Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mv8KxPcn9TKZxOs11gdUorjVc7s.roa
File: Mv8KxPcn9TKZxOs11gdUorjVc7s.roa (raw, json)
Hash identifier: 37Avi6ohZYRO2imKUxF7zT+Eu8wAOCr9sOumTuhWy1E=
Subject key identifier: 32:FF:0A:C4:F7:27:F5:32:99:C4:EB:35:D6:07:54:A2:B8:D5:73:BB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18A9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mv8KxPcn9TKZxOs11gdUorjVc7s.roa
Signing time: Sun 07 Feb 2021 12:50:53 +0000
ROA not before: Sun 07 Feb 2021 12:50:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 118.232.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6313 (0x18a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:50:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=32FF0AC4F727F53299C4EB35D60754A2B8D573BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:16:da:ee:56:ad:7e:6b:ac:e9:63:e7:a6:
22:30:31:ff:7d:46:d4:5f:f1:0b:e8:58:70:97:1c:
e1:e9:bf:00:30:d5:23:f7:84:08:4b:ae:6e:3d:d3:
81:6b:e5:f3:d5:2f:66:89:bc:b2:eb:a7:e7:9e:41:
18:1c:7a:67:88:f8:bd:16:ed:82:69:f8:6b:77:66:
36:e7:72:1d:f6:db:ba:b3:e9:d6:b1:23:94:cc:1e:
9b:c9:b0:99:be:28:09:1e:64:ae:5e:68:d9:4d:09:
a4:6d:83:1a:cc:80:47:0d:0a:d5:d4:32:bc:8c:ce:
a4:42:b2:c0:ae:10:e5:1d:b2:8a:dd:68:ec:e2:dd:
85:5b:d8:22:d1:92:bb:14:fd:82:4b:e9:35:00:a8:
ce:24:4e:88:b0:71:3d:ac:67:87:14:38:58:7a:cf:
a3:2c:b6:db:1d:0c:ec:f0:84:f6:f6:1c:98:03:d2:
d4:0f:36:dc:f4:2d:38:4d:2c:90:cd:8b:a6:a0:67:
40:70:45:8c:d1:5a:2d:9c:88:af:86:96:26:d4:6a:
7a:3d:00:5a:10:42:2c:0f:a7:b9:b9:73:51:3c:62:
9f:13:ef:af:d4:36:ff:64:b9:c8:b6:9f:28:dc:25:
b3:e8:f8:e8:45:3a:15:75:91:3e:88:d6:99:90:54:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FF:0A:C4:F7:27:F5:32:99:C4:EB:35:D6:07:54:A2:B8:D5:73:BB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mv8KxPcn9TKZxOs11gdUorjVc7s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.96.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:80:a0:c5:fb:50:b1:4e:cb:9c:22:5b:f5:2a:3b:88:c0:c9:
a9:24:3d:8e:96:9e:00:61:73:c4:99:28:23:96:cb:46:3c:e6:
52:39:5d:a7:c0:2b:b4:83:e7:cc:b9:07:c0:c6:9b:ef:94:cd:
23:34:1b:66:6e:d4:5d:ae:a9:1d:c4:ae:9c:a3:2a:36:83:84:
1f:93:f4:47:ce:0d:dd:53:65:5f:9b:c0:85:73:bd:b9:f8:cb:
f8:30:88:bc:46:62:a4:a4:0a:d3:6d:94:25:20:87:4d:0d:c9:
77:fe:7a:c6:e5:7f:e1:37:b6:f6:b4:98:23:77:8f:54:ad:eb:
31:be:e6:d0:ca:5e:36:79:0b:f7:36:e3:a7:0a:bd:03:ef:50:
8a:a3:e5:af:97:96:d1:69:94:a8:06:aa:35:73:e1:d3:0d:ca:
03:b6:8a:af:2c:c3:2f:b8:ae:13:7f:29:7e:92:88:5f:7b:03:
b3:82:57:ff:29:14:ca:18:5c:d9:46:21:50:4a:54:60:b0:d8:
5b:82:42:a2:1a:b2:4f:87:58:98:c3:08:36:98:59:2a:87:05:
b0:a5:0b:2e:20:88:47:c8:b4:3a:2b:20:2c:d6:a0:04:48:ab:
fb:26:df:4c:81:c6:12:af:35:2d:a0:86:6d:73:fd:49:af:b4:
49:05:cf:03
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjUwNTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDMyRkYwQUM0RjcyN0Y1
MzI5OUM0RUIzNUQ2MDc1NEEyQjhENTczQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+3Bba7latfmus6WPnpiIwMf99RtRf8QvoWHCXHOHpvwAw1SP3
hAhLrm4904Fr5fPVL2aJvLLrp+eeQRgcemeI+L0W7YJp+Gt3Zjbnch3227qz6dax
I5TMHpvJsJm+KAkeZK5eaNlNCaRtgxrMgEcNCtXUMryMzqRCssCuEOUdsordaOzi
3YVb2CLRkrsU/YJL6TUAqM4kToiwcT2sZ4cUOFh6z6MsttsdDOzwhPb2HJgD0tQP
Ntz0LThNLJDNi6agZ0BwRYzRWi2ciK+GlibUano9AFoQQiwPp7m5c1E8Yp8T76/U
Nv9kuci2nyjcJbPo+OhFOhV1kT6I1pmQVDtPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUMv8KxPcn9TKZxOs11gdUorjVc7swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL012OEt4UGNuOVRLWnhPczEx
Z2RVb3JqVmM3cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2
6GAwDQYJKoZIhvcNAQELBQADggEBAEqAoMX7ULFOy5wiW/UqO4jAyakkPY6WngBh
c8SZKCOWy0Y85lI5XafAK7SD58y5B8DGm++UzSM0G2Zu1F2uqR3ErpyjKjaDhB+T
9EfODd1TZV+bwIVzvbn4y/gwiLxGYqSkCtNtlCUgh00NyXf+esblf+E3tva0mCN3
j1St6zG+5tDKXjZ5C/c246cKvQPvUIqj5a+XltFplKgGqjVz4dMNygO2iq8swy+4
rhN/KX6SiF97A7OCV/8pFMoYXNlGIVBKVGCw2FuCQqIask+HWJjDCDaYWSqHBbCl
Cy4giEfItDorICzWoARIq/sm30yBxhKvNS2ghm1z/UmvtEkFzwM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org