Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HXQ64l3bgi2mFR1OKs10XToQevY.roa
File: HXQ64l3bgi2mFR1OKs10XToQevY.roa (raw, json)
Hash identifier: O33D4MyJWnxs0F5l/sfaVJc8zV1HQnNDARdOYbCr/Bg=
Subject key identifier: 1D:74:3A:E2:5D:DB:82:2D:A6:15:1D:4E:2A:CD:74:5D:3A:10:7A:F6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2154
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HXQ64l3bgi2mFR1OKs10XToQevY.roa
Signing time: Fri 25 Nov 2022 04:39:48 +0000
ROA not before: Fri 25 Nov 2022 04:39:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8532 (0x2154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1D743AE25DDB822DA6151D4E2ACD745D3A107AF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:cc:25:9a:6c:82:74:18:bc:4b:f2:9e:56:
c2:0f:a4:c3:28:2a:7d:c4:48:2c:a5:61:2d:b1:57:
54:33:c3:74:3d:99:7b:86:d3:f1:28:d7:88:cc:c8:
ec:64:fb:b2:56:19:27:59:58:fc:4e:d6:b1:b0:60:
5a:97:9b:67:6f:7c:3d:33:97:c1:4e:6c:6e:8b:8b:
ad:66:a1:0a:30:9b:87:e5:f1:9a:c3:d2:58:68:a3:
ab:c3:86:f6:d5:67:b5:59:11:15:05:52:68:03:ab:
28:60:5c:92:b1:c7:2c:ea:13:4e:9f:d5:23:23:bc:
af:75:b6:33:54:9f:51:31:9d:04:c1:0e:e3:7a:cc:
ad:c7:74:2a:67:e1:5e:a3:5e:42:9b:eb:4f:b1:c0:
52:4e:70:a2:c9:e2:13:69:7d:2b:3b:aa:9b:a7:73:
be:27:c8:ca:ad:a3:86:ea:01:5a:b6:49:5e:12:e1:
58:dc:9e:a6:31:be:62:14:ca:42:40:97:ad:d9:ba:
27:0b:7c:24:cc:e6:48:6d:b0:86:8d:6b:92:a6:24:
95:9f:ad:bb:17:c9:df:2b:11:15:2b:97:3f:07:56:
d1:ff:d1:b7:c4:42:fd:13:01:1b:4e:8c:d4:a5:05:
56:02:a7:67:26:78:e1:39:15:b5:7e:c8:a4:ba:fc:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:74:3A:E2:5D:DB:82:2D:A6:15:1D:4E:2A:CD:74:5D:3A:10:7A:F6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HXQ64l3bgi2mFR1OKs10XToQevY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:bf:4a:90:d1:b5:a2:1e:8b:02:73:57:5c:4b:ae:68:33:b1:
3c:0e:28:b5:97:e4:5b:c7:9a:6b:cc:dc:88:25:b5:76:42:8e:
33:ab:f4:60:ab:4b:56:a0:34:02:68:ac:f6:21:c2:c1:8b:d1:
a1:51:88:22:5e:b9:07:ee:c9:75:b2:a5:d7:9e:ca:28:a7:3d:
90:40:63:a8:b3:2e:31:98:2f:fc:2a:07:e2:a4:42:64:a0:d3:
a4:fb:e6:8f:3c:ed:af:91:82:1c:7e:e5:36:9f:6a:59:d5:b9:
c4:92:13:8b:1a:b7:a5:94:fa:5e:50:08:42:60:cb:32:bd:ec:
30:f2:40:c6:03:7a:c9:e0:34:e1:f1:a2:a7:18:23:a9:12:00:
37:6f:f8:ee:48:32:d1:ce:63:d9:0a:a9:28:a5:94:ac:07:a4:
e6:0a:77:d6:fe:bd:32:a7:f6:3f:9b:73:b0:9b:94:a0:12:a2:
03:89:c1:6c:d8:0d:7f:35:2c:21:27:64:7a:ee:52:8a:68:1b:
e9:ff:bf:b3:50:e3:75:a0:1e:8a:48:22:13:55:93:b7:6b:87:
94:17:84:5a:4a:a5:33:3b:e8:a4:c5:a7:12:ab:8b:40:8a:ea:
19:7c:08:54:9b:52:7d:11:fe:0f:54:55:47:9d:27:6a:4e:2b:
53:ac:f3:b0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIVQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5NDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDFENzQzQUUyNUREQjgy
MkRBNjE1MUQ0RTJBQ0Q3NDVEM0ExMDdBRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRP8wlmmyCdBi8S/KeVsIPpMMoKn3ESCylYS2xV1Qzw3Q9mXuG
0/Eo14jMyOxk+7JWGSdZWPxO1rGwYFqXm2dvfD0zl8FObG6Li61moQowm4fl8ZrD
0lhoo6vDhvbVZ7VZERUFUmgDqyhgXJKxxyzqE06f1SMjvK91tjNUn1ExnQTBDuN6
zK3HdCpn4V6jXkKb60+xwFJOcKLJ4hNpfSs7qpunc74nyMqto4bqAVq2SV4S4Vjc
nqYxvmIUykJAl63ZuicLfCTM5khtsIaNa5KmJJWfrbsXyd8rERUrlz8HVtH/0bfE
Qv0TARtOjNSlBVYCp2cmeOE5FbV+yKS6/LkFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUHXQ64l3bgi2mFR1OKs10XToQevYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0hYUTY0bDNiZ2kybUZSMU9L
czEwWFRvUWV2WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6PgwDQYJKoZIhvcNAQELBQADggEBAE+/SpDRtaIeiwJzV1xLrmgzsTwOKLWX5FvH
mmvM3IgltXZCjjOr9GCrS1agNAJorPYhwsGL0aFRiCJeuQfuyXWypdeeyiinPZBA
Y6izLjGYL/wqB+KkQmSg06T75o887a+Rghx+5TafalnVucSSE4sat6WU+l5QCEJg
yzK97DDyQMYDesngNOHxoqcYI6kSADdv+O5IMtHOY9kKqSillKwHpOYKd9b+vTKn
9j+bc7CblKASogOJwWzYDX81LCEnZHruUopoG+n/v7NQ43WgHopIIhNVk7drh5QX
hFpKpTM76KTFpxKri0CK6hl8CFSbUn0R/g9UVUedJ2pOK1Os87A=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:21 2025 by rpki-client