Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U2AYLp47SbTy-Gh0QvgETh-Hl5w.roa
File: U2AYLp47SbTy-Gh0QvgETh-Hl5w.roa (raw, json)
Hash identifier: +YtWJK0I7uQztmghrQaAyyvxnWcij/OstViLWHPy7oU=
Subject key identifier: 53:60:18:2E:9E:3B:49:B4:F2:F8:68:74:42:F8:04:4E:1F:87:97:9C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EF4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U2AYLp47SbTy-Gh0QvgETh-Hl5w.roa
Signing time: Tue 29 Sep 2020 09:56:20 +0000
ROA not before: Tue 29 Sep 2020 09:56:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3828 (0xef4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:20 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5360182E9E3B49B4F2F8687442F8044E1F87979C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:40:47:42:e2:cd:5a:80:4f:2e:de:60:34:
38:f1:a2:d2:81:17:81:a0:92:d6:38:7f:fa:a3:e2:
7e:cb:02:2f:a8:92:ad:e8:9c:46:58:23:54:38:ac:
1d:2c:3e:f6:b4:b0:ef:0a:0d:b0:fa:7e:bb:b8:d5:
95:4e:e1:d2:df:b1:41:39:69:70:cb:fe:32:14:ea:
a1:a5:3d:1d:ef:1a:da:b2:63:a8:95:10:51:d3:01:
2a:7b:eb:50:0f:f9:c5:61:2e:00:ef:dd:0b:31:9d:
59:4d:ac:5c:21:23:3e:ee:43:a3:91:66:41:19:34:
e9:a5:df:8a:85:74:b9:6a:e8:e5:a6:7b:3e:19:e2:
9d:df:e7:a9:9b:89:a9:8c:7f:f5:cd:61:00:8c:59:
58:27:90:20:f3:6c:1d:a8:48:eb:62:f5:36:be:6a:
c1:23:25:3b:d9:4a:97:cf:94:5d:47:4a:1a:4e:fa:
cf:f3:c3:7f:94:e8:64:cd:ea:e8:c9:b9:05:b6:31:
25:16:8e:a6:7d:e7:e4:e4:a1:f7:b2:ae:9a:28:d2:
67:d6:a3:e9:0b:11:0c:c1:de:aa:cb:0f:2f:33:cf:
27:0e:9a:1a:7b:a7:e4:53:95:ba:4b:20:0b:85:d4:
e1:4c:6b:87:34:8e:58:25:28:ad:b8:e7:5d:20:71:
cb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:60:18:2E:9E:3B:49:B4:F2:F8:68:74:42:F8:04:4E:1F:87:97:9C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U2AYLp47SbTy-Gh0QvgETh-Hl5w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.118.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c5:df:13:d7:7e:0d:c9:2a:65:8d:a1:f4:85:d2:70:94:a3:
6c:ac:c0:08:d9:ec:4e:d0:b9:5f:1c:02:27:fd:e8:00:67:8a:
fe:67:30:da:ee:f3:8a:e5:ff:15:2d:b5:9b:ef:ea:66:37:a5:
90:e5:59:9f:4d:16:7e:37:9b:af:18:ad:8a:39:1f:a0:c4:56:
9e:e9:01:34:3c:a8:d0:21:51:f8:27:6f:d9:87:06:23:d4:5f:
8d:4a:f4:fd:b0:c0:ed:5b:2f:e0:98:e3:92:ae:8c:30:61:69:
5e:6a:e2:88:a6:35:b1:0f:5e:ef:08:fc:43:03:cb:32:a1:87:
34:73:a6:4d:a8:40:cb:54:a1:79:40:19:ac:49:5d:05:c1:dd:
68:0d:77:1c:4e:99:e1:f6:fd:e4:64:eb:8d:3e:d7:0e:14:01:
3d:02:72:16:9a:a0:53:e9:ce:01:fc:3b:3c:ba:08:42:a8:9f:
e4:f6:1f:a1:8f:dd:4f:3c:c7:6c:b1:cb:8e:e0:04:72:52:dc:
eb:51:e1:6e:7c:9e:b1:f6:d3:89:94:c5:40:66:f5:19:27:29:
79:d8:36:bb:8f:3f:b6:01:44:ce:76:5c:52:b2:50:31:a1:04:
29:21:2e:28:93:43:6d:37:ee:e1:30:91:96:55:30:40:70:79:
8f:e8:a9:d4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDvQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MjBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDUzNjAxODJFOUUzQjQ5
QjRGMkY4Njg3NDQyRjgwNDRFMUY4Nzk3OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSwEBHQuLNWoBPLt5gNDjxotKBF4GgktY4f/qj4n7LAi+okq3o
nEZYI1Q4rB0sPva0sO8KDbD6fru41ZVO4dLfsUE5aXDL/jIU6qGlPR3vGtqyY6iV
EFHTASp761AP+cVhLgDv3QsxnVlNrFwhIz7uQ6ORZkEZNOml34qFdLlq6OWmez4Z
4p3f56mbiamMf/XNYQCMWVgnkCDzbB2oSOti9Ta+asEjJTvZSpfPlF1HShpO+s/z
w3+U6GTN6ujJuQW2MSUWjqZ95+Tkofeyrpoo0mfWo+kLEQzB3qrLDy8zzycOmhp7
p+RTlbpLIAuF1OFMa4c0jlglKK24510gccvLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUU2AYLp47SbTy+Gh0QvgETh+Hl5wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1UyQVlMcDQ3U2JUeS1HaDBR
dmdFVGgtSGw1dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2
6XYwDQYJKoZIhvcNAQELBQADggEBADzF3xPXfg3JKmWNofSF0nCUo2yswAjZ7E7Q
uV8cAif96ABniv5nMNru84rl/xUttZvv6mY3pZDlWZ9NFn43m68YrYo5H6DEVp7p
ATQ8qNAhUfgnb9mHBiPUX41K9P2wwO1bL+CY45KujDBhaV5q4oimNbEPXu8I/EMD
yzKhhzRzpk2oQMtUoXlAGaxJXQXB3WgNdxxOmeH2/eRk640+1w4UAT0CchaaoFPp
zgH8Ozy6CEKon+T2H6GP3U88x2yxy47gBHJS3OtR4W58nrH204mUxUBm9RknKXnY
NruPP7YBRM52XFKyUDGhBCkhLiiTQ2037uEwkZZVMEBweY/oqdQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org