Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WyJC6q-zXjExBpxDFJg9JmSPO9I.roa
File: WyJC6q-zXjExBpxDFJg9JmSPO9I.roa (raw, json)
Hash identifier: xHVIOg68hyEgXwaJfNEbZH6i5ryZxR1rCsScqVzUuJY=
Subject key identifier: 5B:22:42:EA:AF:B3:5E:31:31:06:9C:43:14:98:3D:26:64:8F:3B:D2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WyJC6q-zXjExBpxDFJg9JmSPO9I.roa
Signing time: Thu 15 Sep 2022 02:53:47 +0000
ROA not before: Thu 15 Sep 2022 02:53:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5B2242EAAFB35E3131069C4314983D26648F3BD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:43:22:7d:14:a9:77:e9:13:35:29:53:72:
4f:98:b0:5d:99:74:c3:fd:6b:23:8d:fc:26:28:37:
45:7f:18:a5:c1:80:7f:d9:a5:c8:79:64:53:35:11:
a7:e3:db:67:77:21:01:45:71:cc:d4:d5:fd:75:c2:
73:47:c0:79:91:9f:d8:49:fd:ac:56:45:85:81:31:
d3:3d:27:42:24:13:86:54:8d:98:6f:38:38:c5:83:
13:45:b1:cc:22:d7:08:39:cd:d6:30:96:dd:2a:f1:
44:ab:e9:b0:66:c1:ae:7c:78:d8:40:68:71:8b:12:
f3:d7:87:12:a4:4f:e9:19:6e:54:41:3c:33:58:a1:
26:82:29:06:7b:65:c0:a1:68:66:11:63:1d:26:17:
12:96:9a:c7:ba:c3:59:5b:5e:be:5d:70:10:cd:5e:
c9:70:6f:0f:76:6f:cb:c0:e8:6a:32:6a:46:89:7d:
3c:69:93:80:88:14:c2:d4:ae:e2:d6:03:6e:c0:2c:
db:6e:50:3a:34:69:04:27:15:38:18:47:e1:73:f5:
b5:39:d7:cc:a0:f3:ab:56:f0:c5:1d:78:fa:84:c6:
41:35:28:ac:aa:75:80:bd:d7:85:3f:76:2a:3d:6f:
9b:6a:c6:29:c3:1b:ad:0a:3e:7c:7d:31:02:5c:d4:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:22:42:EA:AF:B3:5E:31:31:06:9C:43:14:98:3D:26:64:8F:3B:D2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WyJC6q-zXjExBpxDFJg9JmSPO9I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.116.0/24
Signature Algorithm: sha256WithRSAEncryption
06:75:ee:fe:bf:7e:aa:78:6d:e7:37:c7:33:c1:2d:b7:f5:d3:
2c:6e:14:73:25:42:4a:ea:0d:41:ab:bb:b5:d9:08:bd:99:25:
df:a3:2c:03:e2:50:5e:24:a3:d1:88:cd:64:ba:d7:5e:79:ff:
63:c2:23:da:53:63:59:b0:29:49:4d:16:21:d9:95:67:60:06:
c9:e1:ab:ee:29:1e:de:6d:94:cc:88:35:5f:51:c2:c4:7a:b5:
ec:dd:4e:a0:3b:1b:51:bd:09:5c:50:c5:72:85:ae:3f:89:98:
da:44:dd:62:f0:0a:8a:4d:3a:f8:e5:d0:8b:c6:2a:23:51:56:
e4:60:d0:33:e6:b0:15:34:7b:b6:6c:10:ae:9e:b9:5d:96:ff:
4c:fb:78:a7:9d:cc:47:f9:0c:3e:0a:33:01:e0:68:0b:f8:5a:
26:38:7b:20:3e:1a:ab:14:cf:d2:bb:b3:70:f7:02:5f:67:9b:
65:c8:5e:c8:68:c4:2e:41:8e:fa:9f:48:96:5d:05:08:09:89:
0c:2a:3d:8b:ec:83:8e:40:06:26:5e:c2:71:21:16:47:4f:ac:
1f:f9:64:dc:9e:c5:70:a6:1b:8d:11:ca:d6:69:57:de:69:3a:
be:05:39:86:a1:96:fc:67:9d:f9:3d:9a:4a:c8:c1:39:2f:e1:
c0:33:ad:6b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzNDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVCMjI0MkVBQUZCMzVF
MzEzMTA2OUM0MzE0OTgzRDI2NjQ4RjNCRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzwUMifRSpd+kTNSlTck+YsF2ZdMP9ayON/CYoN0V/GKXBgH/Z
pch5ZFM1Eafj22d3IQFFcczU1f11wnNHwHmRn9hJ/axWRYWBMdM9J0IkE4ZUjZhv
ODjFgxNFscwi1wg5zdYwlt0q8USr6bBmwa58eNhAaHGLEvPXhxKkT+kZblRBPDNY
oSaCKQZ7ZcChaGYRYx0mFxKWmse6w1lbXr5dcBDNXslwbw92b8vA6GoyakaJfTxp
k4CIFMLUruLWA27ALNtuUDo0aQQnFTgYR+Fz9bU518yg86tW8MUdePqExkE1KKyq
dYC914U/dio9b5tqxinDG60KPnx9MQJc1MInAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWyJC6q+zXjExBpxDFJg9JmSPO9IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1d5SkM2cS16WGpFeEJweERG
Smc5Sm1TUE85SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
THQwDQYJKoZIhvcNAQELBQADggEBAAZ17v6/fqp4bec3xzPBLbf10yxuFHMlQkrq
DUGru7XZCL2ZJd+jLAPiUF4ko9GIzWS61155/2PCI9pTY1mwKUlNFiHZlWdgBsnh
q+4pHt5tlMyINV9RwsR6tezdTqA7G1G9CVxQxXKFrj+JmNpE3WLwCopNOvjl0IvG
KiNRVuRg0DPmsBU0e7ZsEK6euV2W/0z7eKedzEf5DD4KMwHgaAv4WiY4eyA+GqsU
z9K7s3D3Al9nm2XIXshoxC5BjvqfSJZdBQgJiQwqPYvsg45ABiZewnEhFkdPrB/5
ZNyexXCmG40RytZpV95pOr4FOYahlvxnnfk9mkrIwTkv4cAzrWs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org