Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VYT9439DuZv3ABFNWrKRytQ65uQ.roa
File: VYT9439DuZv3ABFNWrKRytQ65uQ.roa (raw, json)
Hash identifier: huXTfEX+B09ecv0sZFv0PZhGtWoTZ2mPlxCPQM1N6SQ=
Subject key identifier: 55:84:FD:E3:7F:43:B9:9B:F7:00:11:4D:5A:B2:91:CA:D4:3A:E6:E4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VYT9439DuZv3ABFNWrKRytQ65uQ.roa
Signing time: Tue 29 Sep 2020 09:55:59 +0000
ROA not before: Tue 29 Sep 2020 09:55:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3746 (0xea2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:59 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5584FDE37F43B99BF700114D5AB291CAD43AE6E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:2e:c6:54:71:ce:e3:2e:16:7d:3f:9a:38:
86:22:72:e5:9e:77:9b:1d:43:44:94:55:14:eb:3a:
2b:6a:35:9e:08:62:32:c7:e9:f6:a6:52:d9:05:9f:
85:93:2e:23:a8:c2:8f:14:db:5d:5e:aa:5c:d9:dd:
79:49:bb:d8:05:99:c2:ee:f2:40:a5:47:df:d0:8d:
47:ff:1f:68:99:f0:dc:ef:9a:c2:32:8a:e3:12:f3:
1f:2d:28:cb:8f:8d:0a:f4:1a:d0:44:d7:02:c2:68:
fc:19:73:a6:f0:b4:aa:5f:fc:44:49:9c:24:be:3d:
c2:05:0d:8b:11:2c:f1:e4:a3:c4:d0:11:f3:b3:12:
fc:fd:b2:55:89:d4:1d:d5:a8:10:20:3d:10:f0:e3:
f7:e5:31:b1:a6:51:9b:4d:89:8c:94:74:e2:b0:7a:
5f:ae:b8:49:d7:a9:f9:68:9e:7e:62:67:65:12:7a:
90:e5:75:68:2c:96:5c:4a:ae:c7:5f:80:23:a2:b6:
b3:a3:8c:bd:0b:6c:3e:0f:de:2d:f6:1b:2c:63:5a:
93:30:ba:5a:81:d2:aa:65:02:8b:ae:71:53:f8:cd:
a2:0e:30:30:1c:73:e8:ac:8d:a9:13:1f:e4:7b:5f:
dd:27:66:a0:76:15:b9:71:69:dc:52:38:98:e7:86:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:84:FD:E3:7F:43:B9:9B:F7:00:11:4D:5A:B2:91:CA:D4:3A:E6:E4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VYT9439DuZv3ABFNWrKRytQ65uQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.224.0/22
Signature Algorithm: sha256WithRSAEncryption
96:5e:d9:96:fa:22:6b:31:cf:de:0f:22:09:e5:30:28:53:5b:
67:db:d4:b7:cf:35:8a:1a:31:27:bb:43:43:25:9d:29:93:3e:
5b:77:a7:90:71:71:51:33:2c:2b:10:2a:05:52:ad:af:6f:1e:
ec:4c:d4:c7:2c:e4:55:bf:1a:63:4b:06:df:f4:32:de:f0:ec:
26:59:c0:a4:71:1f:b3:25:30:84:49:83:e2:3b:4f:1f:6f:f7:
70:68:4d:d0:f8:5a:17:d6:40:28:c9:a1:39:e2:e8:a9:ef:02:
96:f5:62:07:4b:fc:04:9f:15:f2:f9:dd:cd:81:e7:ec:8c:ed:
10:ea:85:dd:dc:d8:61:a0:8a:c0:70:a5:ba:d5:d7:4f:67:df:
5e:ee:66:b9:41:e9:0f:91:0e:44:75:dc:32:f9:7f:f8:8b:8f:
fb:64:ea:73:01:f6:a9:b2:88:53:41:fc:b5:1c:e8:3e:b3:7a:
ed:c5:21:17:28:53:63:c0:05:60:d2:65:a3:ea:6f:5a:45:06:
83:c2:de:c1:bf:39:18:02:81:6a:8b:81:6e:44:5c:39:2d:73:
8c:40:25:cc:92:bb:88:b3:d8:a7:f7:71:7a:72:e6:2f:77:b5:
63:51:f0:5b:d2:75:5a:3d:1a:3e:fe:0c:22:46:c2:b6:14:3f:
d4:f5:71:cc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDqIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1NTlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU1ODRGREUzN0Y0M0I5
OUJGNzAwMTE0RDVBQjI5MUNBRDQzQUU2RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSLy7GVHHO4y4WfT+aOIYicuWed5sdQ0SUVRTrOitqNZ4IYjLH
6famUtkFn4WTLiOowo8U211eqlzZ3XlJu9gFmcLu8kClR9/QjUf/H2iZ8NzvmsIy
iuMS8x8tKMuPjQr0GtBE1wLCaPwZc6bwtKpf/ERJnCS+PcIFDYsRLPHko8TQEfOz
Evz9slWJ1B3VqBAgPRDw4/flMbGmUZtNiYyUdOKwel+uuEnXqflonn5iZ2USepDl
dWgsllxKrsdfgCOitrOjjL0LbD4P3i32GyxjWpMwulqB0qplAouucVP4zaIOMDAc
c+isjakTH+R7X90nZqB2FblxadxSOJjnhqbLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVYT9439DuZv3ABFNWrKRytQ65uQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZZVDk0MzlEdVp2M0FCRk5X
cktSeXRRNjV1US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6eAwDQYJKoZIhvcNAQELBQADggEBAJZe2Zb6Imsxz94PIgnlMChTW2fb1LfPNYoa
MSe7Q0MlnSmTPlt3p5BxcVEzLCsQKgVSra9vHuxM1Mcs5FW/GmNLBt/0Mt7w7CZZ
wKRxH7MlMIRJg+I7Tx9v93BoTdD4WhfWQCjJoTni6KnvApb1YgdL/ASfFfL53c2B
5+yM7RDqhd3c2GGgisBwpbrV109n317uZrlB6Q+RDkR13DL5f/iLj/tk6nMB9qmy
iFNB/LUc6D6zeu3FIRcoU2PABWDSZaPqb1pFBoPC3sG/ORgCgWqLgW5EXDktc4xA
JcySu4iz2Kf3cXpy5i93tWNR8FvSdVo9Gj7+DCJGwrYUP9T1ccw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org