Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OiHgFEcaG3pucsAVEH3P81YEj7w.roa
File: OiHgFEcaG3pucsAVEH3P81YEj7w.roa (raw, json)
Hash identifier: PzZk9mVDytyASx9/SZ9BqmAYVAbHC0PTaM9/FYHfiTY=
Subject key identifier: 3A:21:E0:14:47:1A:1B:7A:6E:72:C0:15:10:7D:CF:F3:56:04:8F:BC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F81
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OiHgFEcaG3pucsAVEH3P81YEj7w.roa
Signing time: Tue 29 Sep 2020 09:57:03 +0000
ROA not before: Tue 29 Sep 2020 09:57:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3969 (0xf81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:57:03 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3A21E014471A1B7A6E72C015107DCFF356048FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:60:08:58:f8:1d:2e:bb:c8:7d:d3:1e:a0:5e:
27:09:05:9e:5c:2f:a8:bb:cc:9b:6f:9c:62:22:5f:
00:f4:27:68:ad:b5:d1:09:6f:dc:10:fd:30:35:4f:
d5:3c:92:33:95:39:a6:a0:d5:3e:b0:42:29:85:6e:
e5:8f:a8:e9:78:91:81:8c:ae:5d:65:b4:da:b5:62:
ec:28:2f:9b:78:f9:39:e5:ce:50:1b:42:02:50:30:
07:11:d8:73:b4:02:5e:3a:e1:30:97:2f:ae:f7:48:
01:b3:e9:3f:50:fd:db:4b:96:fc:61:36:6b:08:ea:
97:3d:5e:00:48:95:24:c1:f9:14:29:54:83:3d:cd:
99:86:51:a6:b5:fb:62:fd:c5:43:62:55:3e:7a:74:
7f:db:b3:0c:9a:04:f8:74:05:0f:f5:85:75:a3:f2:
c3:e5:a7:bd:c0:4a:ef:4e:a5:f2:cd:da:f3:52:25:
1e:1c:82:c1:71:9f:e6:e1:14:d1:92:4a:d5:16:9c:
90:ff:d3:8b:1f:be:16:db:0c:a8:35:ea:d3:1e:9a:
d9:c8:a0:fc:f4:ab:63:4c:54:5e:19:8c:2b:f5:d2:
40:17:b7:10:5a:15:09:94:a3:ed:b8:63:60:a4:90:
84:fb:a0:46:b2:6c:78:1b:f4:99:4d:7e:41:2f:7e:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:21:E0:14:47:1A:1B:7A:6E:72:C0:15:10:7D:CF:F3:56:04:8F:BC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OiHgFEcaG3pucsAVEH3P81YEj7w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.48.0/22
Signature Algorithm: sha256WithRSAEncryption
90:fe:14:c8:22:01:af:ec:62:a4:54:18:6f:b3:1e:96:27:d8:
68:46:a5:66:ee:ef:56:26:43:d8:1f:bc:57:a1:fb:67:7b:64:
a7:75:73:ba:49:94:d3:ca:1b:04:b9:af:1e:50:b2:6b:db:f3:
da:98:46:ad:e0:2f:1d:c7:b6:b2:e1:df:c1:a4:67:8d:41:81:
1d:b8:4a:2f:fd:86:a5:d2:35:e2:3c:89:db:b9:3a:3e:6b:fb:
d3:9b:70:d9:3b:4b:43:c4:a9:fe:93:84:c1:31:da:3a:16:e3:
16:1e:3c:c8:0f:5d:a6:dc:24:6c:9d:40:62:89:db:c6:00:b5:
a4:06:f2:5d:2e:6c:67:ef:8f:f5:60:8c:3f:85:2a:f2:9c:f8:
86:78:86:1b:de:52:6c:a6:1c:e2:f9:e3:33:39:06:8d:d5:89:
bc:4a:91:17:2d:73:52:9d:d3:20:93:e3:c6:19:c4:e6:cf:d1:
19:0e:36:3b:8d:66:39:4f:c8:7e:51:9b:86:c3:ce:3a:4f:10:
a9:1c:9f:ee:1a:98:86:c3:9c:22:05:f2:9c:50:f9:9d:dd:1b:
54:7f:d5:a3:5b:43:82:a0:05:78:22:95:8c:09:30:15:61:4f:
1a:bc:5d:2b:27:c4:cd:83:6b:b8:8d:83:9b:38:cf:dc:06:81:
43:f1:ff:5b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD4EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU3MDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNBMjFFMDE0NDcxQTFC
N0E2RTcyQzAxNTEwN0RDRkYzNTYwNDhGQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDyYAhY+B0uu8h90x6gXicJBZ5cL6i7zJtvnGIiXwD0J2ittdEJ
b9wQ/TA1T9U8kjOVOaag1T6wQimFbuWPqOl4kYGMrl1ltNq1YuwoL5t4+TnlzlAb
QgJQMAcR2HO0Al464TCXL673SAGz6T9Q/dtLlvxhNmsI6pc9XgBIlSTB+RQpVIM9
zZmGUaa1+2L9xUNiVT56dH/bswyaBPh0BQ/1hXWj8sPlp73ASu9OpfLN2vNSJR4c
gsFxn+bhFNGSStUWnJD/04sfvhbbDKg16tMemtnIoPz0q2NMVF4ZjCv10kAXtxBa
FQmUo+24Y2CkkIT7oEaybHgb9JlNfkEvfnz1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUOiHgFEcaG3pucsAVEH3P81YEj7wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09pSGdGRWNhRzNwdWNzQVZF
SDNQODFZRWo3dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6DAwDQYJKoZIhvcNAQELBQADggEBAJD+FMgiAa/sYqRUGG+zHpYn2GhGpWbu71Ym
Q9gfvFeh+2d7ZKd1c7pJlNPKGwS5rx5Qsmvb89qYRq3gLx3HtrLh38GkZ41BgR24
Si/9hqXSNeI8idu5Oj5r+9ObcNk7S0PEqf6ThMEx2joW4xYePMgPXabcJGydQGKJ
28YAtaQG8l0ubGfvj/VgjD+FKvKc+IZ4hhveUmymHOL54zM5Bo3VibxKkRctc1Kd
0yCT48YZxObP0RkONjuNZjlPyH5Rm4bDzjpPEKkcn+4amIbDnCIF8pxQ+Z3dG1R/
1aNbQ4KgBXgilYwJMBVhTxq8XSsnxM2Da7iNg5s4z9wGgUPx/1s=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:45 2025 by rpki-client