Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LHFNKlk7NjkrrxIrd8mqzxBQZi0.roa
File: LHFNKlk7NjkrrxIrd8mqzxBQZi0.roa (raw, json)
Hash identifier: K1dgaW7j1VfuMLqC8iofU44P1ZwI8juBzRfrJ8un0Gc=
Subject key identifier: 2C:71:4D:2A:59:3B:36:39:2B:AF:12:2B:77:C9:AA:CF:10:50:66:2D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 228C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LHFNKlk7NjkrrxIrd8mqzxBQZi0.roa
Signing time: Fri 25 Nov 2022 04:41:20 +0000
ROA not before: Fri 25 Nov 2022 04:41:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8844 (0x228c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2C714D2A593B36392BAF122B77C9AACF1050662D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:5b:40:93:c0:9a:34:23:3a:05:70:cb:a9:
93:a7:31:60:23:75:bc:40:75:c8:20:e3:d9:75:85:
ba:c4:bd:aa:44:8b:6e:c1:81:3e:c8:8f:87:d0:03:
12:35:8b:bd:79:d4:db:90:08:61:05:79:63:3f:82:
84:9c:fc:fa:8c:7e:ce:15:7b:00:c4:ce:cc:03:ff:
78:0b:95:57:f9:98:c5:9b:29:ca:ad:d3:47:f6:46:
23:d1:b5:d3:80:f3:b8:97:6c:a9:a1:46:b7:49:6f:
96:a2:3c:88:f4:ee:81:53:2d:37:a8:a4:ae:ed:cb:
f2:f2:b2:79:93:cd:47:fb:a3:ad:dd:59:a0:12:08:
e3:ef:81:5c:e2:83:3e:db:96:4a:2e:59:f4:55:7c:
06:11:17:cf:10:cf:48:8e:a2:cb:c3:24:a7:38:f5:
d9:19:3d:87:8e:53:7d:1b:53:44:2e:60:db:7a:ba:
d4:9d:10:9e:36:9f:9b:f4:4a:db:fc:64:a3:7a:4e:
dc:17:77:ad:2b:c7:67:bd:d1:fe:21:ae:53:a1:91:
04:25:ae:80:ab:c7:12:7d:ea:6f:fa:e1:ea:8d:cb:
00:d7:32:4a:4e:b8:6d:d6:81:a8:42:fe:06:b2:58:
ac:50:64:1b:48:aa:2b:86:cf:da:cc:87:6d:4f:d3:
24:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:71:4D:2A:59:3B:36:39:2B:AF:12:2B:77:C9:AA:CF:10:50:66:2D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LHFNKlk7NjkrrxIrd8mqzxBQZi0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.176.0/21
Signature Algorithm: sha256WithRSAEncryption
24:ec:55:2a:90:a1:70:89:0d:fa:96:ac:06:ee:28:c8:bb:2b:
4e:86:fd:5c:c3:cb:9e:c6:e9:12:03:e7:ae:65:5d:b0:cc:45:
5a:83:93:13:c7:4a:25:50:44:d3:67:23:d3:8b:a9:0f:a7:8c:
9e:62:11:12:bf:84:59:fd:df:2f:98:03:03:d5:92:cd:85:78:
11:5a:56:ca:b2:c7:60:40:96:29:d7:89:f7:aa:d9:d8:88:b5:
a3:8e:96:a8:d2:07:37:44:44:38:c7:2e:68:12:5d:01:ee:53:
3a:be:d3:63:46:a9:fe:af:8c:b2:9f:d4:0a:88:f6:e7:74:3a:
1a:d5:ea:2c:4a:84:3b:69:e3:06:60:32:e0:97:35:72:c7:24:
ee:70:e7:62:c6:ee:22:85:31:35:80:8c:83:d6:5e:36:6c:ce:
72:a0:15:26:69:c0:61:97:74:a0:79:96:0a:43:ba:f9:e6:11:
32:67:71:9f:c7:38:90:2c:21:f6:04:aa:45:dc:83:c2:3a:c7:
37:3c:3a:a6:dc:bb:45:40:26:bb:f6:e3:a8:0a:50:b0:4b:23:
d1:90:18:02:3e:62:81:e3:47:0d:a8:65:cf:81:ad:96:b5:e7:
fc:55:4f:ab:5d:f1:df:8b:69:bf:8a:2e:ea:3a:db:87:27:72:
98:b1:f6:d2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxMjBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJDNzE0RDJBNTkzQjM2
MzkyQkFGMTIyQjc3QzlBQUNGMTA1MDY2MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7LFtAk8CaNCM6BXDLqZOnMWAjdbxAdcgg49l1hbrEvapEi27B
gT7Ij4fQAxI1i7151NuQCGEFeWM/goSc/PqMfs4VewDEzswD/3gLlVf5mMWbKcqt
00f2RiPRtdOA87iXbKmhRrdJb5aiPIj07oFTLTeopK7ty/LysnmTzUf7o63dWaAS
COPvgVzigz7blkouWfRVfAYRF88Qz0iOosvDJKc49dkZPYeOU30bU0QuYNt6utSd
EJ42n5v0Stv8ZKN6TtwXd60rx2e90f4hrlOhkQQlroCrxxJ96m/64eqNywDXMkpO
uG3WgahC/gayWKxQZBtIqiuGz9rMh21P0yTbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULHFNKlk7NjkrrxIrd8mqzxBQZi0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0xIRk5LbGs3TmprcnJ4SXJk
OG1xenhCUVppMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6LAwDQYJKoZIhvcNAQELBQADggEBACTsVSqQoXCJDfqWrAbuKMi7K06G/VzDy57G
6RID565lXbDMRVqDkxPHSiVQRNNnI9OLqQ+njJ5iERK/hFn93y+YAwPVks2FeBFa
Vsqyx2BAlinXifeq2diItaOOlqjSBzdERDjHLmgSXQHuUzq+02NGqf6vjLKf1AqI
9ud0OhrV6ixKhDtp4wZgMuCXNXLHJO5w52LG7iKFMTWAjIPWXjZsznKgFSZpwGGX
dKB5lgpDuvnmETJncZ/HOJAsIfYEqkXcg8I6xzc8Oqbcu0VAJrv246gKULBLI9GQ
GAI+YoHjRw2oZc+BrZa15/xVT6td8d+Lab+KLuo624cncpix9tI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org