Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a0nXAWj8WtIqW3jVqYm660RJO5k.roa
File: a0nXAWj8WtIqW3jVqYm660RJO5k.roa (raw, json)
Hash identifier: pZrBspUbnKYTwjUf3DSwcD3c/2orz09VOV53ogC+rq0=
Subject key identifier: 6B:49:D7:01:68:FC:5A:D2:2A:5B:78:D5:A9:89:BA:EB:44:49:3B:99
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C75
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a0nXAWj8WtIqW3jVqYm660RJO5k.roa
Signing time: Wed 29 Sep 2021 02:47:48 +0000
ROA not before: Wed 29 Sep 2021 02:47:48 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 45.64.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7285 (0x1c75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:48 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6B49D70168FC5AD22A5B78D5A989BAEB44493B99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:76:57:07:9a:a8:97:e4:32:41:ed:19:9f:
c0:1e:10:47:fd:33:ef:aa:8c:7b:c2:e7:8b:a2:66:
6b:da:2d:67:b5:6e:2c:80:c3:67:92:22:9d:5a:48:
ea:5b:66:b3:77:64:ae:36:8e:30:33:3e:22:4a:5c:
4f:07:55:30:98:c6:52:b3:31:5f:a2:dd:5d:f4:05:
39:5a:ff:96:52:64:d0:24:69:56:e6:60:f5:e5:ce:
81:ef:fc:5f:c1:ba:7c:db:b6:aa:34:cb:30:6e:70:
24:d8:a8:bc:9f:17:93:02:f5:b0:44:21:de:85:61:
13:45:71:17:a8:e4:9f:09:21:b0:c1:b4:59:03:ef:
aa:be:bb:ab:41:88:98:78:e0:84:dd:3d:96:08:7f:
93:c7:88:43:fb:4a:64:f0:81:5a:b7:23:ae:04:c3:
56:5d:35:6f:aa:1e:b2:ad:d8:2b:ad:f7:62:08:25:
1d:ce:2d:6c:49:27:ed:ad:4c:65:a0:37:8e:2b:f9:
17:d6:25:43:d7:05:15:48:22:a7:2b:74:34:f4:1f:
b9:1e:53:28:b9:db:3e:e0:f6:72:0d:08:37:dd:98:
80:c3:24:4f:f5:30:6c:b5:be:2e:7d:37:47:34:f9:
77:1a:ad:b9:1a:2e:f4:42:34:e7:20:d9:fe:81:7b:
a9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:49:D7:01:68:FC:5A:D2:2A:5B:78:D5:A9:89:BA:EB:44:49:3B:99
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a0nXAWj8WtIqW3jVqYm660RJO5k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.31.0/24
Signature Algorithm: sha256WithRSAEncryption
55:aa:3e:cf:32:29:10:b9:18:4b:6e:5e:77:e1:61:90:b3:d1:
cc:c7:19:01:af:eb:03:3e:7e:b3:c8:60:34:37:13:cc:4c:48:
e7:d1:64:9b:99:f8:8d:3a:d0:84:c6:41:d3:d0:28:f2:ea:f5:
38:5e:e5:1f:38:36:ac:ce:a3:98:43:f2:ce:3d:63:6f:3b:86:
e1:cf:7e:ff:5e:93:39:07:25:ff:58:f2:ea:45:46:f6:20:b1:
59:ea:96:4b:48:43:f3:3a:d2:f0:9c:be:83:aa:73:7d:b9:83:
ad:c7:b5:b9:e3:9f:3b:53:b6:b1:cb:21:12:2f:13:c4:02:1a:
2e:89:52:85:5f:f3:f1:13:32:28:77:30:0d:23:bc:06:c0:ae:
15:46:7b:21:0e:d4:6e:93:39:5c:eb:59:0b:4d:f4:22:02:ac:
62:a1:e5:73:96:93:53:fb:f7:7b:5c:da:b9:77:52:d9:bc:e2:
cc:67:57:9b:50:af:43:ec:2c:38:b8:80:0c:23:54:45:b0:a0:
9c:45:ec:87:8e:7a:df:9e:c1:cd:39:ee:99:2a:a4:24:4b:68:
b9:30:fb:36:fc:fa:3b:57:42:66:43:41:da:90:f6:dd:fd:14:
06:dc:0d:5c:7b:0b:54:3e:07:a4:6b:ba:4f:22:23:be:bc:db:
07:12:5c:6e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHHUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3NDhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDZCNDlENzAxNjhGQzVB
RDIyQTVCNzhENUE5ODlCQUVCNDQ0OTNCOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmm3ZXB5qol+QyQe0Zn8AeEEf9M++qjHvC54uiZmvaLWe1biyA
w2eSIp1aSOpbZrN3ZK42jjAzPiJKXE8HVTCYxlKzMV+i3V30BTla/5ZSZNAkaVbm
YPXlzoHv/F/Bunzbtqo0yzBucCTYqLyfF5MC9bBEId6FYRNFcReo5J8JIbDBtFkD
76q+u6tBiJh44ITdPZYIf5PHiEP7SmTwgVq3I64Ew1ZdNW+qHrKt2Cut92IIJR3O
LWxJJ+2tTGWgN44r+RfWJUPXBRVIIqcrdDT0H7keUyi52z7g9nINCDfdmIDDJE/1
MGy1vi59N0c0+XcarbkaLvRCNOcg2f6Be6nDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUa0nXAWj8WtIqW3jVqYm660RJO5kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2EwblhBV2o4V3RJcVczalZx
WW02NjBSSk81ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt
QB8wDQYJKoZIhvcNAQELBQADggEBAFWqPs8yKRC5GEtuXnfhYZCz0czHGQGv6wM+
frPIYDQ3E8xMSOfRZJuZ+I060ITGQdPQKPLq9The5R84NqzOo5hD8s49Y287huHP
fv9ekzkHJf9Y8upFRvYgsVnqlktIQ/M60vCcvoOqc325g63HtbnjnztTtrHLIRIv
E8QCGi6JUoVf8/ETMih3MA0jvAbArhVGeyEO1G6TOVzrWQtN9CICrGKh5XOWk1P7
93tc2rl3Utm84sxnV5tQr0PsLDi4gAwjVEWwoJxF7IeOet+ewc057pkqpCRLaLkw
+zb8+jtXQmZDQdqQ9t39FAbcDVx7C1Q+B6Rruk8iI7682wcSXG4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org