Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WbPJJjiWt_wwfR3St2nbOprGaos.roa
File: WbPJJjiWt_wwfR3St2nbOprGaos.roa (raw, json)
Hash identifier: B/KL3QTbdKhCHj1kJ7X87qfvKqf8XkXceTc7PTYLv0w=
Subject key identifier: 59:B3:C9:26:38:96:B7:FC:30:7D:1D:D2:B7:69:DB:3A:9A:C6:6A:8B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1939
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WbPJJjiWt_wwfR3St2nbOprGaos.roa
Signing time: Sun 07 Feb 2021 13:06:44 +0000
ROA not before: Sun 07 Feb 2021 13:06:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6457 (0x1939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 13:06:44 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=59B3C9263896B7FC307D1DD2B769DB3A9AC66A8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:34:12:b3:91:3e:ff:c5:5d:7f:83:96:0b:7d:
21:22:37:ed:f6:81:d0:41:91:94:77:77:51:1d:37:
34:20:37:00:4e:7c:20:0d:06:7f:9b:5b:c3:af:a9:
e9:9c:79:e3:b7:19:aa:9a:68:16:cc:bc:91:ba:57:
5f:96:63:d6:94:ae:5a:3e:17:96:ac:f9:2d:1e:b5:
dc:9a:47:18:bf:02:c8:2d:63:23:c7:19:c2:15:85:
b0:1c:3b:67:91:c8:d9:0f:2d:f5:c7:1b:66:d8:f1:
b9:90:95:4a:41:28:3c:d4:1d:0d:c6:7a:d0:84:67:
3e:1b:a6:4d:f5:1a:b6:4d:9a:f8:9e:8d:f7:65:7e:
2f:0a:b5:2f:01:93:f2:75:f0:70:2a:43:a0:54:55:
96:27:63:3f:b7:75:04:49:a2:8d:38:f3:ea:22:67:
31:3b:63:72:e8:01:7b:70:45:34:6c:3b:a2:98:87:
da:2d:16:89:43:71:98:f7:17:93:d9:27:84:06:04:
fc:cc:b1:92:c7:f2:d4:03:73:67:44:08:49:06:af:
48:bf:d1:17:36:d3:c5:2d:fd:5b:36:1c:6c:f4:54:
72:b3:3b:ce:72:57:2c:aa:e7:dd:ac:4b:66:53:3f:
3d:56:71:de:0e:7d:6e:3a:de:34:5a:38:dc:2c:38:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B3:C9:26:38:96:B7:FC:30:7D:1D:D2:B7:69:DB:3A:9A:C6:6A:8B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WbPJJjiWt_wwfR3St2nbOprGaos.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.220.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:70:fa:db:79:2f:06:c9:57:33:69:eb:68:0f:e3:e0:74:9f:
05:51:61:a0:a6:01:9e:0c:fd:c6:3c:52:cb:4f:fb:d9:e7:67:
81:a6:29:d0:ed:b9:91:bd:f5:61:f5:7d:b3:1a:61:1a:b4:a0:
99:b8:82:3a:e0:f1:b2:32:a3:52:cd:93:d6:fc:be:b9:ee:44:
5a:7d:48:3e:c3:ac:e6:04:42:fc:19:fd:08:e3:4b:d7:fe:c7:
a3:3b:9d:c3:d6:63:b6:81:8d:55:22:e6:6b:4b:c2:7f:4b:69:
e3:58:78:47:59:aa:4a:89:9d:ce:7c:82:89:1b:81:b6:de:3c:
3d:55:c9:2e:fe:34:59:17:83:84:df:74:5c:16:c5:3a:15:0e:
85:eb:f9:a3:dd:bb:42:d8:40:8a:3c:1d:16:fc:86:6e:3a:41:
d1:d4:bf:12:6f:d8:d3:4a:55:1a:f9:90:63:9f:3e:35:80:62:
9c:9e:33:03:5c:1e:64:6a:3a:d4:dc:42:00:11:34:43:32:d3:
4f:ca:9a:65:af:c3:a5:15:2e:2c:59:89:63:d9:65:ad:62:97:
fc:57:59:90:9e:83:a6:44:f5:70:7e:6f:9f:13:bd:61:45:25:
2c:89:4d:d2:e8:28:80:e1:0d:c5:07:bc:43:46:62:0c:c2:70:
e5:29:cb:90
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGTkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MzA2NDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU5QjNDOTI2Mzg5NkI3
RkMzMDdEMUREMkI3NjlEQjNBOUFDNjZBOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZNBKzkT7/xV1/g5YLfSEiN+32gdBBkZR3d1EdNzQgNwBOfCAN
Bn+bW8OvqemceeO3GaqaaBbMvJG6V1+WY9aUrlo+F5as+S0etdyaRxi/AsgtYyPH
GcIVhbAcO2eRyNkPLfXHG2bY8bmQlUpBKDzUHQ3GetCEZz4bpk31GrZNmviejfdl
fi8KtS8Bk/J18HAqQ6BUVZYnYz+3dQRJoo048+oiZzE7Y3LoAXtwRTRsO6KYh9ot
FolDcZj3F5PZJ4QGBPzMsZLH8tQDc2dECEkGr0i/0Rc208Ut/Vs2HGz0VHKzO85y
Vyyq592sS2ZTPz1Wcd4OfW463jRaONwsOLDrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWbPJJjiWt/wwfR3St2nbOprGaoswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1diUEpKamlXdF93d2ZSM1N0
Mm5iT3ByR2Fvcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6NwwDQYJKoZIhvcNAQELBQADggEBALVw+tt5LwbJVzNp62gP4+B0nwVRYaCmAZ4M
/cY8UstP+9nnZ4GmKdDtuZG99WH1fbMaYRq0oJm4gjrg8bIyo1LNk9b8vrnuRFp9
SD7DrOYEQvwZ/QjjS9f+x6M7ncPWY7aBjVUi5mtLwn9LaeNYeEdZqkqJnc58gokb
gbbePD1VyS7+NFkXg4TfdFwWxToVDoXr+aPdu0LYQIo8HRb8hm46QdHUvxJv2NNK
VRr5kGOfPjWAYpyeMwNcHmRqOtTcQgARNEMy00/KmmWvw6UVLixZiWPZZa1il/xX
WZCeg6ZE9XB+b58TvWFFJSyJTdLoKIDhDcUHvENGYgzCcOUpy5A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org