Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HmxoIveDVpEv8Iaz1tk8IX-lW9g.roa
File: HmxoIveDVpEv8Iaz1tk8IX-lW9g.roa (raw, json)
Hash identifier: yjI4Si1KvmiSUuwjdZD3zKxbUZAN5ZKlPLJ2Mw0udAk=
Subject key identifier: 1E:6C:68:22:F7:83:56:91:2F:F0:86:B3:D6:D9:3C:21:7F:A5:5B:D8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HmxoIveDVpEv8Iaz1tk8IX-lW9g.roa
Signing time: Thu 15 Sep 2022 02:45:26 +0000
ROA not before: Thu 15 Sep 2022 02:45:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 211.76.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1E6C6822F78356912FF086B3D6D93C217FA55BD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:00:b9:b7:be:c2:95:0b:9f:83:29:fd:0f:1c:
b5:71:89:a7:5c:e2:b0:d0:86:31:9d:c7:70:aa:50:
01:cc:d7:5f:87:44:86:f0:31:a9:27:ba:0b:93:83:
60:92:f3:eb:dd:1c:2a:d6:43:39:48:d8:e3:ba:8d:
f2:46:85:80:d5:59:49:e0:25:66:72:95:87:9e:26:
f0:a3:05:36:d8:c6:21:bd:a9:35:4c:60:2c:53:d8:
09:29:72:92:66:84:cd:e4:03:85:b2:0f:51:6b:b4:
ee:4b:aa:c6:9b:20:0d:0e:86:e4:7a:da:fa:af:47:
23:3d:69:8b:69:83:08:ff:d2:89:1a:20:8a:0b:ba:
c4:8a:38:5d:dc:09:fa:9b:4a:d6:7f:8e:d7:1b:f1:
83:94:fa:da:44:fd:c3:e4:00:aa:97:f7:79:94:6e:
97:e2:57:64:b6:aa:d5:86:a0:bd:e3:99:d2:54:02:
9b:62:c1:cb:9f:59:4a:47:4d:dd:f4:71:9b:cc:b5:
d7:ad:59:70:7e:d1:98:d2:3e:c7:52:ca:67:06:3e:
20:e0:23:2f:04:f6:a9:b6:35:18:5e:81:c3:2d:64:
07:ab:6a:87:4c:42:5b:23:ba:6a:3f:1a:a9:e6:5a:
6f:e3:0b:e6:e5:7e:71:7c:15:03:68:f8:89:b9:c7:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6C:68:22:F7:83:56:91:2F:F0:86:B3:D6:D9:3C:21:7F:A5:5B:D8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HmxoIveDVpEv8Iaz1tk8IX-lW9g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a8:92:dc:fa:e3:52:74:3b:d7:5b:a1:95:69:d4:34:a1:f0:
24:4a:bb:8b:17:fd:f9:0a:e8:0d:00:1d:6a:0c:13:96:00:03:
04:9e:f2:4a:c4:b8:9a:14:37:6d:20:a7:7e:fe:73:12:5b:c0:
50:25:18:f4:e3:85:e5:7c:27:1f:0f:5f:19:a8:b1:a6:17:73:
18:05:4b:db:c4:a8:88:e5:80:65:a0:44:8e:44:89:6a:de:05:
ba:ea:ea:64:a3:da:72:f9:ad:e0:12:9f:2c:7d:8f:35:8e:9c:
4b:79:7f:f5:05:62:17:96:17:d9:57:14:56:c7:98:0d:31:b7:
78:cb:75:0d:8f:c0:3b:cf:9b:26:eb:64:ec:47:66:45:67:f5:
98:94:3e:c7:08:f1:b0:af:07:aa:17:10:67:3a:ae:93:99:18:
4b:01:a3:c6:da:d4:d6:4f:c0:ee:af:88:67:f5:d1:9a:28:d3:
29:9f:7b:53:06:6e:4a:de:1f:c5:f4:a6:1a:8a:67:9d:71:bc:
72:6b:a3:9e:a0:1d:0f:fc:41:0a:97:8a:12:de:8d:f3:86:e2:
85:7d:73:11:8a:d6:13:88:7b:22:44:ee:25:ab:db:78:6b:f2:
97:1a:e9:88:21:7a:04:8f:ba:75:6c:c4:03:3c:88:56:0d:8b:
28:c9:5f:af
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MjZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDFFNkM2ODIyRjc4MzU2
OTEyRkYwODZCM0Q2RDkzQzIxN0ZBNTVCRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDoALm3vsKVC5+DKf0PHLVxiadc4rDQhjGdx3CqUAHM11+HRIbw
MaknuguTg2CS8+vdHCrWQzlI2OO6jfJGhYDVWUngJWZylYeeJvCjBTbYxiG9qTVM
YCxT2AkpcpJmhM3kA4WyD1FrtO5LqsabIA0OhuR62vqvRyM9aYtpgwj/0okaIIoL
usSKOF3cCfqbStZ/jtcb8YOU+tpE/cPkAKqX93mUbpfiV2S2qtWGoL3jmdJUApti
wcufWUpHTd30cZvMtdetWXB+0ZjSPsdSymcGPiDgIy8E9qm2NRhegcMtZAeraodM
Qlsjumo/GqnmWm/jC+blfnF8FQNo+Im5x41bAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUHmxoIveDVpEv8Iaz1tk8IX+lW9gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0hteG9JdmVEVnBFdjhJYXox
dGs4SVgtbFc5Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
THwwDQYJKoZIhvcNAQELBQADggEBAH+oktz641J0O9dboZVp1DSh8CRKu4sX/fkK
6A0AHWoME5YAAwSe8krEuJoUN20gp37+cxJbwFAlGPTjheV8Jx8PXxmosaYXcxgF
S9vEqIjlgGWgRI5EiWreBbrq6mSj2nL5reASnyx9jzWOnEt5f/UFYheWF9lXFFbH
mA0xt3jLdQ2PwDvPmybrZOxHZkVn9ZiUPscI8bCvB6oXEGc6rpOZGEsBo8ba1NZP
wO6viGf10Zoo0ymfe1MGbkreH8X0phqKZ51xvHJro56gHQ/8QQqXihLejfOG4oV9
cxGK1hOIeyJE7iWr23hr8pca6YghegSPunVsxAM8iFYNiyjJX68=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:04 2025 by rpki-client