Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MqivqfiQikCuUZGZwmtGF2bXxIo.roa
File: MqivqfiQikCuUZGZwmtGF2bXxIo.roa (raw, json)
Hash identifier: 03ywXOBUHSdgM+CX8PnsPDqH1vivTco6M3Kfm5y6LAs=
Subject key identifier: 32:A8:AF:A9:F8:90:8A:40:AE:51:91:99:C2:6B:46:17:66:D7:C4:8A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 164B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MqivqfiQikCuUZGZwmtGF2bXxIo.roa
Signing time: Sun 07 Feb 2021 12:09:31 +0000
ROA not before: Sun 07 Feb 2021 12:09:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5707 (0x164b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:09:31 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=32A8AFA9F8908A40AE519199C26B461766D7C48A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:cc:01:8a:fa:ea:49:be:0f:1c:bc:d5:d6:
30:81:d6:72:3c:9c:2f:6c:0b:0c:c0:9d:01:b9:36:
28:17:52:50:71:9d:45:96:ac:48:12:81:7e:d3:cd:
a7:5d:35:34:a7:ef:c7:59:69:36:63:97:23:e5:b5:
77:fa:c0:da:01:2e:82:a5:83:99:f6:00:6c:91:38:
cc:3f:13:98:5d:c3:2c:47:1e:ac:bc:3c:9d:63:e8:
23:d2:db:0c:0d:4f:c4:84:ed:05:1b:90:57:1b:ee:
68:61:f1:06:36:14:8b:29:e9:94:de:41:92:16:e7:
95:da:62:b5:e1:a3:5e:0b:03:41:f8:15:85:00:2a:
a3:43:67:00:b7:71:92:86:15:d3:a7:49:75:48:52:
8a:1d:1a:ea:fd:8f:05:d1:a4:df:27:4e:83:bf:3b:
93:87:09:ef:bc:3e:c9:0a:30:41:e3:80:fc:44:20:
9f:07:e7:75:07:a6:3f:90:9d:67:af:98:ed:ad:4f:
ef:32:a5:32:4e:8f:fd:c8:cb:8f:88:35:f0:13:39:
eb:b7:3a:e9:a5:41:c6:13:9f:5f:2b:0d:7b:2e:fa:
bb:13:6f:c6:de:88:50:5b:cd:13:39:1f:01:57:71:
cf:c2:a1:58:8b:a8:3d:08:81:5a:dd:c2:6a:11:a8:
88:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A8:AF:A9:F8:90:8A:40:AE:51:91:99:C2:6B:46:17:66:D7:C4:8A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MqivqfiQikCuUZGZwmtGF2bXxIo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.148.0/22
Signature Algorithm: sha256WithRSAEncryption
24:f3:02:81:ed:66:5d:f7:1c:36:2f:b4:be:46:56:ae:f4:90:
b8:ea:c8:84:08:21:76:dd:95:31:f6:8c:5c:f3:72:76:29:3b:
33:ca:15:17:55:e1:1d:0d:81:b8:64:13:d1:50:a6:db:7e:5b:
e2:c0:7b:bf:6e:64:03:9c:ad:09:45:fa:e3:70:f5:f0:3f:71:
75:d4:85:51:4e:da:1d:56:df:22:1f:e0:60:e2:1c:e2:f9:44:
7f:24:40:3c:17:3c:50:ef:81:c6:dd:5a:28:3e:f6:bb:02:14:
37:85:4b:aa:10:cd:92:2d:ca:7f:21:6c:26:5f:f0:ec:da:89:
8e:cb:e7:00:3f:e6:20:75:d7:34:81:c9:19:cd:aa:25:29:21:
eb:5f:6f:98:92:7a:40:00:3c:1a:81:c9:9a:a3:6c:01:0a:e7:
5c:a2:ba:4b:3d:8c:a9:74:7b:94:db:59:22:86:50:f4:7d:6f:
b1:14:96:6e:b9:3c:0d:e8:10:e2:0b:80:14:bd:2f:6a:67:f4:
71:17:3c:c4:4b:cc:e0:83:7b:5f:16:aa:62:d6:7a:fa:2b:fc:
5e:25:2b:48:61:ed:02:8a:a5:82:68:10:95:f8:62:f8:e8:92:
fa:b3:bd:4e:4a:25:9a:bd:07:4b:e5:96:69:06:1b:ee:9e:65:
f3:a9:0b:c7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjA5MzFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDMyQThBRkE5Rjg5MDhB
NDBBRTUxOTE5OUMyNkI0NjE3NjZEN0M0OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2LswBivrqSb4PHLzV1jCB1nI8nC9sCwzAnQG5NigXUlBxnUWW
rEgSgX7TzaddNTSn78dZaTZjlyPltXf6wNoBLoKlg5n2AGyROMw/E5hdwyxHHqy8
PJ1j6CPS2wwNT8SE7QUbkFcb7mhh8QY2FIsp6ZTeQZIW55XaYrXho14LA0H4FYUA
KqNDZwC3cZKGFdOnSXVIUoodGur9jwXRpN8nToO/O5OHCe+8PskKMEHjgPxEIJ8H
53UHpj+QnWevmO2tT+8ypTJOj/3Iy4+INfATOeu3OumlQcYTn18rDXsu+rsTb8be
iFBbzRM5HwFXcc/CoViLqD0IgVrdwmoRqIg5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUMqivqfiQikCuUZGZwmtGF2bXxIowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL01xaXZxZmlRaWtDdVVaR1p3
bXRHRjJiWHhJby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6ZQwDQYJKoZIhvcNAQELBQADggEBACTzAoHtZl33HDYvtL5GVq70kLjqyIQIIXbd
lTH2jFzzcnYpOzPKFRdV4R0NgbhkE9FQptt+W+LAe79uZAOcrQlF+uNw9fA/cXXU
hVFO2h1W3yIf4GDiHOL5RH8kQDwXPFDvgcbdWig+9rsCFDeFS6oQzZItyn8hbCZf
8OzaiY7L5wA/5iB11zSByRnNqiUpIetfb5iSekAAPBqByZqjbAEK51yiuks9jKl0
e5TbWSKGUPR9b7EUlm65PA3oEOILgBS9L2pn9HEXPMRLzOCDe18WqmLWevor/F4l
K0hh7QKKpYJoEJX4YvjokvqzvU5KJZq9B0vllmkGG+6eZfOpC8c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org