Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gmc0cE8QRJbFdZM8RT6HbzctKG4.roa
File: Gmc0cE8QRJbFdZM8RT6HbzctKG4.roa (raw, json)
Hash identifier: v4BsiulV8myDx5P+IZyqRg5tGhC2J3RDW7X/pCqUWuk=
Subject key identifier: 1A:67:34:70:4F:10:44:96:C5:75:93:3C:45:3E:87:6F:37:2D:28:6E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2238
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gmc0cE8QRJbFdZM8RT6HbzctKG4.roa
Signing time: Fri 25 Nov 2022 04:40:54 +0000
ROA not before: Fri 25 Nov 2022 04:40:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8760 (0x2238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1A6734704F104496C575933C453E876F372D286E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:22:be:c9:1a:8a:3a:20:56:aa:6b:08:38:
03:9c:25:30:d7:c7:5f:68:e0:90:2d:8a:21:13:d4:
6e:28:44:7c:c0:67:e5:c0:28:45:bc:22:a7:b2:41:
a4:85:ce:3b:df:cd:6b:59:aa:ac:1e:ca:f1:69:59:
5b:a0:92:e1:7c:c0:31:ae:1e:6c:6e:a7:b7:d7:4e:
6b:67:d1:0b:d6:78:a7:c6:23:0e:9a:fb:e4:04:53:
d5:fa:59:60:ec:7a:58:cc:c9:21:53:79:0c:60:b1:
3d:1c:f7:08:43:66:d9:cd:57:2d:dd:84:29:f6:a2:
cb:7b:de:14:ea:77:12:42:11:3c:aa:1f:41:cb:24:
26:74:d9:7a:da:44:b3:15:5c:a0:d7:9f:73:f5:81:
50:e1:ac:49:1f:6a:10:02:c0:a6:20:68:a2:20:fd:
a0:6c:60:92:3b:92:12:3a:06:29:5b:43:e8:26:5e:
37:43:26:52:45:8d:bb:83:ee:74:f2:85:d9:9e:5d:
97:a0:fb:d4:11:84:c2:bb:3b:5a:28:de:68:1e:43:
67:9f:28:7a:75:83:61:75:a5:6a:df:0c:8e:e1:c2:
9e:68:fe:56:80:09:0a:3d:9d:50:16:6a:39:5e:d8:
74:0a:a0:1c:b3:ef:b6:00:56:15:8c:00:17:dd:22:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:67:34:70:4F:10:44:96:C5:75:93:3C:45:3E:87:6F:37:2D:28:6E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gmc0cE8QRJbFdZM8RT6HbzctKG4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.104.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:8e:4a:3a:e8:3b:e2:17:69:c4:f9:ec:b5:37:3f:fa:11:6b:
5d:35:a2:ec:b5:48:b4:87:0b:98:32:24:ca:2d:dd:cf:2b:d0:
91:b9:61:6a:21:91:c8:ef:80:7e:e2:64:e5:c8:ed:e1:52:ee:
07:d5:fb:51:b2:d0:2f:01:58:70:4d:99:12:2d:78:5e:2d:d6:
4a:25:2d:0b:97:81:5f:a3:b2:1c:c6:52:c2:b3:96:dd:ab:fa:
d2:54:82:b0:85:b9:62:ca:e8:12:90:62:ec:0b:2b:21:d2:2f:
f1:26:6d:6c:5c:41:f6:1d:06:cb:0d:eb:7c:75:04:a9:ab:0a:
1d:3f:a5:ff:2b:18:75:15:90:bf:94:94:df:84:70:8c:7f:9e:
e0:10:1e:1a:a6:35:61:59:ee:da:7a:af:80:a9:8c:a8:21:20:
d6:b6:8c:3d:b9:f3:6d:92:66:3a:1a:82:36:6f:83:fc:b6:49:
a8:98:fc:99:3b:20:4c:44:68:c0:e3:10:ed:e8:12:ab:b2:d6:
fd:50:c6:1c:6f:12:7d:13:bb:3b:af:0d:6d:33:e7:a3:7c:22:
d9:ec:2a:d7:f4:0f:47:9a:24:77:c9:f9:e7:d8:90:b7:12:97:
a5:40:0e:a2:98:5a:a9:b8:f4:4f:91:23:fb:be:5e:e9:64:4d:
2e:66:c6:97
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIjgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwNTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDFBNjczNDcwNEYxMDQ0
OTZDNTc1OTMzQzQ1M0U4NzZGMzcyRDI4NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCd6SK+yRqKOiBWqmsIOAOcJTDXx19o4JAtiiET1G4oRHzAZ+XA
KEW8IqeyQaSFzjvfzWtZqqweyvFpWVugkuF8wDGuHmxup7fXTmtn0QvWeKfGIw6a
++QEU9X6WWDseljMySFTeQxgsT0c9whDZtnNVy3dhCn2ost73hTqdxJCETyqH0HL
JCZ02XraRLMVXKDXn3P1gVDhrEkfahACwKYgaKIg/aBsYJI7khI6BilbQ+gmXjdD
JlJFjbuD7nTyhdmeXZeg+9QRhMK7O1oo3mgeQ2efKHp1g2F1pWrfDI7hwp5o/laA
CQo9nVAWajle2HQKoByz77YAVhWMABfdIqfzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGmc0cE8QRJbFdZM8RT6HbzctKG4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dtYzBjRThRUkpiRmRaTThS
VDZIYnpjdEtHNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6WgwDQYJKoZIhvcNAQELBQADggEBAE2OSjroO+IXacT57LU3P/oRa101ouy1SLSH
C5gyJMot3c8r0JG5YWohkcjvgH7iZOXI7eFS7gfV+1Gy0C8BWHBNmRIteF4t1kol
LQuXgV+jshzGUsKzlt2r+tJUgrCFuWLK6BKQYuwLKyHSL/EmbWxcQfYdBssN63x1
BKmrCh0/pf8rGHUVkL+UlN+EcIx/nuAQHhqmNWFZ7tp6r4CpjKghINa2jD25822S
ZjoagjZvg/y2SaiY/Jk7IExEaMDjEO3oEquy1v1QxhxvEn0TuzuvDW0z56N8Itns
Ktf0D0eaJHfJ+efYkLcSl6VADqKYWqm49E+RI/u+XulkTS5mxpc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org