Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FADK1k5BrlvM1X8S_u57afInoIo.roa
File: FADK1k5BrlvM1X8S_u57afInoIo.roa (raw, json)
Hash identifier: i7T4rZjyaPxDZTnG6cNCOUknLa0MGlXkRjeV6AXvx7E=
Subject key identifier: 14:00:CA:D6:4E:41:AE:5B:CC:D5:7F:12:FE:EE:7B:69:F2:27:A0:8A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C8A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FADK1k5BrlvM1X8S_u57afInoIo.roa
Signing time: Wed 29 Sep 2021 02:47:54 +0000
ROA not before: Wed 29 Sep 2021 02:47:54 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7306 (0x1c8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:54 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1400CAD64E41AE5BCCD57F12FEEE7B69F227A08A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5c:a7:ca:cb:b7:25:38:95:cf:8c:7e:a2:b5:
13:c1:54:40:7d:4b:3b:f5:68:43:bc:c3:df:11:1e:
7c:26:80:21:f4:6a:11:ea:96:4b:ac:c3:12:46:e3:
47:78:47:ab:2a:b9:29:b5:7e:e6:92:fa:4a:98:96:
90:8b:ae:be:3e:f9:00:8a:2c:89:93:85:85:14:6a:
59:c5:a3:37:1b:c8:40:98:15:96:f9:7f:d0:01:bf:
b1:4a:32:d6:0d:f7:97:9b:5f:b5:89:a2:cc:2f:a1:
72:89:5c:b4:dd:8b:31:92:97:50:21:b2:02:09:8e:
fd:ce:52:55:35:f5:de:b8:63:f3:87:c9:f3:4b:19:
ce:f3:f3:de:c6:a0:f4:1f:c6:cc:97:88:fe:ee:dd:
fe:91:13:2e:f2:ca:04:c1:8e:e5:b0:03:ea:b5:10:
eb:e9:d5:aa:ac:bc:bd:7b:46:40:49:82:7b:df:3c:
f6:44:23:fb:c7:30:71:05:3d:37:6c:c5:18:77:84:
ce:01:09:4f:40:6f:48:b5:dc:6c:eb:da:c2:27:90:
b4:23:a2:b2:fe:e7:68:5d:37:bf:57:79:b1:e8:ab:
2c:be:db:1f:3f:24:53:d8:07:1c:5e:58:cd:07:c8:
4b:c6:05:2a:1b:36:55:0d:dc:64:bd:a7:2b:68:f0:
90:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:00:CA:D6:4E:41:AE:5B:CC:D5:7F:12:FE:EE:7B:69:F2:27:A0:8A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FADK1k5BrlvM1X8S_u57afInoIo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.179.0/24
Signature Algorithm: sha256WithRSAEncryption
00:00:3d:e5:f3:05:26:19:59:28:a6:ce:fb:a1:28:82:d5:22:
4f:ba:d9:7b:fe:bc:5a:48:be:7a:3e:79:ce:06:c7:bf:a7:b5:
42:90:65:52:f9:b1:be:94:20:e5:4c:ab:7f:f7:26:18:c6:a0:
5b:f6:9c:32:42:12:25:c8:42:ca:08:54:9c:d4:e6:6a:5c:b1:
ad:82:09:19:48:ea:81:54:34:93:9f:39:c1:f6:e4:34:77:94:
2b:09:7e:a4:0e:61:55:6d:e9:88:2a:31:1d:63:27:b0:85:be:
6f:b6:72:76:a0:c9:91:72:5d:98:ee:f4:38:17:0a:44:51:c3:
b7:07:db:86:93:36:dd:ae:5b:a2:fb:28:23:f2:d2:b3:0c:94:
cf:03:dd:38:4e:7d:69:1c:a1:9e:0e:60:66:30:85:fb:ad:40:
a6:e8:a8:f1:e4:a9:b5:e8:e0:db:69:cd:86:d8:26:86:43:bb:
3d:54:f7:a2:e7:2d:c4:14:1d:f2:ed:65:ab:00:e4:78:9e:2c:
fa:26:a9:d6:20:64:e0:9a:a3:30:99:fb:1e:46:a0:65:9b:11:
dc:c3:5d:41:df:f4:8c:81:0e:9f:35:00:a4:1c:15:8e:ca:2b:
1a:bc:c6:ae:74:f3:cc:42:5b:09:1e:67:f1:f9:bc:15:5f:ec:
70:88:7f:ef
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3NTRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDE0MDBDQUQ2NEU0MUFF
NUJDQ0Q1N0YxMkZFRUU3QjY5RjIyN0EwOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmXKfKy7clOJXPjH6itRPBVEB9Szv1aEO8w98RHnwmgCH0ahHq
lkuswxJG40d4R6squSm1fuaS+kqYlpCLrr4++QCKLImThYUUalnFozcbyECYFZb5
f9ABv7FKMtYN95ebX7WJoswvoXKJXLTdizGSl1AhsgIJjv3OUlU19d64Y/OHyfNL
Gc7z897GoPQfxsyXiP7u3f6REy7yygTBjuWwA+q1EOvp1aqsvL17RkBJgnvfPPZE
I/vHMHEFPTdsxRh3hM4BCU9Ab0i13Gzr2sInkLQjorL+52hdN79XebHoqyy+2x8/
JFPYBxxeWM0HyEvGBSobNlUN3GS9pyto8JCzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFADK1k5BrlvM1X8S/u57afInoIowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZBREsxazVCcmx2TTFYOFNf
dTU3YWZJbm9Jby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2
6bMwDQYJKoZIhvcNAQELBQADggEBAAAAPeXzBSYZWSimzvuhKILVIk+62Xv+vFpI
vno+ec4Gx7+ntUKQZVL5sb6UIOVMq3/3JhjGoFv2nDJCEiXIQsoIVJzU5mpcsa2C
CRlI6oFUNJOfOcH25DR3lCsJfqQOYVVt6YgqMR1jJ7CFvm+2cnagyZFyXZju9DgX
CkRRw7cH24aTNt2uW6L7KCPy0rMMlM8D3ThOfWkcoZ4OYGYwhfutQKboqPHkqbXo
4NtpzYbYJoZDuz1U96LnLcQUHfLtZasA5HieLPomqdYgZOCaozCZ+x5GoGWbEdzD
XUHf9IyBDp81AKQcFY7KKxq8xq5088xCWwkeZ/H5vBVf7HCIf+8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org