Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FicNX9ReQ1xrcC1iiL9LIQjdcsY.roa
File: FicNX9ReQ1xrcC1iiL9LIQjdcsY.roa (raw, json)
Hash identifier: 5yfyrahSfbRnJeq70OIXs4jUWHmUzxmtqiu41c+bQ6Y=
Subject key identifier: 16:27:0D:5F:D4:5E:43:5C:6B:70:2D:62:88:BF:4B:21:08:DD:72:C6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2132
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FicNX9ReQ1xrcC1iiL9LIQjdcsY.roa
Signing time: Fri 25 Nov 2022 04:39:37 +0000
ROA not before: Fri 25 Nov 2022 04:39:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8498 (0x2132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=16270D5FD45E435C6B702D6288BF4B2108DD72C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:40:2d:93:aa:88:7f:1b:12:7f:5a:30:50:
00:fe:eb:f4:64:d1:0d:5d:89:4f:93:2d:63:e0:4f:
47:cb:43:ad:3e:94:02:2d:f4:cb:41:b4:4d:2f:28:
f0:aa:dc:e8:2a:75:e6:70:6e:f7:33:cd:10:8d:7a:
99:82:d7:ae:4d:21:b4:cf:56:92:ac:91:3c:f6:0d:
c2:6c:e9:16:2d:ec:4f:cc:a7:d7:d8:3a:84:84:79:
a7:6b:8e:ca:2b:f9:84:92:53:19:7e:a2:6a:81:0a:
6e:ee:3c:a8:07:3b:69:23:02:d1:9e:b3:6e:a0:81:
9c:0a:2b:3e:d7:a1:e0:ad:37:4f:71:aa:b1:94:17:
b9:d1:af:36:cf:24:e1:50:51:c0:bd:0b:38:33:1c:
34:97:36:80:c2:c0:2e:f0:ba:0c:4a:a5:fc:a6:01:
53:ac:f9:85:02:85:6c:a7:0e:5f:a6:f5:89:31:54:
72:57:4a:b9:f9:b6:f6:2c:2e:51:43:61:ad:b6:bb:
e8:c4:a7:03:f5:b1:f3:03:da:91:a7:cb:06:21:2b:
56:28:b3:c3:f5:aa:86:87:ad:54:2d:08:89:57:42:
c8:34:80:bb:a7:64:6c:06:4d:a5:42:11:b9:27:8e:
23:35:88:b2:12:af:54:47:bc:e6:66:86:a7:9c:f5:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:27:0D:5F:D4:5E:43:5C:6B:70:2D:62:88:BF:4B:21:08:DD:72:C6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FicNX9ReQ1xrcC1iiL9LIQjdcsY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ee:85:b1:1d:58:56:63:89:46:32:6c:51:6f:0c:7c:5d:1a:
c0:63:a4:a3:2b:47:77:08:e8:f5:a1:7a:41:b2:07:f6:75:47:
7d:f1:61:30:33:ab:40:d0:50:9c:70:74:3e:2f:30:e0:f2:7a:
28:45:b5:85:7f:11:52:4e:a0:ed:db:54:da:8a:e9:34:80:fb:
15:e1:02:90:8a:78:bd:e5:6c:53:9f:b6:76:09:16:7e:94:7d:
0b:20:c3:6e:cc:0e:fc:1a:af:17:57:92:36:27:c0:16:51:54:
5e:bb:66:13:39:92:35:7e:a6:cc:44:45:bb:bd:8b:ad:59:87:
a0:10:b4:1c:18:e4:0d:dc:30:50:f3:89:06:41:63:25:f8:ad:
7e:7b:9c:48:ad:b8:9c:19:90:68:1f:90:40:6a:d1:6c:be:26:
73:5a:ec:09:51:29:67:0f:8c:86:0d:02:6c:4f:dc:16:60:f2:
e5:f7:78:e4:6f:cc:94:bf:c8:b1:1c:2b:14:7b:44:f0:25:17:
62:fa:58:1f:3c:11:d6:e8:3e:46:91:69:b6:92:4a:a6:19:72:
eb:80:ff:9c:5a:95:ff:af:e9:45:08:dd:b0:cf:e1:49:ce:5f:
1d:2d:16:17:56:ce:36:e9:20:19:29:33:c7:14:9c:ad:c9:7b:
26:eb:f7:b1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICITIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MzdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE2MjcwRDVGRDQ1RTQz
NUM2QjcwMkQ2Mjg4QkY0QjIxMDhERDcyQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8xUAtk6qIfxsSf1owUAD+6/Rk0Q1diU+TLWPgT0fLQ60+lAIt
9MtBtE0vKPCq3OgqdeZwbvczzRCNepmC165NIbTPVpKskTz2DcJs6RYt7E/Mp9fY
OoSEeadrjsor+YSSUxl+omqBCm7uPKgHO2kjAtGes26ggZwKKz7XoeCtN09xqrGU
F7nRrzbPJOFQUcC9CzgzHDSXNoDCwC7wugxKpfymAVOs+YUChWynDl+m9YkxVHJX
Srn5tvYsLlFDYa22u+jEpwP1sfMD2pGnywYhK1Yos8P1qoaHrVQtCIlXQsg0gLun
ZGwGTaVCEbknjiM1iLISr1RHvOZmhqec9eu7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFicNX9ReQ1xrcC1iiL9LIQjdcsYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZpY05YOVJlUTF4cmNDMWlp
TDlMSVFqZGNzWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
THAwDQYJKoZIhvcNAQELBQADggEBAIzuhbEdWFZjiUYybFFvDHxdGsBjpKMrR3cI
6PWhekGyB/Z1R33xYTAzq0DQUJxwdD4vMODyeihFtYV/EVJOoO3bVNqK6TSA+xXh
ApCKeL3lbFOftnYJFn6UfQsgw27MDvwarxdXkjYnwBZRVF67ZhM5kjV+psxERbu9
i61Zh6AQtBwY5A3cMFDziQZBYyX4rX57nEituJwZkGgfkEBq0Wy+JnNa7AlRKWcP
jIYNAmxP3BZg8uX3eORvzJS/yLEcKxR7RPAlF2L6WB88EdboPkaRabaSSqYZcuuA
/5xalf+v6UUI3bDP4UnOXx0tFhdWzjbpIBkpM8cUnK3Jeybr97E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org