Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MzmXMPdYCf-QvWqdm_wZjhEMnpw.roa
File: MzmXMPdYCf-QvWqdm_wZjhEMnpw.roa (raw, json)
Hash identifier: x1bn0im9lfMzGhpbP2V4xzYB11vM/Pr9X+VIBXbk8bo=
Subject key identifier: 33:39:97:30:F7:58:09:FF:90:BD:6A:9D:9B:FC:19:8E:11:0C:9E:9C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1F28
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MzmXMPdYCf-QvWqdm_wZjhEMnpw.roa
Signing time: Tue 26 Jul 2022 03:34:58 +0000
ROA not before: Tue 26 Jul 2022 03:34:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.40.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7976 (0x1f28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Jul 26 03:34:58 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=33399730F75809FF90BD6A9D9BFC198E110C9E9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:fd:4d:fe:2d:81:39:bb:17:3b:5e:ad:7d:
8a:33:ea:ca:ee:ec:9a:58:0c:86:63:c8:a4:e5:d7:
e8:f4:c2:9b:2e:f1:32:58:67:3f:94:87:46:27:b7:
5e:09:68:88:0b:d7:59:56:0f:b3:84:af:61:8c:fc:
2b:f8:72:b3:09:f3:80:65:71:a6:ef:72:64:b5:31:
9e:cf:f5:05:99:76:2e:a6:4d:e2:78:74:ac:1d:95:
78:f4:60:84:1d:7a:a1:eb:8c:3f:c2:61:20:2c:e4:
5a:82:82:4b:fb:e0:aa:a4:42:10:f5:66:54:1c:9d:
fc:5d:fd:a9:7b:99:3d:a5:7b:dd:51:f4:7a:ca:7b:
2d:37:8f:35:6b:8b:5d:0a:9c:6e:9e:74:0e:7d:c8:
dc:1d:fb:77:94:28:ca:84:a3:53:84:cd:76:53:08:
e4:f1:f4:9d:c2:be:f2:3f:75:25:ee:4e:2b:54:cd:
62:51:69:76:c5:81:1a:5b:ed:c3:09:8e:a5:a7:f0:
16:97:b9:16:fc:08:8a:0a:20:ab:e2:26:39:c1:ca:
d4:20:d1:f5:ab:5c:4a:bb:da:f4:8b:15:41:40:ca:
7f:6e:a2:03:bd:32:c6:39:bd:2f:c4:c6:a6:b8:3b:
4d:a5:f3:ce:f0:22:44:fa:70:fe:b6:d7:2f:a6:c8:
20:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:39:97:30:F7:58:09:FF:90:BD:6A:9D:9B:FC:19:8E:11:0C:9E:9C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MzmXMPdYCf-QvWqdm_wZjhEMnpw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.40.0/21
Signature Algorithm: sha256WithRSAEncryption
62:81:15:ef:47:88:f6:dc:3c:69:26:49:aa:3e:3d:72:67:e2:
79:37:4b:1d:ef:3b:c5:dc:1c:bb:f2:6e:af:04:6f:6f:24:4b:
bd:a5:30:7c:04:6c:07:8c:ea:76:9d:59:c9:8b:1e:90:66:a0:
4a:b5:03:76:7c:80:03:f0:a5:fe:51:30:a5:d1:10:a0:a0:e5:
86:0f:a0:f0:c1:81:b1:48:83:6c:b9:7a:86:bd:90:0d:01:00:
d2:c4:10:c4:71:9c:fa:8e:6b:15:64:a1:54:07:c0:72:df:7a:
cc:dd:96:b6:d3:02:e7:86:3f:2a:0c:77:a9:e0:94:33:2b:e8:
08:83:3d:ae:a7:7a:a8:47:6f:40:16:5d:9b:ad:8c:09:e3:57:
e0:b5:dc:b5:4c:5f:fb:38:2e:bf:3a:17:b7:46:ea:89:d2:27:
30:2b:48:51:91:d4:d5:1e:ea:87:72:bf:cc:26:a5:f4:92:da:
ae:37:67:6d:ac:9c:ed:95:55:a8:8c:01:19:a9:df:ef:0a:c0:
5f:f2:38:9d:75:d8:2b:0c:4b:9d:a0:b9:79:3d:e4:ec:55:72:
3e:83:64:5f:13:ad:50:cf:d5:75:92:53:a1:2c:d9:e2:29:f6:
fe:b3:ef:ef:6f:a6:d4:5f:14:af:d9:d8:b7:3b:79:74:7d:a0:
34:38:41:24
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHygwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA3MjYw
MzM0NThaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDMzMzk5NzMwRjc1ODA5
RkY5MEJENkE5RDlCRkMxOThFMTEwQzlFOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpVv1N/i2BObsXO16tfYoz6sru7JpYDIZjyKTl1+j0wpsu8TJY
Zz+Uh0Ynt14JaIgL11lWD7OEr2GM/Cv4crMJ84BlcabvcmS1MZ7P9QWZdi6mTeJ4
dKwdlXj0YIQdeqHrjD/CYSAs5FqCgkv74KqkQhD1ZlQcnfxd/al7mT2le91R9HrK
ey03jzVri10KnG6edA59yNwd+3eUKMqEo1OEzXZTCOTx9J3CvvI/dSXuTitUzWJR
aXbFgRpb7cMJjqWn8BaXuRb8CIoKIKviJjnBytQg0fWrXEq72vSLFUFAyn9uogO9
MsY5vS/Exqa4O02l887wIkT6cP621y+myCCVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUMzmXMPdYCf+QvWqdm/wZjhEMnpwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL016bVhNUGRZQ2YtUXZXcWRt
X3daamhFTW5wdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6SgwDQYJKoZIhvcNAQELBQADggEBAGKBFe9HiPbcPGkmSao+PXJn4nk3Sx3vO8Xc
HLvybq8Eb28kS72lMHwEbAeM6nadWcmLHpBmoEq1A3Z8gAPwpf5RMKXREKCg5YYP
oPDBgbFIg2y5eoa9kA0BANLEEMRxnPqOaxVkoVQHwHLfeszdlrbTAueGPyoMd6ng
lDMr6AiDPa6neqhHb0AWXZutjAnjV+C13LVMX/s4Lr86F7dG6onSJzArSFGR1NUe
6odyv8wmpfSS2q43Z22snO2VVaiMARmp3+8KwF/yOJ112CsMS52guXk95OxVcj6D
ZF8TrVDP1XWSU6Es2eIp9v6z7+9vptRfFK/Z2Lc7eXR9oDQ4QSQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org