Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FtxolQFzRu854SzAaOO36sz3_-8.roa
File: FtxolQFzRu854SzAaOO36sz3_-8.roa (raw, json)
Hash identifier: AnmGbQHWHwwI2HawsidhKwa3R4eAR3HeA7fD9gLKkUI=
Subject key identifier: 16:DC:68:95:01:73:46:EF:39:E1:2C:C0:68:E3:B7:EA:CC:F7:FF:EF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 17AF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FtxolQFzRu854SzAaOO36sz3_-8.roa
Signing time: Sun 07 Feb 2021 12:22:44 +0000
ROA not before: Sun 07 Feb 2021 12:22:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6063 (0x17af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:22:44 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=16DC6895017346EF39E12CC068E3B7EACCF7FFEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c9:eb:b9:4c:6b:6f:80:7c:ae:af:1b:cb:8c:
6d:cd:b1:59:ce:5a:83:db:90:28:e8:af:70:37:e6:
bc:65:27:4a:4e:d8:f3:27:ab:f4:61:80:82:35:e6:
7b:22:45:dd:26:bc:8a:9d:13:74:cf:65:63:92:df:
67:e8:72:8c:7b:a1:7b:69:50:48:16:99:4b:66:63:
84:cd:44:4e:5f:84:0e:97:ce:ab:30:c5:eb:a6:f1:
12:42:a2:22:63:1e:bf:49:ff:da:bb:b3:05:2f:41:
ac:4f:3d:70:e1:96:cb:9e:11:8b:de:2a:62:4c:10:
1b:73:45:ac:e6:20:99:bf:c2:a7:92:be:90:0d:52:
6b:d0:1b:98:82:2f:37:c0:1e:35:47:10:13:9b:86:
69:43:69:f0:97:41:75:ae:ac:c7:d8:12:bc:e0:96:
87:e7:1b:5f:11:d4:dc:bc:df:1c:1a:d7:53:f4:8f:
14:38:a8:84:18:ba:7a:cf:1a:1a:37:0f:8f:32:e8:
8a:c9:0e:9b:5d:db:80:28:a3:ef:80:55:bd:d7:73:
8b:6e:da:4a:48:b0:d3:c0:e2:ea:d6:11:0a:d3:40:
4c:92:d3:df:e8:4b:31:02:53:4d:e3:12:3b:c9:af:
5b:da:27:4a:ec:b3:c3:f2:95:6b:f5:28:a7:e3:ab:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DC:68:95:01:73:46:EF:39:E1:2C:C0:68:E3:B7:EA:CC:F7:FF:EF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FtxolQFzRu854SzAaOO36sz3_-8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.124.0/22
Signature Algorithm: sha256WithRSAEncryption
29:a2:11:e6:2c:a7:5b:51:96:13:4f:6b:6a:41:67:ee:6a:b4:
38:35:a8:5b:c2:cb:52:88:69:95:d0:9d:d4:0d:12:56:81:2f:
14:a2:f5:31:ad:0d:81:d5:e2:f4:c7:3b:6a:77:7d:37:a2:c0:
b8:31:e5:6a:2d:87:ee:d3:36:9d:9b:8c:d2:dc:2a:ed:72:d2:
29:5b:f8:da:87:91:7c:f1:ea:71:24:ba:6d:fe:84:e1:c7:69:
ad:bc:73:8e:a4:93:fc:73:34:ac:a7:ae:7f:82:83:22:6a:5e:
f2:0c:60:16:70:be:2f:49:aa:7b:1e:fd:1c:08:bf:d4:4f:e6:
be:35:72:a1:d8:ba:aa:8b:f5:35:25:5d:97:d1:39:86:8e:a5:
5e:dd:74:33:45:ad:d5:28:95:c4:73:7e:cf:32:c1:dc:e0:f9:
38:fe:3b:e9:7f:f3:44:0f:1d:18:2a:8c:18:a5:db:ff:26:e5:
59:2b:ab:f3:cc:22:92:d8:47:9f:84:b4:49:3e:e5:56:9f:8e:
2e:23:48:bc:65:64:1c:c3:af:5a:d4:e2:b6:59:3f:6b:60:4c:
58:66:30:9a:90:c3:ca:41:ce:3f:7f:61:c5:b3:c0:8b:13:e8:
3b:d8:86:a2:c7:cb:14:9f:aa:9f:ad:9e:be:17:0b:f2:7f:1a:
ee:65:96:65
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF68wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjIyNDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE2REM2ODk1MDE3MzQ2
RUYzOUUxMkNDMDY4RTNCN0VBQ0NGN0ZGRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfyeu5TGtvgHyurxvLjG3NsVnOWoPbkCjor3A35rxlJ0pO2PMn
q/RhgII15nsiRd0mvIqdE3TPZWOS32focox7oXtpUEgWmUtmY4TNRE5fhA6Xzqsw
xeum8RJCoiJjHr9J/9q7swUvQaxPPXDhlsueEYveKmJMEBtzRazmIJm/wqeSvpAN
UmvQG5iCLzfAHjVHEBObhmlDafCXQXWurMfYErzglofnG18R1Ny83xwa11P0jxQ4
qIQYunrPGho3D48y6IrJDptd24Aoo++AVb3Xc4tu2kpIsNPA4urWEQrTQEyS09/o
SzECU03jEjvJr1vaJ0rss8PylWv1KKfjq1iZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFtxolQFzRu854SzAaOO36sz3/+8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0Z0eG9sUUZ6UnU4NTRTekFh
T08zNnN6M18tOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6HwwDQYJKoZIhvcNAQELBQADggEBACmiEeYsp1tRlhNPa2pBZ+5qtDg1qFvCy1KI
aZXQndQNElaBLxSi9TGtDYHV4vTHO2p3fTeiwLgx5Woth+7TNp2bjNLcKu1y0ilb
+NqHkXzx6nEkum3+hOHHaa28c46kk/xzNKynrn+CgyJqXvIMYBZwvi9Jqnse/RwI
v9RP5r41cqHYuqqL9TUlXZfROYaOpV7ddDNFrdUolcRzfs8ywdzg+Tj+O+l/80QP
HRgqjBil2/8m5Vkrq/PMIpLYR5+EtEk+5Vafji4jSLxlZBzDr1rU4rZZP2tgTFhm
MJqQw8pBzj9/YcWzwIsT6DvYhqLHyxSfqp+tnr4XC/J/Gu5llmU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org