Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GARFQfuijaTkDnJoeEfvrnz70rM.roa
File: GARFQfuijaTkDnJoeEfvrnz70rM.roa (raw, json)
Hash identifier: CHiKtLVpKjkpXo8N4yxAWLc3Jbvi852pLoAnQkz1jP0=
Subject key identifier: 18:04:45:41:FB:A2:8D:A4:E4:0E:72:68:78:47:EF:AE:7C:FB:D2:B3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2818
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GARFQfuijaTkDnJoeEfvrnz70rM.roa
Signing time: Fri 01 Sep 2023 10:04:55 +0000
ROA not before: Fri 01 Sep 2023 10:04:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10264 (0x2818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=18044541FBA28DA4E40E72687847EFAE7CFBD2B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e4:1a:2e:b6:c0:ec:95:25:f5:0e:45:99:6f:
29:f3:68:e3:f3:3b:91:be:b7:ad:b4:87:f3:98:38:
4c:44:26:ae:61:04:c7:b9:d5:f0:90:36:12:d9:9f:
05:68:b7:3b:25:4d:a5:78:29:d0:8a:68:95:07:ac:
71:75:7e:8f:92:56:47:74:ab:b3:14:20:de:46:1f:
ab:4a:01:fe:52:be:ac:f5:d7:fd:30:d2:40:6c:21:
e4:57:01:ce:da:99:f7:9a:c2:08:fd:b2:45:34:d6:
83:d9:37:f1:c3:11:5f:aa:5b:0b:f3:dc:71:1a:dc:
a4:a0:6c:f9:02:07:f6:ad:bf:40:e8:a0:13:86:59:
33:b8:af:81:d6:20:ff:fb:f6:8e:63:b1:df:ee:63:
d1:38:a9:33:c7:72:b6:0e:47:d1:60:21:5e:02:cb:
e1:28:2f:23:3c:11:cb:dc:1d:41:02:b4:c5:bb:9f:
73:92:e2:ec:ea:de:c5:f4:78:45:36:aa:46:6a:1e:
58:2a:15:bc:f5:70:ba:b4:ba:d6:cf:19:6d:88:4a:
26:db:4d:20:76:ca:85:aa:7c:de:76:41:89:93:f9:
3e:a1:d6:b1:3c:77:63:2c:6a:81:de:6f:92:4b:19:
c6:de:d1:c1:25:df:95:48:1c:c0:2f:af:fd:5b:a1:
6c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:04:45:41:FB:A2:8D:A4:E4:0E:72:68:78:47:EF:AE:7C:FB:D2:B3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GARFQfuijaTkDnJoeEfvrnz70rM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.228.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:eb:1a:c1:7e:f9:ec:84:f6:a6:9b:28:ef:fa:78:2c:a9:5f:
22:b4:30:73:90:ce:b4:77:e3:ed:55:e5:b3:70:d6:08:f3:27:
40:c5:51:a3:cf:b2:96:1d:e8:ab:ea:13:41:a2:da:4e:f4:91:
e9:42:8b:31:c1:05:c9:3f:16:84:31:3a:d0:81:0f:47:66:89:
8f:a7:64:a5:03:6b:08:02:91:33:a4:04:02:71:c2:a0:ff:64:
97:8f:f0:e7:99:bd:9b:70:56:f0:65:b7:e5:d8:2f:99:4f:99:
d4:ff:68:e0:2c:2b:8c:aa:81:2b:16:fa:44:84:fa:05:21:20:
96:2e:59:d6:80:78:ca:06:75:63:c6:0d:83:d2:73:3b:cb:1a:
63:9e:ff:0b:47:f1:75:a1:af:e7:0f:c0:63:1b:d3:ca:e1:bc:
4a:5e:ac:e5:8b:9e:14:aa:0b:4a:c7:f3:8d:a1:6b:19:5c:2b:
e4:bc:1d:4f:f1:c6:a2:23:b8:5e:39:ed:70:c5:06:99:39:6b:
52:24:21:ff:20:15:72:04:10:3b:2b:ca:ca:14:f0:1b:a4:72:
01:61:1b:90:de:a1:aa:9f:12:de:e7:ce:45:9c:9b:84:0d:6f:
d4:c8:96:59:48:69:2d:17:03:ac:61:e9:67:6d:78:5d:06:d0:
40:f2:05:09
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKBgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA0NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE4MDQ0NTQxRkJBMjhE
QTRFNDBFNzI2ODc4NDdFRkFFN0NGQkQyQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCV5BoutsDslSX1DkWZbynzaOPzO5G+t620h/OYOExEJq5hBMe5
1fCQNhLZnwVotzslTaV4KdCKaJUHrHF1fo+SVkd0q7MUIN5GH6tKAf5Svqz11/0w
0kBsIeRXAc7amfeawgj9skU01oPZN/HDEV+qWwvz3HEa3KSgbPkCB/atv0DooBOG
WTO4r4HWIP/79o5jsd/uY9E4qTPHcrYOR9FgIV4Cy+EoLyM8EcvcHUECtMW7n3OS
4uzq3sX0eEU2qkZqHlgqFbz1cLq0utbPGW2ISibbTSB2yoWqfN52QYmT+T6h1rE8
d2MsaoHeb5JLGcbe0cEl35VIHMAvr/1boWy5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGARFQfuijaTkDnJoeEfvrnz70rMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dBUkZRZnVpamFUa0RuSm9l
RWZ2cm56NzByTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2
6eQwDQYJKoZIhvcNAQELBQADggEBAJrrGsF++eyE9qabKO/6eCypXyK0MHOQzrR3
4+1V5bNw1gjzJ0DFUaPPspYd6KvqE0Gi2k70kelCizHBBck/FoQxOtCBD0dmiY+n
ZKUDawgCkTOkBAJxwqD/ZJeP8OeZvZtwVvBlt+XYL5lPmdT/aOAsK4yqgSsW+kSE
+gUhIJYuWdaAeMoGdWPGDYPSczvLGmOe/wtH8XWhr+cPwGMb08rhvEperOWLnhSq
C0rH842haxlcK+S8HU/xxqIjuF457XDFBpk5a1IkIf8gFXIEEDsrysoU8BukcgFh
G5DeoaqfEt7nzkWcm4QNb9TIlllIaS0XA6xh6WdteF0G0EDyBQk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:53 2025 by rpki-client