Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xs1czhxji1Thc758PpPkZDWNuws.roa
File: Xs1czhxji1Thc758PpPkZDWNuws.roa (raw, json)
Hash identifier: 3j89R1ZwlrqkhpLcWgSLusSjPnhghNRoN7XOuEu4fV8=
Subject key identifier: 5E:CD:5C:CE:1C:63:8B:54:E1:73:BE:7C:3E:93:E4:64:35:8D:BB:0B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 13D1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xs1czhxji1Thc758PpPkZDWNuws.roa
Signing time: Sun 07 Feb 2021 11:56:21 +0000
ROA not before: Sun 07 Feb 2021 11:56:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5073 (0x13d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:56:21 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5ECD5CCE1C638B54E173BE7C3E93E464358DBB0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:c8:bf:e4:fa:8b:c4:b5:e9:b5:6f:05:49:
5b:73:d1:b7:44:da:17:6b:8c:2f:07:54:76:9f:5f:
1c:f6:08:64:80:f2:5f:af:40:d6:6c:dd:c8:7e:de:
a9:d5:55:e0:74:99:06:70:65:7b:1d:72:0d:6a:af:
fb:c8:5c:06:6e:4b:28:74:49:e3:af:5a:a1:41:b8:
cd:12:7a:d0:3d:f8:20:65:f8:ce:d2:58:a0:3f:a2:
74:1e:c6:82:44:2a:7e:09:35:bf:b1:48:32:6b:82:
58:6b:7f:36:96:b8:f9:ad:24:14:90:36:8c:6a:9b:
a6:38:c3:62:fa:ae:c8:0f:33:b9:90:f9:99:f3:21:
6b:14:d7:70:07:71:de:4c:e3:e9:52:d0:e1:23:d7:
d4:ab:73:d6:c1:9b:01:60:9c:b2:0d:38:ff:3c:1c:
cc:97:f5:98:a8:90:28:ba:48:af:0b:94:d9:85:d9:
22:8e:3c:41:dc:29:3b:b5:37:f0:b9:fc:65:5d:34:
35:6a:e4:91:ca:4d:74:15:0a:9d:16:3e:3b:a0:b7:
62:4e:86:bd:94:b0:a3:2b:fb:08:81:a1:5b:de:4e:
64:a1:8c:34:df:dd:78:e4:5d:06:fe:18:04:9d:be:
49:33:6f:e5:d1:0d:ee:53:42:c1:df:4c:1d:f2:ef:
b7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CD:5C:CE:1C:63:8B:54:E1:73:BE:7C:3E:93:E4:64:35:8D:BB:0B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xs1czhxji1Thc758PpPkZDWNuws.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.80.0/21
Signature Algorithm: sha256WithRSAEncryption
63:be:9e:42:84:b4:0d:63:0e:dd:bb:5b:65:8a:c8:21:cf:8b:
23:d7:90:f0:d6:b3:41:52:d5:f9:d6:4a:88:8c:32:28:19:16:
b5:27:ca:8b:97:8e:fe:ff:ca:a1:3d:1a:62:e5:3a:be:14:0a:
74:1b:dd:06:80:52:95:25:26:33:7d:10:66:1e:b7:e1:ff:08:
a7:dc:84:f1:8a:29:51:64:c3:3b:d5:96:f2:e7:99:89:7d:8f:
44:c7:5b:dd:ee:51:53:6f:c0:af:77:ba:13:28:59:44:12:47:
85:52:bd:fb:46:33:10:e8:40:8b:d0:30:d7:a1:33:5a:0b:15:
42:4f:ef:f4:7f:9e:b1:05:c2:5f:39:b0:85:2e:65:08:1a:8c:
51:fe:45:ba:89:d4:bd:09:21:09:a5:b6:a3:d7:de:54:ca:d8:
42:93:f7:df:9c:8e:b6:4f:8c:41:c6:21:cf:0f:1d:4f:e3:33:
0f:1a:c2:43:fd:ce:ce:0a:0f:2c:83:ba:15:b2:e8:f5:b3:bb:
30:f9:1f:24:d0:92:a2:59:53:ba:eb:a7:9b:cf:83:65:a2:a5:
4e:82:0b:a8:53:c7:16:37:16:cd:c8:2b:68:4d:e4:be:1f:76:
5d:be:b8:56:67:18:b2:c7:92:27:a4:ef:ee:70:a0:aa:ef:c4:
ae:8c:a8:cf
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE9EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU2MjFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVFQ0Q1Q0NFMUM2MzhC
NTRFMTczQkU3QzNFOTNFNDY0MzU4REJCMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1+Mi/5PqLxLXptW8FSVtz0bdE2hdrjC8HVHafXxz2CGSA8l+v
QNZs3ch+3qnVVeB0mQZwZXsdcg1qr/vIXAZuSyh0SeOvWqFBuM0SetA9+CBl+M7S
WKA/onQexoJEKn4JNb+xSDJrglhrfzaWuPmtJBSQNoxqm6Y4w2L6rsgPM7mQ+Znz
IWsU13AHcd5M4+lS0OEj19Src9bBmwFgnLINOP88HMyX9ZiokCi6SK8LlNmF2SKO
PEHcKTu1N/C5/GVdNDVq5JHKTXQVCp0WPjugt2JOhr2UsKMr+wiBoVveTmShjDTf
3XjkXQb+GASdvkkzb+XRDe5TQsHfTB3y77ffAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUXs1czhxji1Thc758PpPkZDWNuwswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hzMWN6aHhqaTFUaGM3NThQ
cFBrWkRXTnV3cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6VAwDQYJKoZIhvcNAQELBQADggEBAGO+nkKEtA1jDt27W2WKyCHPiyPXkPDWs0FS
1fnWSoiMMigZFrUnyouXjv7/yqE9GmLlOr4UCnQb3QaAUpUlJjN9EGYet+H/CKfc
hPGKKVFkwzvVlvLnmYl9j0THW93uUVNvwK93uhMoWUQSR4VSvftGMxDoQIvQMNeh
M1oLFUJP7/R/nrEFwl85sIUuZQgajFH+RbqJ1L0JIQmltqPX3lTK2EKT99+cjrZP
jEHGIc8PHU/jMw8awkP9zs4KDyyDuhWy6PWzuzD5HyTQkqJZU7rrp5vPg2WipU6C
C6hTxxY3Fs3IK2hN5L4fdl2+uFZnGLLHkiek7+5woKrvxK6MqM8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:24 2025 by rpki-client