Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KP9iPj-GFyfptlnGzqknasEfOOc.roa
File: KP9iPj-GFyfptlnGzqknasEfOOc.roa (raw, json)
Hash identifier: TnJkOcp0kipu2X4YP9kHxO4wiq+G9YfRJuI0CEJ9Qg8=
Subject key identifier: 28:FF:62:3E:3F:86:17:27:E9:B6:59:C6:CE:A9:27:6A:C1:1F:38:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 231C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KP9iPj-GFyfptlnGzqknasEfOOc.roa
Signing time: Fri 25 Nov 2022 04:42:03 +0000
ROA not before: Fri 25 Nov 2022 04:42:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.136.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8988 (0x231c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=28FF623E3F861727E9B659C6CEA9276AC11F38E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:15:9e:84:36:f8:c3:d2:d2:09:c3:7c:3e:
cf:5b:fd:99:93:95:32:e1:a4:9e:03:51:1a:d8:74:
23:5b:92:ea:e0:77:c7:b8:40:37:b5:ee:4d:95:ba:
31:9e:9a:d5:28:dc:34:b3:52:4b:39:b7:5f:24:c7:
09:89:fb:05:f5:d8:9e:f9:82:5a:a5:51:e4:5b:32:
33:13:84:66:06:9e:38:49:2b:51:11:fb:b4:57:e5:
b1:bd:12:1e:1e:7f:6b:b3:25:30:86:a9:5c:01:66:
41:86:4e:d8:23:99:61:5d:f0:3f:31:0a:b2:72:52:
47:44:bf:b8:b1:18:0d:dc:fe:eb:76:d5:df:3c:18:
b9:82:f5:9e:54:46:6d:70:e1:c9:fc:4e:d5:93:03:
07:8a:1d:b4:3c:9d:59:cd:74:0d:80:3d:76:52:d1:
b7:b5:ed:c2:58:7c:f2:55:ed:d8:fc:b1:71:29:6d:
b3:d5:f2:92:85:b6:dd:29:cd:c1:07:b6:fa:39:70:
be:0f:83:c8:bb:5a:e6:ca:dc:fb:cb:81:8a:c4:88:
b4:13:4c:ff:0d:be:fd:59:c9:b4:db:93:b6:4f:cb:
96:d2:d2:7b:0a:f2:42:7c:37:ec:82:b6:29:78:64:
08:e8:5c:3d:44:2f:50:b2:aa:7c:16:3b:40:21:8d:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FF:62:3E:3F:86:17:27:E9:B6:59:C6:CE:A9:27:6A:C1:1F:38:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KP9iPj-GFyfptlnGzqknasEfOOc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.136.0/21
Signature Algorithm: sha256WithRSAEncryption
48:d1:d0:26:ae:57:ed:e6:47:83:f0:b4:6f:48:51:a7:71:97:
d1:63:9f:ab:03:1d:d8:a7:5d:05:55:91:e7:71:c4:6e:bf:9b:
df:ee:13:ca:b6:82:80:e9:32:53:03:6d:ee:4b:fd:c3:a1:2f:
cc:da:18:6f:ee:61:1d:4c:6d:c2:12:ed:e9:bf:55:6a:bb:91:
8e:74:9a:44:60:97:ef:c7:3a:ce:41:7e:bc:b4:b0:99:5d:35:
2f:bc:ab:bd:04:16:37:d7:d1:e6:1e:f7:6a:1b:2f:9b:a0:10:
c7:ae:23:40:8a:ef:b3:ff:8b:3e:84:8e:e7:09:40:9f:19:e5:
80:55:0b:9a:02:48:b6:b3:a6:82:8d:fe:e7:71:2e:2e:b6:0c:
9d:5f:c3:8b:ca:ce:e7:07:7f:a6:d9:a6:a0:f3:67:09:7c:dc:
90:96:57:9d:39:07:e5:d9:59:f1:2e:01:46:f3:5d:f8:43:83:
c9:5c:a5:dc:ff:44:12:2e:18:ef:39:83:5e:93:03:ef:43:15:
0f:01:70:37:97:c5:cf:e9:dd:45:06:2d:2a:43:d5:69:30:eb:
93:85:0f:82:3a:84:7b:60:ce:01:0d:19:17:74:d5:88:fa:7f:
81:00:fd:3b:c6:74:aa:c0:83:51:4c:ae:8f:f8:7e:be:cd:ad:
39:ee:7d:ce
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIxwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQyMDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDI4RkY2MjNFM0Y4NjE3
MjdFOUI2NTlDNkNFQTkyNzZBQzExRjM4RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5EhWehDb4w9LSCcN8Ps9b/ZmTlTLhpJ4DURrYdCNbkurgd8e4
QDe17k2VujGemtUo3DSzUks5t18kxwmJ+wX12J75glqlUeRbMjMThGYGnjhJK1ER
+7RX5bG9Eh4ef2uzJTCGqVwBZkGGTtgjmWFd8D8xCrJyUkdEv7ixGA3c/ut21d88
GLmC9Z5URm1w4cn8TtWTAweKHbQ8nVnNdA2APXZS0be17cJYfPJV7dj8sXEpbbPV
8pKFtt0pzcEHtvo5cL4Pg8i7WubK3PvLgYrEiLQTTP8Nvv1ZybTbk7ZPy5bS0nsK
8kJ8N+yCtil4ZAjoXD1EL1CyqnwWO0AhjT/vAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKP9iPj+GFyfptlnGzqknasEfOOcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0tQOWlQai1HRnlmcHRsbkd6
cWtuYXNFZk9PYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6YgwDQYJKoZIhvcNAQELBQADggEBAEjR0CauV+3mR4PwtG9IUadxl9Fjn6sDHdin
XQVVkedxxG6/m9/uE8q2goDpMlMDbe5L/cOhL8zaGG/uYR1MbcIS7em/VWq7kY50
mkRgl+/HOs5Bfry0sJldNS+8q70EFjfX0eYe92obL5ugEMeuI0CK77P/iz6EjucJ
QJ8Z5YBVC5oCSLazpoKN/udxLi62DJ1fw4vKzucHf6bZpqDzZwl83JCWV505B+XZ
WfEuAUbzXfhDg8lcpdz/RBIuGO85g16TA+9DFQ8BcDeXxc/p3UUGLSpD1Wkw65OF
D4I6hHtgzgENGRd01Yj6f4EA/TvGdKrAg1FMro/4fr7NrTnufc4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org