Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NGxUuXegbnm1MhdnmMQBHKn6W00.roa
File: NGxUuXegbnm1MhdnmMQBHKn6W00.roa (raw, json)
Hash identifier: KZJkS7/JsPc5pmRvk1U55kkOwqPUPuVM0NplyqltASk=
Subject key identifier: 34:6C:54:B9:77:A0:6E:79:B5:32:17:67:98:C4:01:1C:A9:FA:5B:4D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1855
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NGxUuXegbnm1MhdnmMQBHKn6W00.roa
Signing time: Sun 07 Feb 2021 12:28:24 +0000
ROA not before: Sun 07 Feb 2021 12:28:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6229 (0x1855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:28:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=346C54B977A06E79B532176798C4011CA9FA5B4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:b2:73:23:e9:a9:99:92:a3:52:8c:6c:41:
35:a8:cc:5b:ea:2e:6a:cc:12:3d:9f:2e:9b:5e:e3:
2b:75:1c:60:69:24:72:d0:ba:ea:5c:33:b0:c0:59:
b1:b9:44:3f:14:e8:df:c7:66:68:59:f0:e6:de:04:
11:77:11:82:81:ef:41:d0:81:d1:3c:45:c4:f5:a5:
ec:0c:0b:e1:f1:8f:33:45:fd:03:fd:ea:22:be:0c:
71:63:2e:25:cb:a5:90:b9:2c:ee:cd:3b:07:ee:80:
34:1c:23:a4:a7:5f:52:d9:3d:93:99:87:a0:50:b9:
4c:63:d9:26:3c:0e:0b:c3:d7:94:b7:87:c1:0c:e6:
8e:7c:6f:65:69:22:e3:44:77:3f:81:ad:60:e9:bd:
41:b0:e0:9b:74:6e:f9:b8:06:39:d1:54:4c:fe:b4:
1e:fd:9c:b0:63:76:c1:17:7c:82:f7:3c:dd:34:68:
28:25:f3:96:37:af:db:46:71:24:d5:80:97:ac:2a:
ab:ab:67:08:b9:ab:f4:8d:59:90:ba:cd:76:1d:10:
53:44:01:33:05:ca:1d:9d:5b:75:d8:86:75:bd:89:
53:c8:98:e5:a7:71:26:d6:a9:ea:28:ac:57:46:b1:
9f:9d:11:6a:8b:24:e4:72:3c:df:d3:52:6f:db:1a:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6C:54:B9:77:A0:6E:79:B5:32:17:67:98:C4:01:1C:A9:FA:5B:4D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NGxUuXegbnm1MhdnmMQBHKn6W00.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.52.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:14:de:f5:ff:2a:35:27:7f:b9:86:db:72:81:24:d8:fa:04:
d6:53:4a:5b:21:41:71:12:42:e0:c8:74:39:f0:d2:aa:26:29:
00:82:93:9d:da:68:98:f3:1e:0d:63:22:11:20:a1:5a:d6:4a:
ee:01:34:2f:91:9e:37:8b:c7:44:c2:18:3f:0c:5b:2a:9f:cb:
56:75:e1:75:a2:8f:97:a2:73:9a:b4:ee:4a:e5:c6:20:72:74:
04:dc:80:1d:b8:c6:b9:8b:84:0e:8b:aa:3c:1e:08:8f:3f:93:
08:27:6e:c5:2b:71:04:59:80:97:a3:1c:fd:5a:95:1a:84:85:
29:17:f8:09:39:de:69:11:09:08:66:81:13:38:39:83:d9:3e:
4e:a4:ac:d1:46:ba:7f:03:2c:28:a5:42:12:e7:24:27:aa:ee:
59:46:7b:44:13:73:f3:5a:19:ca:f8:6b:ea:ca:f5:c7:bb:38:
37:92:90:1f:21:39:05:b6:a7:35:07:7b:46:0e:55:4b:55:a5:
97:23:93:7e:f0:bf:82:27:37:cb:3e:31:2c:fd:ac:e6:c7:91:
9b:67:34:f8:8c:dd:ac:c4:71:77:d3:5a:6b:c1:14:53:c0:be:
f7:23:ce:4e:05:59:94:27:13:1c:a3:17:28:49:e4:8d:7c:1e:
e6:da:9d:e9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGFUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjI4MjRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM0NkM1NEI5NzdBMDZF
NzlCNTMyMTc2Nzk4QzQwMTFDQTlGQTVCNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmxLJzI+mpmZKjUoxsQTWozFvqLmrMEj2fLpte4yt1HGBpJHLQ
uupcM7DAWbG5RD8U6N/HZmhZ8ObeBBF3EYKB70HQgdE8RcT1pewMC+HxjzNF/QP9
6iK+DHFjLiXLpZC5LO7NOwfugDQcI6SnX1LZPZOZh6BQuUxj2SY8DgvD15S3h8EM
5o58b2VpIuNEdz+BrWDpvUGw4Jt0bvm4BjnRVEz+tB79nLBjdsEXfIL3PN00aCgl
85Y3r9tGcSTVgJesKqurZwi5q/SNWZC6zXYdEFNEATMFyh2dW3XYhnW9iVPImOWn
cSbWqeoorFdGsZ+dEWqLJORyPN/TUm/bGg1DAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUNGxUuXegbnm1MhdnmMQBHKn6W00wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05HeFV1WGVnYm5tMU1oZG5t
TVFCSEtuNlcwMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6TQwDQYJKoZIhvcNAQELBQADggEBAC4U3vX/KjUnf7mG23KBJNj6BNZTSlshQXES
QuDIdDnw0qomKQCCk53aaJjzHg1jIhEgoVrWSu4BNC+RnjeLx0TCGD8MWyqfy1Z1
4XWij5eic5q07krlxiBydATcgB24xrmLhA6LqjweCI8/kwgnbsUrcQRZgJejHP1a
lRqEhSkX+Ak53mkRCQhmgRM4OYPZPk6krNFGun8DLCilQhLnJCeq7llGe0QTc/Na
Gcr4a+rK9ce7ODeSkB8hOQW2pzUHe0YOVUtVpZcjk37wv4InN8s+MSz9rObHkZtn
NPiM3azEcXfTWmvBFFPAvvcjzk4FWZQnExyjFyhJ5I18Hubanek=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:23 2025 by rpki-client