Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XJAWihxHUZw0GvT3xhXeep8c6kA.roa
File: XJAWihxHUZw0GvT3xhXeep8c6kA.roa (raw, json)
Hash identifier: GoD10Q28BhsBOaD2zpF+sfH3wRkQQhv3548AR9P0i9M=
Subject key identifier: 5C:90:16:8A:1C:47:51:9C:34:1A:F4:F7:C6:15:DE:7A:9F:1C:EA:40
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21BB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XJAWihxHUZw0GvT3xhXeep8c6kA.roa
Signing time: Fri 25 Nov 2022 04:40:20 +0000
ROA not before: Fri 25 Nov 2022 04:40:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8635 (0x21bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5C90168A1C47519C341AF4F7C615DE7A9F1CEA40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:cf:4a:b1:fd:7b:16:af:db:e3:29:09:1d:
17:32:ae:a7:8f:97:53:2f:15:a5:12:74:13:28:c0:
48:4a:43:af:86:8a:d3:92:24:f6:4b:f1:7b:07:26:
96:25:37:60:97:61:a6:54:0b:c6:de:1e:97:0f:43:
2a:f1:1b:02:48:d7:d4:2f:49:6c:db:b8:2e:81:7b:
eb:f1:62:fb:37:26:00:4d:92:df:8c:cc:ce:67:f5:
39:d8:05:d7:30:fa:be:35:01:95:58:66:ce:ba:79:
59:d4:96:99:c3:f5:40:d7:ec:91:be:2c:da:6a:d8:
d8:4e:cd:f7:f2:aa:09:82:2b:b5:b0:0d:39:79:00:
92:39:22:0f:18:6c:26:4d:06:45:7a:cd:cf:c7:44:
0a:66:2f:f2:32:f9:4e:8f:64:62:f1:91:ee:dc:43:
26:df:4f:e6:82:05:94:61:aa:bf:b1:73:c3:86:d7:
84:86:88:61:4a:aa:89:36:60:22:de:30:2d:1e:9c:
73:45:8f:54:f6:25:fc:ea:e8:03:cd:5e:fb:d1:90:
a4:10:8a:b1:90:e7:e7:e4:7e:7a:da:bc:10:f5:bf:
9a:3a:d4:7a:53:23:4b:8f:8d:ec:5c:07:38:65:24:
1e:c3:70:49:c2:dd:72:24:22:fb:ef:79:49:a7:32:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:90:16:8A:1C:47:51:9C:34:1A:F4:F7:C6:15:DE:7A:9F:1C:EA:40
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XJAWihxHUZw0GvT3xhXeep8c6kA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.80.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:f8:82:ed:ef:0d:a4:a3:1b:75:66:37:0b:b1:f3:94:7b:c5:
46:41:89:68:b8:90:7c:3c:2d:77:9c:5b:5b:c6:e4:4e:4c:95:
db:39:a9:23:b8:4e:25:07:24:e5:34:1b:d3:72:ab:61:bd:13:
d4:2c:ed:58:b6:a1:b9:16:8f:d1:c4:12:58:1d:55:07:4d:60:
3f:9a:c9:88:00:03:20:93:86:02:7a:74:b7:23:a9:ca:f6:7b:
fe:36:e1:f8:e7:0d:a8:57:36:4b:df:44:09:23:6d:2f:18:96:
46:bb:f8:36:14:4b:ec:cc:45:62:79:14:b4:aa:5d:b3:49:65:
de:d2:30:e2:de:d4:a0:ef:9d:85:8e:13:3d:81:f8:33:d7:f5:
53:a8:48:e5:de:d6:86:bc:cf:c8:7f:88:44:8b:54:88:34:59:
ad:97:11:0c:ce:fb:bb:bc:7c:0d:82:5c:16:31:08:6d:26:74:
43:c7:45:2e:73:61:75:7d:84:5b:fb:7f:63:c1:c4:a6:f2:08:
dd:49:07:2f:19:11:56:cf:df:2f:58:63:1c:29:4b:a2:25:80:
a1:3d:bb:28:52:8e:b0:ca:f3:ab:0b:71:67:0f:27:2f:03:cf:
04:d4:ca:f5:77:00:18:f5:0d:45:76:39:c1:0f:0f:6c:d1:ba:
1c:3a:80:02
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIbswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMjBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVDOTAxNjhBMUM0NzUx
OUMzNDFBRjRGN0M2MTVERTdBOUYxQ0VBNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrXc9Ksf17Fq/b4ykJHRcyrqePl1MvFaUSdBMowEhKQ6+GitOS
JPZL8XsHJpYlN2CXYaZUC8beHpcPQyrxGwJI19QvSWzbuC6Be+vxYvs3JgBNkt+M
zM5n9TnYBdcw+r41AZVYZs66eVnUlpnD9UDX7JG+LNpq2NhOzffyqgmCK7WwDTl5
AJI5Ig8YbCZNBkV6zc/HRApmL/Iy+U6PZGLxke7cQybfT+aCBZRhqr+xc8OG14SG
iGFKqok2YCLeMC0enHNFj1T2Jfzq6APNXvvRkKQQirGQ5+fkfnravBD1v5o61HpT
I0uPjexcBzhlJB7DcEnC3XIkIvvveUmnMkgzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUXJAWihxHUZw0GvT3xhXeep8c6kAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hKQVdpaHhIVVp3MEd2VDN4
aFhlZXA4YzZrQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6VAwDQYJKoZIhvcNAQELBQADggEBAE74gu3vDaSjG3VmNwux85R7xUZBiWi4kHw8
LXecW1vG5E5Mlds5qSO4TiUHJOU0G9Nyq2G9E9Qs7Vi2obkWj9HEElgdVQdNYD+a
yYgAAyCThgJ6dLcjqcr2e/424fjnDahXNkvfRAkjbS8Ylka7+DYUS+zMRWJ5FLSq
XbNJZd7SMOLe1KDvnYWOEz2B+DPX9VOoSOXe1oa8z8h/iESLVIg0Wa2XEQzO+7u8
fA2CXBYxCG0mdEPHRS5zYXV9hFv7f2PBxKbyCN1JBy8ZEVbP3y9YYxwpS6IlgKE9
uyhSjrDK86sLcWcPJy8DzwTUyvV3ABj1DUV2OcEPD2zRuhw6gAI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:21 2025 by rpki-client