Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PWvmsv3mjxpVl1QrwDttzT52q6I.roa
File: PWvmsv3mjxpVl1QrwDttzT52q6I.roa (raw, json)
Hash identifier: 1GeeUIwEuCmqL4TFqBXbQopllDnLFqAlcAFxPwuhfsE=
Subject key identifier: 3D:6B:E6:B2:FD:E6:8F:1A:55:97:54:2B:C0:3B:6D:CD:3E:76:AB:A2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15AB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PWvmsv3mjxpVl1QrwDttzT52q6I.roa
Signing time: Sun 07 Feb 2021 12:05:52 +0000
ROA not before: Sun 07 Feb 2021 12:05:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.122.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5547 (0x15ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:05:52 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3D6BE6B2FDE68F1A5597542BC03B6DCD3E76ABA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:da:ca:4a:fa:e9:ef:1f:3d:4e:82:62:b9:
93:c3:54:40:ae:ab:75:93:40:bb:3a:67:2c:c5:d5:
4e:7c:e9:7f:45:22:ec:c8:63:06:b2:e1:7f:e2:88:
16:2c:61:27:0e:18:0b:84:c1:86:06:fd:89:cc:40:
fc:99:f0:b8:53:91:68:37:0a:7a:4a:40:e6:3f:61:
e1:ec:60:d4:e0:7e:f3:65:51:54:23:dc:a1:fc:dd:
55:39:eb:23:a7:2f:57:0b:00:3d:0a:35:6b:1e:33:
74:22:d2:7b:c6:f1:41:a6:4a:02:be:dd:42:3c:0a:
0d:83:d3:f3:26:91:27:de:46:ab:52:d2:09:97:64:
4d:3c:72:57:07:d8:30:53:32:77:23:57:db:5a:7c:
c5:32:e6:c8:30:66:3c:ec:51:67:e3:1c:49:2a:62:
08:59:ca:6c:70:39:80:90:d3:2a:5f:ac:b9:11:aa:
5c:01:79:4d:2b:01:59:fc:8e:f3:b0:bb:60:38:fb:
b5:62:ae:bc:35:97:16:13:c3:06:a3:c0:69:10:aa:
6d:26:4a:a7:fa:1f:cc:48:ec:8c:75:b6:af:c6:9e:
4d:7b:76:ca:43:97:97:70:3b:63:fb:6c:47:be:f7:
a2:55:e8:93:88:70:e5:87:4a:51:6b:19:21:83:bb:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6B:E6:B2:FD:E6:8F:1A:55:97:54:2B:C0:3B:6D:CD:3E:76:AB:A2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PWvmsv3mjxpVl1QrwDttzT52q6I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.122.0/23
Signature Algorithm: sha256WithRSAEncryption
34:2f:8a:d8:33:a9:6e:97:00:7f:1b:c1:e5:79:2d:45:e7:7f:
f0:11:8c:11:a0:55:a4:09:68:82:22:a7:67:22:0c:db:09:46:
59:e7:87:f0:52:17:20:21:ca:e1:79:ab:d1:1d:c1:23:12:f8:
f6:b4:a8:a7:c9:90:4b:38:89:9c:a7:3e:91:cc:77:21:b3:25:
c5:2d:f6:3b:e1:3c:ee:75:e8:0c:59:e4:7a:ec:e6:ae:33:29:
c9:a2:b7:a4:a8:ab:c3:f4:94:a6:0f:25:17:89:bb:60:7e:b9:
16:1e:91:b6:60:74:43:7e:17:d0:7b:f1:5b:0e:0b:fd:64:19:
53:cc:4e:ba:e3:b4:71:a2:8e:12:55:4c:df:55:4b:34:b6:9d:
a4:06:4d:c1:b9:36:ef:ae:c6:6a:19:66:84:4f:a0:97:e7:1b:
f3:68:0c:04:ce:99:36:56:01:f5:c4:be:bf:c7:80:7d:f2:d3:
63:2e:96:bd:2e:3e:64:db:bd:12:5d:28:a0:41:87:1d:53:bc:
37:55:9a:75:f7:ec:89:02:99:4b:eb:9c:f9:82:20:4c:de:eb:
4e:8b:fa:b6:a7:4e:77:a2:d4:96:66:e8:14:0c:f2:bb:55:ba:
82:37:58:ce:6c:56:bd:46:63:33:43:35:ad:7b:6e:9c:e5:c9:
cb:63:b9:bc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFaswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjA1NTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNENkJFNkIyRkRFNjhG
MUE1NTk3NTQyQkMwM0I2RENEM0U3NkFCQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgbNrKSvrp7x89ToJiuZPDVECuq3WTQLs6ZyzF1U586X9FIuzI
Yway4X/iiBYsYScOGAuEwYYG/YnMQPyZ8LhTkWg3CnpKQOY/YeHsYNTgfvNlUVQj
3KH83VU56yOnL1cLAD0KNWseM3Qi0nvG8UGmSgK+3UI8Cg2D0/MmkSfeRqtS0gmX
ZE08clcH2DBTMncjV9tafMUy5sgwZjzsUWfjHEkqYghZymxwOYCQ0ypfrLkRqlwB
eU0rAVn8jvOwu2A4+7Virrw1lxYTwwajwGkQqm0mSqf6H8xI7Ix1tq/Gnk17dspD
l5dwO2P7bEe+96JV6JOIcOWHSlFrGSGDu+8bAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPWvmsv3mjxpVl1QrwDttzT52q6IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BXdm1zdjNtanhwVmwxUXJ3
RHR0elQ1MnE2SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2
6XowDQYJKoZIhvcNAQELBQADggEBADQvitgzqW6XAH8bweV5LUXnf/ARjBGgVaQJ
aIIip2ciDNsJRlnnh/BSFyAhyuF5q9EdwSMS+Pa0qKfJkEs4iZynPpHMdyGzJcUt
9jvhPO516AxZ5Hrs5q4zKcmit6Soq8P0lKYPJReJu2B+uRYekbZgdEN+F9B78VsO
C/1kGVPMTrrjtHGijhJVTN9VSzS2naQGTcG5Nu+uxmoZZoRPoJfnG/NoDATOmTZW
AfXEvr/HgH3y02Mulr0uPmTbvRJdKKBBhx1TvDdVmnX37IkCmUvrnPmCIEze606L
+ranTnei1JZm6BQM8rtVuoI3WM5sVr1GYzNDNa17bpzlyctjubw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org