Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QCMfdmj-V5XBFQnQ4DWzEYdiMus.roa
File: QCMfdmj-V5XBFQnQ4DWzEYdiMus.roa (raw, json)
Hash identifier: XPmDNPowxbXLsCcvYFGqOO1h6TGGAKasmApvs0sqxT4=
Subject key identifier: 40:23:1F:76:68:FE:57:95:C1:15:09:D0:E0:35:B3:11:87:62:32:EB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22DF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QCMfdmj-V5XBFQnQ4DWzEYdiMus.roa
Signing time: Fri 25 Nov 2022 04:41:45 +0000
ROA not before: Fri 25 Nov 2022 04:41:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.64.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8927 (0x22df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=40231F7668FE5795C11509D0E035B311876232EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:68:ad:04:19:d1:4c:1f:d9:3b:d6:6c:84:
44:d9:89:f0:37:ad:f7:5d:b4:e7:ed:80:9f:62:a4:
71:f0:47:c1:04:61:78:a7:a7:bc:6e:07:2e:93:77:
83:59:ba:77:ba:bf:13:bf:82:fd:ad:1d:aa:b7:17:
e0:41:62:e8:f6:b0:da:75:3a:24:f5:bb:8b:a8:82:
66:7a:6f:24:71:16:30:8a:67:be:86:f2:da:71:c7:
f0:d4:cc:2c:67:57:40:06:37:1b:86:24:82:d7:ed:
5f:0a:77:42:a3:c6:57:fa:3d:46:ed:b8:8c:c2:71:
47:ec:37:42:9a:7a:28:7d:d9:55:bf:91:40:0b:7b:
55:eb:80:ce:f0:36:53:ec:88:4a:3e:1f:03:44:7b:
27:30:c3:20:2f:16:21:df:5a:c2:5b:52:10:03:d2:
51:15:e0:30:b2:4f:0f:06:f4:a3:40:da:d8:bf:bc:
e0:f9:59:6d:83:f8:fd:93:c0:23:78:12:70:a8:50:
33:1e:5e:6a:6b:ea:2e:95:8c:c0:f2:2f:72:16:e3:
06:48:09:a0:d6:4c:dc:e8:7d:fb:8f:39:a1:78:9b:
7c:90:89:3b:06:ef:b3:83:3c:6f:03:91:d7:ce:da:
b1:65:dd:47:92:0d:cd:01:b9:fa:56:75:67:c0:ec:
ea:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:23:1F:76:68:FE:57:95:C1:15:09:D0:E0:35:B3:11:87:62:32:EB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QCMfdmj-V5XBFQnQ4DWzEYdiMus.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.64.0/21
Signature Algorithm: sha256WithRSAEncryption
67:80:cf:31:75:6a:ff:29:bf:de:67:2b:93:6e:9d:72:49:73:
cb:31:c0:91:ea:4a:4f:3a:41:77:db:f2:44:37:22:80:0c:a7:
7c:5c:b5:aa:2e:42:ac:52:92:08:bb:ba:96:10:51:28:09:13:
82:f2:5b:a7:8f:3a:4f:f1:b2:a9:58:1f:03:30:85:94:27:47:
88:9b:7e:19:fb:fb:d9:33:e3:a1:7a:e9:88:88:81:1e:2e:50:
71:a1:90:05:dc:70:26:e8:5b:de:07:2c:e0:97:d6:19:4d:a1:
6b:9c:c7:a0:d6:86:fe:23:b1:0a:ba:aa:25:37:73:61:0f:3d:
87:16:6d:2c:59:86:4f:37:31:25:f3:8a:bf:a3:1f:76:42:b0:
b3:2f:93:93:50:3a:73:30:4c:f6:59:77:d7:42:e6:02:20:9c:
49:99:bb:6e:9d:3c:44:2d:4a:73:33:0e:8b:2d:bf:ea:ef:e0:
83:e7:7a:10:76:6a:08:2e:05:ed:46:64:c7:cd:0e:f0:6d:8d:
2b:6d:d7:ee:ee:2f:df:81:75:06:ee:5d:4a:52:24:f8:2b:72:
bd:cd:c3:88:b7:8f:d8:0a:7a:57:5b:12:5c:b5:86:11:2f:3e:
72:6b:32:0b:79:b6:5b:92:39:58:2d:ea:57:6a:23:c4:e8:73:
27:df:a2:a9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIt8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxNDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQwMjMxRjc2NjhGRTU3
OTVDMTE1MDlEMEUwMzVCMzExODc2MjMyRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqV2itBBnRTB/ZO9ZshETZifA3rfddtOftgJ9ipHHwR8EEYXin
p7xuBy6Td4NZune6vxO/gv2tHaq3F+BBYuj2sNp1OiT1u4uogmZ6byRxFjCKZ76G
8tpxx/DUzCxnV0AGNxuGJILX7V8Kd0Kjxlf6PUbtuIzCcUfsN0Kaeih92VW/kUAL
e1XrgM7wNlPsiEo+HwNEeycwwyAvFiHfWsJbUhAD0lEV4DCyTw8G9KNA2ti/vOD5
WW2D+P2TwCN4EnCoUDMeXmpr6i6VjMDyL3IW4wZICaDWTNzoffuPOaF4m3yQiTsG
77ODPG8DkdfO2rFl3UeSDc0BufpWdWfA7OphAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUQCMfdmj+V5XBFQnQ4DWzEYdiMuswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FDTWZkbWotVjVYQkZRblE0
RFd6RVlkaU11cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6EAwDQYJKoZIhvcNAQELBQADggEBAGeAzzF1av8pv95nK5NunXJJc8sxwJHqSk86
QXfb8kQ3IoAMp3xctaouQqxSkgi7upYQUSgJE4LyW6ePOk/xsqlYHwMwhZQnR4ib
fhn7+9kz46F66YiIgR4uUHGhkAXccCboW94HLOCX1hlNoWucx6DWhv4jsQq6qiU3
c2EPPYcWbSxZhk83MSXzir+jH3ZCsLMvk5NQOnMwTPZZd9dC5gIgnEmZu26dPEQt
SnMzDostv+rv4IPnehB2agguBe1GZMfNDvBtjStt1+7uL9+BdQbuXUpSJPgrcr3N
w4i3j9gKeldbEly1hhEvPnJrMgt5tluSOVgt6ldqI8Tocyffoqk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:30 2024 by rpki-client on console-ams.rpki-client.org