Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L4tNF7QH-Gj6h9rqyGPkBoVnVII.roa
File: L4tNF7QH-Gj6h9rqyGPkBoVnVII.roa (raw, json)
Hash identifier: eDW3R73UUzucRnbSk5vL8YtrI4DIk8k+hHY8fB3hoWA=
Subject key identifier: 2F:8B:4D:17:B4:07:F8:68:FA:87:DA:EA:C8:63:E4:06:85:67:54:82
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L4tNF7QH-Gj6h9rqyGPkBoVnVII.roa
Signing time: Thu 15 Sep 2022 02:52:29 +0000
ROA not before: Thu 15 Sep 2022 02:52:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2F8B4D17B407F868FA87DAEAC863E40685675482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:7c:b0:11:e6:00:c7:53:92:20:06:74:13:
d1:58:54:20:4f:20:ed:b1:66:a7:9f:c7:3f:f9:cf:
ed:d1:4f:06:d8:4b:e7:2e:0e:3d:88:35:b6:d9:a5:
05:d2:5d:43:9f:fc:e1:0d:af:0d:00:f6:cc:73:fe:
15:a4:71:8c:bd:ca:49:04:88:bb:1e:12:97:e4:53:
ae:88:06:76:aa:cb:fa:65:87:58:39:79:b6:d4:11:
6b:fa:2d:c1:63:a4:c5:a1:d6:a3:18:8d:cd:6b:a9:
9e:ce:a5:25:d7:51:40:8f:ec:6d:34:50:b6:ca:40:
29:c0:2a:98:ed:a2:8a:98:b8:7b:ec:ef:79:b1:72:
e3:12:d0:d7:30:72:14:1a:1c:f3:0d:d7:84:fa:52:
a6:f1:cd:9e:ff:e6:1b:4d:b1:f0:c4:60:fe:0d:06:
f0:39:7e:7c:84:bc:33:11:20:1a:04:e6:ec:d4:0f:
55:51:e8:75:08:cc:65:32:61:14:28:d0:54:b7:a2:
c0:33:55:86:69:80:c3:9e:58:73:ce:fb:4b:42:4e:
1f:f4:f9:50:d5:42:5c:0f:96:6c:a2:14:73:d3:73:
45:ab:73:50:bf:75:eb:fd:5a:71:82:4c:14:59:07:
f3:62:e8:57:e6:31:5f:77:cc:62:67:dc:5f:29:4f:
d9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8B:4D:17:B4:07:F8:68:FA:87:DA:EA:C8:63:E4:06:85:67:54:82
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L4tNF7QH-Gj6h9rqyGPkBoVnVII.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:e7:3b:96:67:ea:99:45:33:1b:86:03:ce:f3:f5:28:17:0c:
74:87:b0:6d:ff:c5:79:14:e1:74:11:b9:2c:f5:58:76:ce:f1:
00:6d:04:7b:97:6d:5b:e2:01:84:cc:5f:73:74:08:30:f3:7b:
93:4d:42:33:73:da:33:09:cb:b6:5d:17:48:6b:8b:0e:cb:fb:
28:38:1a:f2:cd:5c:38:4d:cc:c7:ed:23:53:f8:3e:93:19:ca:
9d:57:6f:13:61:33:84:e1:f9:4d:6c:6e:da:68:2f:30:63:7d:
f2:15:8a:96:65:73:e9:4a:b1:bb:d5:78:e9:49:61:04:85:55:
4c:74:e1:e2:e4:13:0c:0a:cc:c2:70:ca:3a:58:47:22:42:13:
e0:e8:06:6d:35:88:81:0c:66:4a:ba:31:43:ec:e2:e1:c9:3d:
4b:89:4e:15:e4:21:96:9e:e4:b0:9c:51:89:f4:57:6b:02:9c:
ad:4f:b6:9b:c6:c3:7b:dd:39:9e:a9:0e:f5:24:cb:bd:ed:e2:
07:d7:a4:59:ef:d1:0d:99:0c:9a:b8:00:9f:21:88:5d:da:82:
ac:61:0a:20:a3:a9:52:25:e1:b4:ed:d6:0d:ca:48:07:34:f2:
59:d1:7d:42:cc:9f:55:c6:8b:12:d2:a1:8d:db:72:02:14:ac:
85:80:8c:49
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUyMjlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJGOEI0RDE3QjQwN0Y4
NjhGQTg3REFFQUM4NjNFNDA2ODU2NzU0ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEZXywEeYAx1OSIAZ0E9FYVCBPIO2xZqefxz/5z+3RTwbYS+cu
Dj2INbbZpQXSXUOf/OENrw0A9sxz/hWkcYy9ykkEiLseEpfkU66IBnaqy/plh1g5
ebbUEWv6LcFjpMWh1qMYjc1rqZ7OpSXXUUCP7G00ULbKQCnAKpjtooqYuHvs73mx
cuMS0NcwchQaHPMN14T6UqbxzZ7/5htNsfDEYP4NBvA5fnyEvDMRIBoE5uzUD1VR
6HUIzGUyYRQo0FS3osAzVYZpgMOeWHPO+0tCTh/0+VDVQlwPlmyiFHPTc0Wrc1C/
dev9WnGCTBRZB/Ni6FfmMV93zGJn3F8pT9kTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUL4tNF7QH+Gj6h9rqyGPkBoVnVIIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0w0dE5GN1FILUdqNmg5cnF5
R1BrQm9WblZJSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6QgwDQYJKoZIhvcNAQELBQADggEBAKDnO5Zn6plFMxuGA87z9SgXDHSHsG3/xXkU
4XQRuSz1WHbO8QBtBHuXbVviAYTMX3N0CDDze5NNQjNz2jMJy7ZdF0hriw7L+yg4
GvLNXDhNzMftI1P4PpMZyp1XbxNhM4Th+U1sbtpoLzBjffIVipZlc+lKsbvVeOlJ
YQSFVUx04eLkEwwKzMJwyjpYRyJCE+DoBm01iIEMZkq6MUPs4uHJPUuJThXkIZae
5LCcUYn0V2sCnK1PtpvGw3vdOZ6pDvUky73t4gfXpFnv0Q2ZDJq4AJ8hiF3agqxh
CiCjqVIl4bTt1g3KSAc08lnRfULMn1XGixLSoY3bcgIUrIWAjEk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org