Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TY0SC1wrP8h7isKXD4pMHFLqIf4.roa
File: TY0SC1wrP8h7isKXD4pMHFLqIf4.roa (raw, json)
Hash identifier: K4M4bRZX8lHlLF+xH388vAD8B1cU/QZrqsGtesJUY4M=
Subject key identifier: 4D:8D:12:0B:5C:2B:3F:C8:7B:8A:C2:97:0F:8A:4C:1C:52:EA:21:FE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D59
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TY0SC1wrP8h7isKXD4pMHFLqIf4.roa
Signing time: Tue 29 Sep 2020 09:54:28 +0000
ROA not before: Tue 29 Sep 2020 09:54:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3417 (0xd59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4D8D120B5C2B3FC87B8AC2970F8A4C1C52EA21FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:41:b8:18:54:07:56:e7:6a:1b:e1:de:61:
f1:8b:6c:5d:93:f5:f0:d1:71:cf:1b:d3:2b:f4:cc:
17:08:25:c6:36:d8:61:34:b3:d6:27:48:4b:0c:32:
4f:6d:b8:9d:3b:03:f1:53:53:c0:c2:89:d4:a0:f1:
8a:bf:2c:32:29:e7:2e:be:3c:38:3c:03:e7:5e:94:
27:8b:97:22:59:2e:6e:4c:db:a6:7b:3b:16:82:7b:
5a:81:9d:8d:1a:66:e1:0f:9f:d1:93:da:6f:2a:bd:
b8:03:a7:4a:0f:ab:98:c6:8c:39:6d:cb:83:42:34:
3e:c9:0e:83:aa:34:02:05:aa:e5:2b:a7:cb:58:88:
2e:c7:03:60:6d:d1:e0:8b:4f:e3:c0:03:5a:22:6a:
f1:9e:f5:dd:a2:6b:e0:93:4d:27:08:60:c7:74:08:
75:65:6a:f4:d8:9a:7a:d5:82:1b:81:08:f3:93:16:
af:e2:1a:21:53:df:09:fa:57:b9:d4:83:72:6d:c5:
fe:05:60:05:87:ec:d7:c7:7a:29:43:9a:ec:cb:8d:
9e:15:e0:43:fc:fb:22:3a:1a:0e:a9:68:20:a7:af:
6c:12:89:16:13:36:f5:95:a8:b3:db:e6:08:d5:80:
26:88:35:49:22:30:95:c8:a6:fd:d5:23:46:43:54:
e6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8D:12:0B:5C:2B:3F:C8:7B:8A:C2:97:0F:8A:4C:1C:52:EA:21:FE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TY0SC1wrP8h7isKXD4pMHFLqIf4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.12.0/22
Signature Algorithm: sha256WithRSAEncryption
56:dd:de:12:45:9d:d2:0e:db:d4:50:86:08:5e:ee:ae:9e:b0:
7e:bf:1a:de:a9:f7:a3:7f:01:ba:85:af:07:7f:ce:42:3a:0a:
a4:63:e2:51:ac:be:df:81:e6:73:a9:b6:7b:4b:06:61:12:f7:
77:2c:b9:3a:fb:77:72:0b:03:af:15:6e:95:15:d4:db:a1:12:
0c:96:9e:fd:3d:f6:92:f6:1d:4d:eb:3f:99:6f:57:87:c5:1b:
40:87:75:a3:14:69:37:46:68:11:39:d5:ee:85:e4:6b:5d:1d:
a9:af:d0:a9:3d:6f:de:5e:d9:e1:54:ba:21:18:a0:e4:ae:ac:
5f:7b:84:88:05:d6:e3:16:73:1a:67:f4:cc:1b:4c:66:6d:b5:
27:46:24:a5:54:bc:a8:85:9c:7d:08:a2:e3:c8:fa:ed:d7:49:
82:7e:31:ef:26:f9:58:16:b5:99:17:64:9b:09:23:c5:2c:7c:
e5:12:c1:0e:e7:7c:ce:ef:c5:f0:cd:4e:f3:81:8c:62:b2:1b:
23:0d:f9:22:af:33:f2:4e:03:6f:eb:5f:31:20:3e:6b:1c:18:
3c:12:9b:2c:59:07:6d:8b:d0:ba:fc:64:31:99:b5:21:bb:c3:
88:f5:31:71:bb:ae:96:5d:21:36:47:68:56:98:e1:df:46:98:
32:75:f2:39
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDVkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0MjhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDREOEQxMjBCNUMyQjNG
Qzg3QjhBQzI5NzBGOEE0QzFDNTJFQTIxRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrQkG4GFQHVudqG+HeYfGLbF2T9fDRcc8b0yv0zBcIJcY22GE0
s9YnSEsMMk9tuJ07A/FTU8DCidSg8Yq/LDIp5y6+PDg8A+delCeLlyJZLm5M26Z7
OxaCe1qBnY0aZuEPn9GT2m8qvbgDp0oPq5jGjDlty4NCND7JDoOqNAIFquUrp8tY
iC7HA2Bt0eCLT+PAA1oiavGe9d2ia+CTTScIYMd0CHVlavTYmnrVghuBCPOTFq/i
GiFT3wn6V7nUg3Jtxf4FYAWH7NfHeilDmuzLjZ4V4EP8+yI6Gg6paCCnr2wSiRYT
NvWVqLPb5gjVgCaINUkiMJXIpv3VI0ZDVOYlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUTY0SC1wrP8h7isKXD4pMHFLqIf4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RZMFNDMXdyUDhoN2lzS1hE
NHBNSEZMcUlmNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6AwwDQYJKoZIhvcNAQELBQADggEBAFbd3hJFndIO29RQhghe7q6esH6/Gt6p96N/
AbqFrwd/zkI6CqRj4lGsvt+B5nOptntLBmES93csuTr7d3ILA68VbpUV1NuhEgyW
nv099pL2HU3rP5lvV4fFG0CHdaMUaTdGaBE51e6F5GtdHamv0Kk9b95e2eFUuiEY
oOSurF97hIgF1uMWcxpn9MwbTGZttSdGJKVUvKiFnH0IouPI+u3XSYJ+Me8m+VgW
tZkXZJsJI8UsfOUSwQ7nfM7vxfDNTvOBjGKyGyMN+SKvM/JOA2/rXzEgPmscGDwS
myxZB22L0Lr8ZDGZtSG7w4j1MXG7rpZdITZHaFaY4d9GmDJ18jk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org