Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gfd5A_Dc5Qy-qxJl9ZYYJ6UEUHE.roa
File: Gfd5A_Dc5Qy-qxJl9ZYYJ6UEUHE.roa (raw, json)
Hash identifier: uPFCu7xs1+QxmtfsD6YV7BF59a9nzgfdkF741Umqxtg=
Subject key identifier: 19:F7:79:03:F0:DC:E5:0C:BE:AB:12:65:F5:96:18:27:A5:04:50:71
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D29
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gfd5A_Dc5Qy-qxJl9ZYYJ6UEUHE.roa
Signing time: Tue 29 Sep 2020 09:54:16 +0000
ROA not before: Tue 29 Sep 2020 09:54:16 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3369 (0xd29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:16 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=19F77903F0DCE50CBEAB1265F5961827A5045071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a8:39:7e:c4:7e:3f:23:b7:3d:68:11:03:64:
96:cd:67:d1:38:06:d5:fb:57:6c:c2:56:b9:b9:6d:
76:6c:6f:3a:fe:67:01:dd:40:6f:df:c3:d6:08:45:
ef:70:22:6c:0a:81:2c:51:94:33:a3:ff:4f:e8:8a:
61:b0:53:84:1e:39:c2:12:a9:51:a2:bd:4c:eb:b0:
36:73:e7:c0:5b:ab:34:e1:94:6e:44:93:32:5c:95:
32:de:6a:d2:18:2b:ee:ea:31:b0:5e:54:96:0e:5d:
fc:b3:55:8c:2f:45:b1:3c:f7:21:52:11:e3:af:dd:
90:ed:39:dd:8b:ee:63:fa:e2:ef:e0:32:f3:2b:76:
59:c8:b1:6e:5e:73:52:f1:5a:d1:c4:2a:ac:4a:25:
86:13:0d:ac:b7:a5:0d:83:53:b0:57:f1:cb:03:f4:
b1:86:d8:03:eb:c0:9b:5e:54:7a:63:71:9c:70:4b:
af:2c:6f:23:f4:1d:31:50:e4:1f:04:77:4f:51:12:
9d:53:12:d7:71:dc:26:f4:a2:05:7b:09:5f:31:b9:
33:46:45:2e:d6:eb:db:72:d6:f3:1c:04:e1:9f:a3:
fc:14:ad:06:c8:31:af:07:37:d5:a8:7b:e9:31:c8:
50:90:4e:71:9d:f1:fc:b8:61:2d:3d:ce:d0:70:20:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:79:03:F0:DC:E5:0C:BE:AB:12:65:F5:96:18:27:A5:04:50:71
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gfd5A_Dc5Qy-qxJl9ZYYJ6UEUHE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.108.0/22
Signature Algorithm: sha256WithRSAEncryption
74:d6:e8:c4:12:42:0c:9d:c2:d6:12:1b:ab:f7:8c:9f:2e:0e:
58:33:f0:17:8a:dd:25:01:db:36:aa:2b:ad:5e:c7:f9:81:04:
95:7b:5d:31:e5:aa:39:1e:8f:b1:95:e1:e0:f3:64:d9:9e:78:
0f:46:94:f9:62:8d:50:ca:29:e6:d9:20:60:3d:c0:4e:4e:06:
67:03:d0:c1:78:b6:c6:4c:ba:97:5b:e2:63:84:16:cb:c3:c9:
43:35:26:77:12:2f:60:20:51:4e:53:8c:65:a3:7c:9b:c2:c3:
8d:98:5a:c5:8e:b3:1d:a3:a8:bc:40:7b:d6:62:be:32:af:cd:
37:9f:9f:6f:0d:7d:37:1d:57:2d:29:41:c1:59:6f:f1:be:d7:
04:36:63:42:03:ab:8c:84:e4:18:c0:1e:53:e8:20:93:6f:d3:
3b:04:ca:3e:1a:fe:3b:23:f4:04:ee:d3:e9:d5:fa:4c:a9:a8:
02:22:fa:0a:fe:0a:21:f2:25:5c:2a:d7:82:75:41:24:c7:6b:
59:16:d0:c4:9d:1f:d4:bd:2d:d4:3f:55:b6:c6:15:8e:67:ea:
45:6c:d0:a3:66:c4:88:8d:81:a9:aa:8c:d7:be:ad:73:a0:79:
69:7d:6e:d6:66:12:bd:9c:aa:d1:1d:fd:82:6e:aa:97:9c:02:
d7:e3:b7:b7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDSkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0MTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE5Rjc3OTAzRjBEQ0U1
MENCRUFCMTI2NUY1OTYxODI3QTUwNDUwNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjqDl+xH4/I7c9aBEDZJbNZ9E4BtX7V2zCVrm5bXZsbzr+ZwHd
QG/fw9YIRe9wImwKgSxRlDOj/0/oimGwU4QeOcISqVGivUzrsDZz58BbqzThlG5E
kzJclTLeatIYK+7qMbBeVJYOXfyzVYwvRbE89yFSEeOv3ZDtOd2L7mP64u/gMvMr
dlnIsW5ec1LxWtHEKqxKJYYTDay3pQ2DU7BX8csD9LGG2APrwJteVHpjcZxwS68s
byP0HTFQ5B8Ed09REp1TEtdx3Cb0ogV7CV8xuTNGRS7W69ty1vMcBOGfo/wUrQbI
Ma8HN9Woe+kxyFCQTnGd8fy4YS09ztBwIAs3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGfd5A/Dc5Qy+qxJl9ZYYJ6UEUHEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dmZDVBX0RjNVF5LXF4Smw5
WllZSjZVRVVIRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6WwwDQYJKoZIhvcNAQELBQADggEBAHTW6MQSQgydwtYSG6v3jJ8uDlgz8BeK3SUB
2zaqK61ex/mBBJV7XTHlqjkej7GV4eDzZNmeeA9GlPlijVDKKebZIGA9wE5OBmcD
0MF4tsZMupdb4mOEFsvDyUM1JncSL2AgUU5TjGWjfJvCw42YWsWOsx2jqLxAe9Zi
vjKvzTefn28NfTcdVy0pQcFZb/G+1wQ2Y0IDq4yE5BjAHlPoIJNv0zsEyj4a/jsj
9ATu0+nV+kypqAIi+gr+CiHyJVwq14J1QSTHa1kW0MSdH9S9LdQ/VbbGFY5n6kVs
0KNmxIiNgamqjNe+rXOgeWl9btZmEr2cqtEd/YJuqpecAtfjt7c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org