Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NC1vGYvAt3tZvt_zQwgEZKpqkNE.roa
File: NC1vGYvAt3tZvt_zQwgEZKpqkNE.roa (raw, json)
Hash identifier: RmenWnZSpB/0g6NOQodxlgQMh4YbIko6mA1/q3oXXzA=
Subject key identifier: 34:2D:6F:19:8B:C0:B7:7B:59:BE:DF:F3:43:08:04:64:AA:6A:90:D1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NC1vGYvAt3tZvt_zQwgEZKpqkNE.roa
Signing time: Thu 15 Sep 2022 02:44:38 +0000
ROA not before: Thu 15 Sep 2022 02:44:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=342D6F198BC0B77B59BEDFF343080464AA6A90D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:ec:ec:04:92:d3:c5:4c:6a:5a:2d:ab:a4:
eb:c5:97:da:0d:e4:31:af:0f:b5:dd:24:d2:ee:73:
82:bf:6d:2b:cc:40:71:02:3f:d4:74:87:f9:f3:4f:
7f:2c:40:13:75:29:60:52:35:ad:a5:1b:e3:9e:f7:
85:2a:75:f1:36:ca:58:40:a3:f1:3e:4e:4b:dc:9e:
fc:32:b7:2a:ce:93:6e:3b:27:c4:dd:dc:81:64:ae:
55:d1:2b:03:ac:58:46:db:e4:77:92:e0:65:2d:f0:
d0:94:14:43:81:eb:c7:c0:e7:6d:7f:27:3f:ff:82:
14:07:1f:7a:eb:0d:09:a0:e1:23:f5:a7:db:7e:84:
5e:ce:13:4b:de:49:00:09:b5:52:50:76:72:c8:a8:
c9:66:62:4f:fe:0c:eb:94:a4:b7:7b:bc:13:9c:93:
9e:b7:08:f0:f7:38:c2:37:fd:20:97:97:9f:78:d4:
85:09:4b:46:d3:db:f2:33:13:95:bf:6a:37:21:8a:
8e:41:02:b8:36:a4:66:3b:b8:0c:da:6c:02:91:79:
62:59:9a:4b:cc:2b:98:8e:84:b3:96:08:00:c6:dd:
dd:d2:57:62:d4:96:b9:5d:f4:1d:fb:e8:a4:c9:cb:
cd:d7:0b:17:ae:39:aa:4c:fb:07:f4:cc:e5:de:ec:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2D:6F:19:8B:C0:B7:7B:59:BE:DF:F3:43:08:04:64:AA:6A:90:D1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NC1vGYvAt3tZvt_zQwgEZKpqkNE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.64.0/21
Signature Algorithm: sha256WithRSAEncryption
31:1a:18:dd:8f:7a:25:ab:8d:5b:8e:aa:5c:75:cc:be:a9:3f:
cb:10:e8:c8:d1:31:9b:46:da:ee:9a:6d:14:af:0d:82:8e:37:
84:95:65:0a:35:82:88:a5:ad:8e:73:da:e3:c7:59:12:47:59:
92:f6:af:26:2b:5d:2b:fe:35:71:1f:5d:8a:a7:49:0d:9a:d2:
46:9c:32:82:c8:06:e5:ec:24:78:6b:27:5c:ec:58:a9:7c:ca:
5c:9c:2f:04:94:87:a0:f4:ef:1c:0d:1b:b5:f0:26:97:18:1e:
e0:f7:8d:12:84:e6:16:b1:01:2e:64:00:24:2f:2f:0e:c4:9e:
3b:ca:7f:d8:f2:d3:29:83:fa:41:15:80:4d:a7:6b:e2:25:10:
1c:7d:40:0c:2e:6d:98:64:09:d2:85:d7:9b:1f:4e:d5:65:3b:
46:25:d7:2b:03:15:6b:a4:30:27:b5:44:82:d3:55:07:53:a2:
5c:6c:f3:eb:d2:49:0b:ea:a7:01:6f:2a:ca:93:42:1e:bb:7f:
26:56:1c:45:39:ac:5e:32:95:d4:6d:30:a2:de:c8:4d:72:c0:
25:2a:7b:df:20:56:3d:51:e4:f2:32:7b:28:a5:23:5e:f5:68:
74:77:a5:84:e1:69:bc:86:26:0f:93:30:3d:3a:90:21:a9:fc:
6e:63:0b:9a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ0MzhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDM0MkQ2RjE5OEJDMEI3
N0I1OUJFREZGMzQzMDgwNDY0QUE2QTkwRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpguzsBJLTxUxqWi2rpOvFl9oN5DGvD7XdJNLuc4K/bSvMQHEC
P9R0h/nzT38sQBN1KWBSNa2lG+Oe94UqdfE2ylhAo/E+TkvcnvwytyrOk247J8Td
3IFkrlXRKwOsWEbb5HeS4GUt8NCUFEOB68fA521/Jz//ghQHH3rrDQmg4SP1p9t+
hF7OE0veSQAJtVJQdnLIqMlmYk/+DOuUpLd7vBOck563CPD3OMI3/SCXl5941IUJ
S0bT2/IzE5W/ajchio5BArg2pGY7uAzabAKReWJZmkvMK5iOhLOWCADG3d3SV2LU
lrld9B376KTJy83XCxeuOapM+wf0zOXe7OpXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUNC1vGYvAt3tZvt/zQwgEZKpqkNEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05DMXZHWXZBdDN0WnZ0X3pR
d2dFWktwcWtORS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6EAwDQYJKoZIhvcNAQELBQADggEBADEaGN2PeiWrjVuOqlx1zL6pP8sQ6MjRMZtG
2u6abRSvDYKON4SVZQo1goilrY5z2uPHWRJHWZL2ryYrXSv+NXEfXYqnSQ2a0kac
MoLIBuXsJHhrJ1zsWKl8ylycLwSUh6D07xwNG7XwJpcYHuD3jRKE5haxAS5kACQv
Lw7EnjvKf9jy0ymD+kEVgE2na+IlEBx9QAwubZhkCdKF15sfTtVlO0Yl1ysDFWuk
MCe1RILTVQdTolxs8+vSSQvqpwFvKsqTQh67fyZWHEU5rF4yldRtMKLeyE1ywCUq
e98gVj1R5PIyeyilI171aHR3pYThabyGJg+TMD06kCGp/G5jC5o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org