Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mz0UcHAp6wu7XYRk8rOyom6Moqk.roa
File: Mz0UcHAp6wu7XYRk8rOyom6Moqk.roa (raw, json)
Hash identifier: eqoaxzLR0GMLRI8jTXKkW17+thZo+YHat8cZ4zzb72k=
Subject key identifier: 33:3D:14:70:70:29:EB:0B:BB:5D:84:64:F2:B3:B2:A2:6E:8C:A2:A9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1713
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mz0UcHAp6wu7XYRk8rOyom6Moqk.roa
Signing time: Sun 07 Feb 2021 12:16:28 +0000
ROA not before: Sun 07 Feb 2021 12:16:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.240.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5907 (0x1713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:16:28 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=333D14707029EB0BBB5D8464F2B3B2A26E8CA2A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:4f:0f:65:c5:32:41:65:ed:53:7b:21:b2:
80:b7:02:63:c4:b8:17:7f:77:b3:70:76:f2:ec:b4:
b5:7f:f8:65:a3:52:85:13:f8:d4:f3:24:44:5a:22:
cc:0f:02:7e:54:9b:0b:f7:97:f5:60:ce:d9:72:ac:
d0:c6:db:8d:a5:9b:5d:33:94:0c:fb:a3:24:3b:1e:
3f:54:5f:e2:79:5d:fa:e5:e1:53:02:9c:31:21:3b:
18:66:0f:3a:ac:a4:f1:6b:81:07:eb:4a:eb:68:af:
c9:57:77:e2:41:27:a1:19:1a:28:40:0a:d9:b9:8a:
dd:86:48:66:91:03:0c:87:e9:6c:e2:76:32:6a:20:
79:d8:92:76:89:d1:8f:72:93:04:f4:21:df:e0:fa:
50:a5:b1:a1:c1:51:42:2d:35:30:34:61:d4:a4:00:
2f:13:90:38:85:92:0f:75:01:7f:b6:be:23:68:aa:
73:79:96:f8:1f:f9:14:20:d6:ff:a7:cf:e8:8a:6c:
5f:c9:59:30:1f:79:3d:cd:10:6e:68:54:41:2a:05:
6a:02:1a:9e:d0:2f:48:aa:33:5a:9e:55:11:0b:a6:
8c:d7:b7:70:06:ed:44:a1:1f:f5:2c:46:98:d0:d6:
89:c0:a0:7f:10:8a:f9:e7:cd:85:f6:09:51:96:d3:
d7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3D:14:70:70:29:EB:0B:BB:5D:84:64:F2:B3:B2:A2:6E:8C:A2:A9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mz0UcHAp6wu7XYRk8rOyom6Moqk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.240.0/23
Signature Algorithm: sha256WithRSAEncryption
68:45:e2:e6:c1:3b:77:7e:5c:85:3a:cd:0f:ed:31:e3:79:e6:
ac:69:23:fa:5f:17:b0:0c:3c:6b:35:52:4a:9e:a1:17:a9:cf:
c7:b9:a3:10:3b:4c:ba:c8:4c:eb:1c:37:17:46:e8:cc:d7:62:
dd:97:09:47:9c:bc:03:37:4c:32:c2:58:f0:ef:03:0c:a6:24:
9e:a7:b6:0c:ca:ff:ff:93:56:e4:44:e5:9c:b3:cb:a2:60:46:
0a:c5:ae:4b:63:17:a1:4f:df:df:48:2e:a7:be:ef:08:03:9c:
56:dc:6b:4d:94:06:e8:c0:0f:87:0f:16:72:1d:f3:90:cc:eb:
50:fe:11:12:60:cf:2a:5a:ef:ae:d6:3b:b9:45:30:cf:1f:d7:
88:23:9f:ea:07:fe:2d:8f:18:83:6d:78:d7:17:e2:cc:d2:a0:
26:d9:af:66:4f:c3:72:96:8b:5e:1d:43:7f:c8:57:85:0b:86:
7f:54:19:a1:4d:3f:d0:e0:27:61:4b:8a:ed:46:fc:af:b1:67:
e1:32:1e:8a:75:2d:e0:cf:b4:bd:84:ec:f4:5e:8a:ac:38:55:
27:e6:f3:73:86:89:36:dc:5a:18:74:02:d1:b6:72:78:7c:c7:
3e:bd:52:86:42:29:e8:7d:d3:e5:b3:7e:c8:57:25:a3:33:f8:
90:0f:e5:5f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFxMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjE2MjhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDMzM0QxNDcwNzAyOUVC
MEJCQjVEODQ2NEYyQjNCMkEyNkU4Q0EyQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3dU8PZcUyQWXtU3shsoC3AmPEuBd/d7NwdvLstLV/+GWjUoUT
+NTzJERaIswPAn5Umwv3l/VgztlyrNDG242lm10zlAz7oyQ7Hj9UX+J5Xfrl4VMC
nDEhOxhmDzqspPFrgQfrSutor8lXd+JBJ6EZGihACtm5it2GSGaRAwyH6WzidjJq
IHnYknaJ0Y9ykwT0Id/g+lClsaHBUUItNTA0YdSkAC8TkDiFkg91AX+2viNoqnN5
lvgf+RQg1v+nz+iKbF/JWTAfeT3NEG5oVEEqBWoCGp7QL0iqM1qeVRELpozXt3AG
7UShH/UsRpjQ1onAoH8QivnnzYX2CVGW09ejAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUMz0UcHAp6wu7XYRk8rOyom6MoqkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL016MFVjSEFwNnd1N1hZUms4
ck95b202TW9xay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2
6fAwDQYJKoZIhvcNAQELBQADggEBAGhF4ubBO3d+XIU6zQ/tMeN55qxpI/pfF7AM
PGs1UkqeoRepz8e5oxA7TLrITOscNxdG6MzXYt2XCUecvAM3TDLCWPDvAwymJJ6n
tgzK//+TVuRE5Zyzy6JgRgrFrktjF6FP399ILqe+7wgDnFbca02UBujAD4cPFnId
85DM61D+ERJgzypa767WO7lFMM8f14gjn+oH/i2PGINteNcX4szSoCbZr2ZPw3KW
i14dQ3/IV4ULhn9UGaFNP9DgJ2FLiu1G/K+xZ+EyHop1LeDPtL2E7PReiqw4VSfm
83OGiTbcWhh0AtG2cnh8xz69UoZCKeh90+WzfshXJaMz+JAP5V8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org