Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IJhJ3FyJ8iY6wjTCZEU6omsB9h0.roa
File: IJhJ3FyJ8iY6wjTCZEU6omsB9h0.roa (raw, json)
Hash identifier: 8eXmIBvqs1aSN2Rf5m+c0rGy7SsphKbK5v6EpbhwBf8=
Subject key identifier: 20:98:49:DC:5C:89:F2:26:3A:C2:34:C2:64:45:3A:A2:6B:01:F6:1D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D16
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IJhJ3FyJ8iY6wjTCZEU6omsB9h0.roa
Signing time: Wed 29 Sep 2021 02:48:36 +0000
ROA not before: Wed 29 Sep 2021 02:48:36 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 45.64.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7446 (0x1d16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:36 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=209849DC5C89F2263AC234C264453AA26B01F61D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:fb:35:e3:fb:e4:36:d6:00:a4:eb:e9:8d:
04:ba:ec:71:08:fa:4d:94:69:90:d1:37:69:2f:e1:
45:9b:5c:bb:da:97:00:45:f2:cb:5a:e2:c5:04:22:
a3:e2:72:4b:98:aa:da:f6:2c:1b:78:ff:62:02:4b:
35:e9:5c:9b:d4:40:01:b8:3c:67:ec:b4:5e:80:cf:
4c:b1:da:02:16:4c:35:c2:80:38:06:06:d5:99:e3:
c4:bd:df:52:08:90:45:ec:a2:14:8a:42:bb:e7:95:
f3:70:44:60:79:3e:25:24:85:0a:0a:9e:03:c4:d2:
86:e7:7a:92:a3:ab:13:8a:ee:19:f2:a9:f2:63:3d:
f9:31:d9:32:67:e8:a3:20:da:01:fd:ad:a7:75:4c:
57:20:2d:10:47:90:df:9e:6a:f4:68:86:6b:b2:f3:
b6:5b:28:0f:9e:3c:74:75:2a:89:ae:0f:cc:d8:5e:
4c:12:15:b9:b7:c9:42:e9:aa:08:2b:97:b6:6b:c4:
c9:52:21:5a:96:27:68:f4:74:b8:46:4d:0b:d7:6a:
02:ca:cc:2c:2c:99:18:6f:70:b1:ec:ff:cc:8f:02:
20:de:30:c0:c4:b7:ca:86:65:29:b3:2a:87:ba:60:
9e:1a:68:de:fe:b8:28:fe:bb:8e:6c:9e:7d:79:59:
54:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:98:49:DC:5C:89:F2:26:3A:C2:34:C2:64:45:3A:A2:6B:01:F6:1D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IJhJ3FyJ8iY6wjTCZEU6omsB9h0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:61:32:94:8c:03:6e:af:58:99:ff:bf:a7:fd:51:b9:58:46:
bd:2e:b0:d4:1a:b2:8f:d7:f7:e8:b4:83:f8:95:8f:38:0f:fc:
7e:ff:15:c7:41:25:ae:ac:3e:74:b8:38:3b:91:e0:57:26:cd:
4d:47:01:03:b4:b9:85:c4:f0:f6:a6:f2:7b:89:9d:02:38:61:
13:f7:18:0c:26:ed:54:df:d6:08:dc:5b:82:b3:6a:16:66:bf:
b3:d4:9d:85:61:fa:3e:29:05:d6:ce:3a:d4:eb:58:f4:6c:90:
5f:60:cf:06:17:f7:a9:ed:6d:68:d3:95:64:33:07:08:0e:18:
cb:b3:1f:bb:7c:53:84:13:79:16:34:db:19:20:46:8c:69:d4:
62:26:5e:df:aa:24:ae:62:81:8a:18:70:e1:eb:e1:f2:de:6f:
22:58:b0:d0:6c:2f:5c:e5:c6:f6:c2:86:e9:36:72:72:85:71:
65:e7:d7:3d:74:1f:af:a0:90:2f:5b:14:e7:05:33:9e:9b:36:
ed:4e:15:0e:4f:ea:72:d9:7c:16:c2:2b:3f:c2:64:94:ab:69:
76:17:1a:58:d0:6f:1d:18:12:27:9f:2c:dd:6d:51:43:9b:a4:
60:38:43:b7:2b:26:67:6f:0c:19:97:f0:e5:6c:1c:ca:ad:1d:
a9:03:8d:df
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHRYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4MzZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDIwOTg0OURDNUM4OUYy
MjYzQUMyMzRDMjY0NDUzQUEyNkIwMUY2MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpafs14/vkNtYApOvpjQS67HEI+k2UaZDRN2kv4UWbXLvalwBF
8sta4sUEIqPickuYqtr2LBt4/2ICSzXpXJvUQAG4PGfstF6Az0yx2gIWTDXCgDgG
BtWZ48S931IIkEXsohSKQrvnlfNwRGB5PiUkhQoKngPE0obnepKjqxOK7hnyqfJj
Pfkx2TJn6KMg2gH9rad1TFcgLRBHkN+eavRohmuy87ZbKA+ePHR1KomuD8zYXkwS
Fbm3yULpqggrl7ZrxMlSIVqWJ2j0dLhGTQvXagLKzCwsmRhvcLHs/8yPAiDeMMDE
t8qGZSmzKoe6YJ4aaN7+uCj+u45snn15WVSJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUIJhJ3FyJ8iY6wjTCZEU6omsB9h0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lKaEozRnlKOGlZNndqVENa
RVU2b21zQjloMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt
QBwwDQYJKoZIhvcNAQELBQADggEBAH1hMpSMA26vWJn/v6f9UblYRr0usNQaso/X
9+i0g/iVjzgP/H7/FcdBJa6sPnS4ODuR4FcmzU1HAQO0uYXE8Pam8nuJnQI4YRP3
GAwm7VTf1gjcW4KzahZmv7PUnYVh+j4pBdbOOtTrWPRskF9gzwYX96ntbWjTlWQz
BwgOGMuzH7t8U4QTeRY02xkgRoxp1GImXt+qJK5igYoYcOHr4fLebyJYsNBsL1zl
xvbChuk2cnKFcWXn1z10H6+gkC9bFOcFM56bNu1OFQ5P6nLZfBbCKz/CZJSraXYX
GljQbx0YEiefLN1tUUObpGA4Q7crJmdvDBmX8OVsHMqtHakDjd8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:25 2023 by rpki-client on console-fra.rpki-client.org