Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FUi2DLdI-HNSqTJdj7m2XpIWdZ4.roa
File: FUi2DLdI-HNSqTJdj7m2XpIWdZ4.roa (raw, json)
Hash identifier: j+Eoq5NhaTofCtJuJO1cELr4cvuOy3WY+fNFkucROzg=
Subject key identifier: 15:48:B6:0C:B7:48:F8:73:52:A9:32:5D:8F:B9:B6:5E:92:16:75:9E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1843
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FUi2DLdI-HNSqTJdj7m2XpIWdZ4.roa
Signing time: Sun 07 Feb 2021 12:27:45 +0000
ROA not before: Sun 07 Feb 2021 12:27:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6211 (0x1843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:27:45 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1548B60CB748F87352A9325D8FB9B65E9216759E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:24:98:61:b8:eb:10:b1:c3:46:d5:11:2c:
bf:be:b0:3e:ac:c0:c0:ce:82:52:7c:47:0f:3a:67:
34:cc:78:72:dd:12:6f:37:af:f2:b6:d6:af:35:15:
2a:34:3a:6e:24:a6:79:09:b2:2b:54:ef:6a:4a:4b:
8a:41:09:6a:5a:07:d1:87:de:dd:3f:30:66:31:27:
62:b2:67:e2:8d:22:61:6f:e6:3f:4e:d6:96:4a:4d:
4d:16:fe:9c:cb:0a:32:f0:d0:88:7a:07:c5:6c:71:
b7:a6:f2:19:11:a2:4c:fa:14:82:b9:b0:49:41:0f:
06:d7:8d:72:8c:d9:39:5c:65:39:b4:c4:03:fb:ad:
c1:e5:77:ff:cf:96:99:1e:bc:01:95:7a:d7:e6:6c:
5a:c7:ff:cb:20:79:d1:ff:5d:8f:c2:f4:fc:8f:79:
d0:0b:59:8e:8b:68:27:f9:91:69:76:98:9f:88:10:
ac:40:e4:ca:ee:cd:22:e8:c1:b6:d6:e0:b3:9a:7a:
28:91:16:b7:b2:2f:24:e1:d7:0c:58:0b:fa:75:bf:
c9:55:d6:21:5a:89:f5:4e:0a:6a:56:b2:8f:de:40:
03:26:ad:76:d7:f6:df:9b:02:be:51:eb:fa:ad:e8:
cf:61:e4:85:2c:6a:1d:e7:21:23:b7:76:88:98:7f:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:48:B6:0C:B7:48:F8:73:52:A9:32:5D:8F:B9:B6:5E:92:16:75:9E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FUi2DLdI-HNSqTJdj7m2XpIWdZ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.128.0/22
Signature Algorithm: sha256WithRSAEncryption
75:da:06:73:08:e1:a8:31:dc:07:7f:90:04:20:35:46:6d:f7:
cf:27:55:af:a5:fd:f2:0b:2c:20:8c:d7:32:eb:0d:cc:00:6a:
92:84:03:ff:2e:0a:48:d3:d9:2c:f7:07:6c:f8:0b:2c:59:1a:
4d:23:c4:87:d2:91:66:88:c5:c5:e8:12:87:e2:d9:45:a4:62:
02:0e:fd:1b:bd:f7:a0:3d:59:02:96:fd:bf:d5:c0:5b:f6:ec:
67:bd:1c:aa:28:bd:27:36:1b:fc:9a:c6:8d:74:83:ac:02:7f:
52:de:e6:09:06:d2:ba:a0:a5:58:bb:bb:87:ee:7f:e3:20:7b:
8e:85:35:b8:c6:45:7b:3f:58:67:09:92:c4:ed:d7:3f:db:df:
35:a9:d3:77:06:cf:97:e0:fb:33:35:0c:d7:2f:55:f0:d1:6d:
e5:5d:39:dd:44:f9:db:f7:81:7e:33:91:ae:11:d1:28:30:06:
c1:37:20:7e:e9:c6:ae:8a:10:d5:4d:91:0f:08:6e:e3:11:c7:
03:7d:ae:3f:24:8e:90:02:44:ef:72:04:e8:fb:a1:b2:c8:c4:
63:1e:a7:26:90:b0:75:3d:db:e0:3c:2d:b3:06:0c:9d:c1:bf:
27:bf:2a:c0:08:cf:c3:97:11:a0:7c:cd:75:9d:e4:e0:56:b3:
e7:af:92:1f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGEMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjI3NDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE1NDhCNjBDQjc0OEY4
NzM1MkE5MzI1RDhGQjlCNjVFOTIxNjc1OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQQySYYbjrELHDRtURLL++sD6swMDOglJ8Rw86ZzTMeHLdEm83
r/K21q81FSo0Om4kpnkJsitU72pKS4pBCWpaB9GH3t0/MGYxJ2KyZ+KNImFv5j9O
1pZKTU0W/pzLCjLw0Ih6B8Vscbem8hkRokz6FIK5sElBDwbXjXKM2TlcZTm0xAP7
rcHld//PlpkevAGVetfmbFrH/8sgedH/XY/C9PyPedALWY6LaCf5kWl2mJ+IEKxA
5MruzSLowbbW4LOaeiiRFreyLyTh1wxYC/p1v8lV1iFaifVOCmpWso/eQAMmrXbX
9t+bAr5R6/qt6M9h5IUsah3nISO3doiYfxzrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFUi2DLdI+HNSqTJdj7m2XpIWdZ4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZVaTJETGRJLUhOU3FUSmRq
N20yWHBJV2RaNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6YAwDQYJKoZIhvcNAQELBQADggEBAHXaBnMI4agx3Ad/kAQgNUZt988nVa+l/fIL
LCCM1zLrDcwAapKEA/8uCkjT2Sz3B2z4CyxZGk0jxIfSkWaIxcXoEofi2UWkYgIO
/Ru996A9WQKW/b/VwFv27Ge9HKoovSc2G/yaxo10g6wCf1Le5gkG0rqgpVi7u4fu
f+Mge46FNbjGRXs/WGcJksTt1z/b3zWp03cGz5fg+zM1DNcvVfDRbeVdOd1E+dv3
gX4zka4R0SgwBsE3IH7pxq6KENVNkQ8IbuMRxwN9rj8kjpACRO9yBOj7obLIxGMe
pyaQsHU92+A8LbMGDJ3Bvye/KsAIz8OXEaB8zXWd5OBWs+evkh8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:46 2025 by rpki-client