 Sep 2022 02:52:37 +0000
ROA not before: Thu 15 Sep 2022 02:52:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0F4C2C63A8260D8D63C0E21DF9E4ACF221C7D66C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:2c:7b:cb:8a:fe:3f:fe:cc:aa:4d:9f:80:
38:03:4a:09:8f:32:07:2b:5a:0d:95:23:9e:64:e8:
b7:db:6e:a4:64:94:26:9e:97:61:9f:43:5b:2a:d7:
53:bd:f0:e6:b5:19:03:7d:ae:4d:f4:a7:84:85:67:
e4:b7:f7:92:b7:a2:bc:3c:87:0a:97:60:86:ac:db:
e4:a8:0b:d9:c5:cd:0f:77:6b:21:35:20:d5:85:2c:
5e:d1:58:3a:f6:8c:cf:91:c2:90:44:47:27:dc:c7:
b8:21:cc:54:7f:6a:00:fe:b1:d6:91:eb:d1:de:83:
ef:55:25:e7:f8:b3:05:39:cf:3a:39:b8:83:6e:fc:
86:6e:ce:2f:9c:56:85:cd:47:10:69:8b:82:8b:a8:
19:b7:b0:b1:11:c8:61:d6:93:85:f1:2d:a3:bb:90:
f3:d6:1f:83:11:5d:41:96:58:a4:3e:3e:2a:0c:1e:
27:8a:d2:5a:03:23:24:42:02:91:a4:21:6d:ba:27:
12:d6:f8:05:27:7b:eb:f7:d1:f2:9d:4a:eb:03:d0:
9d:34:f8:9d:8e:25:3b:0f:51:99:4d:60:07:d8:7b:
33:b9:92:5d:de:c9:84:e6:48:af:94:0c:3f:36:1b:
83:49:64:8b:d5:d8:d7:9c:8f:06:7f:ae:30:9c:c4:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4C:2C:63:A8:26:0D:8D:63:C0:E2:1D:F9:E4:AC:F2:21:C7:D6:6C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D0wsY6gmDY1jwOId-eSs8iHH1mw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.144.0/22
Signature Algorithm: sha256WithRSAEncryption
25:fd:40:44:85:16:51:4b:3c:8c:f5:23:15:86:08:fd:8f:93:
fb:ec:9a:cf:40:ea:2b:17:f7:7e:0f:18:fb:7d:2b:8a:e1:46:
63:eb:c7:54:e9:39:f3:a7:65:38:f1:ba:a8:2d:92:77:68:0a:
99:e5:01:b9:60:e4:1c:6a:ce:63:e6:a1:8a:64:db:2f:48:0d:
b6:c6:2e:be:20:3b:49:87:9c:49:4b:54:34:0a:4d:d4:4b:dd:
ef:66:88:61:45:e6:f9:26:7d:08:49:8f:ea:98:6e:9c:db:a8:
4a:45:48:01:e6:6b:7d:a3:96:a6:d9:68:22:7d:b4:a2:2a:5f:
65:06:c4:03:df:98:62:a8:11:20:2c:64:bc:f5:96:e7:90:68:
a0:ab:52:14:64:d9:e3:a5:50:cc:2e:53:fe:40:a7:6f:e6:e2:
a8:e0:af:f1:12:8c:da:80:c9:04:1a:a2:7f:ad:ca:7c:93:a5:
ba:aa:39:dd:7a:1a:34:24:58:8a:56:e2:c8:7c:79:39:3e:f3:
c1:ed:59:b5:d2:a5:1f:c1:b0:4c:e3:6a:c7:0a:8b:60:a5:98:
d7:45:47:f8:e6:91:55:00:43:d1:70:db:f7:46:49:7f:8b:d8:
41:05:cf:ad:6e:d1:cd:93:1e:1b:69:76:aa:4e:cc:d8:3f:e5:
99:6d:71:77
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUyMzdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDBGNEMyQzYzQTgyNjBE
OEQ2M0MwRTIxREY5RTRBQ0YyMjFDN0Q2NkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5byx7y4r+P/7Mqk2fgDgDSgmPMgcrWg2VI55k6LfbbqRklCae
l2GfQ1sq11O98Oa1GQN9rk30p4SFZ+S395K3orw8hwqXYIas2+SoC9nFzQ93ayE1
INWFLF7RWDr2jM+RwpBERyfcx7ghzFR/agD+sdaR69Heg+9VJef4swU5zzo5uINu
/IZuzi+cVoXNRxBpi4KLqBm3sLERyGHWk4XxLaO7kPPWH4MRXUGWWKQ+PioMHieK
0loDIyRCApGkIW26JxLW+AUne+v30fKdSusD0J00+J2OJTsPUZlNYAfYezO5kl3e
yYTmSK+UDD82G4NJZIvV2NecjwZ/rjCcxHxlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUD0wsY6gmDY1jwOId+eSs8iHH1mwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0Qwd3NZNmdtRFkxandPSWQt
ZVNzOGlISDFtdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6ZAwDQYJKoZIhvcNAQELBQADggEBACX9QESFFlFLPIz1IxWGCP2Pk/vsms9A6isX
934PGPt9K4rhRmPrx1TpOfOnZTjxuqgtkndoCpnlAblg5BxqzmPmoYpk2y9IDbbG
Lr4gO0mHnElLVDQKTdRL3e9miGFF5vkmfQhJj+qYbpzbqEpFSAHma32jlqbZaCJ9
tKIqX2UGxAPfmGKoESAsZLz1lueQaKCrUhRk2eOlUMwuU/5Ap2/m4qjgr/ESjNqA
yQQaon+tynyTpbqqOd16GjQkWIpW4sh8eTk+88HtWbXSpR/BsEzjascKi2ClmNdF
R/jmkVUAQ9Fw2/dGSX+L2EEFz61u0c2THhtpdqpOzNg/5ZltcXc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org