Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YM74DctNcnmDBX3PDVfAujyQmrU.roa
File: YM74DctNcnmDBX3PDVfAujyQmrU.roa (raw, json)
Hash identifier: zhlY/xZtBh4zheOV5zE/UW3v+418KVZ69x/7Kk+mleY=
Subject key identifier: 60:CE:F8:0D:CB:4D:72:79:83:05:7D:CF:0D:57:C0:BA:3C:90:9A:B5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 232C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YM74DctNcnmDBX3PDVfAujyQmrU.roa
Signing time: Fri 25 Nov 2022 04:42:09 +0000
ROA not before: Fri 25 Nov 2022 04:42:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.122.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9004 (0x232c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=60CEF80DCB4D727983057DCF0D57C0BA3C909AB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6c:8b:db:60:3a:9e:ba:28:3a:26:af:ea:93:
ea:34:d3:dc:e2:94:2c:6b:98:6b:72:09:c8:72:c0:
15:e4:d5:e4:d4:17:30:f9:c7:be:e5:32:a8:96:87:
38:c2:cd:dc:9f:17:c7:c2:e5:ee:59:b1:c8:6d:5f:
bd:5e:35:3d:08:ce:2b:82:4e:38:8c:0a:f0:5f:1a:
01:49:7a:f6:64:5b:dc:c3:c0:f8:8b:5f:82:18:04:
1b:3c:b3:96:1b:8d:02:54:44:eb:55:54:d2:95:11:
d0:94:7b:c1:aa:91:a3:dd:c7:93:46:5f:d9:79:9d:
30:dd:80:cd:b0:8d:90:a2:8c:80:2c:36:a9:89:42:
1c:eb:20:f7:e0:8e:fe:dd:20:1a:4a:cd:f0:84:ea:
26:70:47:8b:6a:56:d2:01:ec:ba:ad:13:51:67:79:
4c:09:4f:d7:2a:11:fe:7f:d3:ca:52:1c:68:88:2b:
9b:a3:90:b7:b5:65:4d:a0:20:39:ce:aa:d5:1d:b2:
10:a1:64:aa:c2:4a:4c:09:31:5f:17:8d:c9:5e:ec:
b2:ec:4e:49:52:80:7d:09:df:47:c8:94:0e:84:9a:
18:a5:46:85:b0:ee:be:10:4c:df:6e:51:ba:da:f8:
d5:24:3d:88:75:b9:8e:36:b4:59:7b:3c:ee:c0:ad:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CE:F8:0D:CB:4D:72:79:83:05:7D:CF:0D:57:C0:BA:3C:90:9A:B5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YM74DctNcnmDBX3PDVfAujyQmrU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.122.0/23
Signature Algorithm: sha256WithRSAEncryption
32:26:12:38:07:45:33:36:5d:60:62:5d:36:44:58:34:72:7c:
a6:82:17:92:6d:73:d7:f2:61:5c:f3:7b:35:0c:25:47:88:e9:
cc:d1:56:7c:43:85:42:ed:ca:e7:74:0e:b1:b2:e7:13:3f:97:
23:b6:1d:06:a5:60:f9:46:48:e6:d3:f9:eb:9e:64:c4:60:26:
c4:76:4f:8f:e0:8c:26:59:5d:2f:20:58:c0:39:fa:68:f9:60:
ce:a4:6a:87:61:f6:13:5e:70:6f:75:c7:43:ae:59:a4:5a:5d:
5a:d6:69:21:9b:c8:e9:4c:fc:13:8f:aa:41:f6:db:42:20:63:
26:8d:58:cc:c0:b1:76:20:8f:50:fe:77:cd:6b:30:96:b0:80:
3e:e7:f5:f0:59:57:46:da:90:08:bb:99:c7:05:59:c1:62:65:
c8:8d:26:5c:11:a7:f9:08:b1:d8:13:d9:df:47:89:37:26:93:
14:bf:21:89:ec:fc:2c:2d:61:38:04:ac:6e:4c:12:77:f4:e0:
3d:1b:94:90:bc:11:7e:b3:b4:07:ff:e5:32:1d:9a:67:2e:33:
5c:a4:f4:0f:97:15:23:4f:5d:1d:41:a1:7f:78:8d:5d:a4:4d:
8f:15:ce:90:e0:77:91:1b:9d:54:3b:0f:1b:1b:a8:28:42:27:
18:6a:cf:de
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIywwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQyMDlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDYwQ0VGODBEQ0I0RDcy
Nzk4MzA1N0RDRjBENTdDMEJBM0M5MDlBQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZbIvbYDqeuig6Jq/qk+o009zilCxrmGtyCchywBXk1eTUFzD5
x77lMqiWhzjCzdyfF8fC5e5ZschtX71eNT0IziuCTjiMCvBfGgFJevZkW9zDwPiL
X4IYBBs8s5YbjQJUROtVVNKVEdCUe8GqkaPdx5NGX9l5nTDdgM2wjZCijIAsNqmJ
QhzrIPfgjv7dIBpKzfCE6iZwR4tqVtIB7LqtE1FneUwJT9cqEf5/08pSHGiIK5uj
kLe1ZU2gIDnOqtUdshChZKrCSkwJMV8Xjcle7LLsTklSgH0J30fIlA6EmhilRoWw
7r4QTN9uUbra+NUkPYh1uY42tFl7PO7ArQOvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYM74DctNcnmDBX3PDVfAujyQmrUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lNNzREY3ROY25tREJYM1BE
VmZBdWp5UW1yVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2
6XowDQYJKoZIhvcNAQELBQADggEBADImEjgHRTM2XWBiXTZEWDRyfKaCF5Jtc9fy
YVzzezUMJUeI6czRVnxDhULtyud0DrGy5xM/lyO2HQalYPlGSObT+eueZMRgJsR2
T4/gjCZZXS8gWMA5+mj5YM6kaodh9hNecG91x0OuWaRaXVrWaSGbyOlM/BOPqkH2
20IgYyaNWMzAsXYgj1D+d81rMJawgD7n9fBZV0bakAi7mccFWcFiZciNJlwRp/kI
sdgT2d9HiTcmkxS/IYns/CwtYTgErG5MEnf04D0blJC8EX6ztAf/5TIdmmcuM1yk
9A+XFSNPXR1BoX94jV2kTY8VzpDgd5EbnVQ7DxsbqChCJxhqz94=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org