Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aKheEctuTnBW-wabnBJwhXCLY-g.roa
File: aKheEctuTnBW-wabnBJwhXCLY-g.roa (raw, json)
Hash identifier: pdASuaIZEnNVXsdygLVDKwsPwB+V9lpIua/Y4PW1HU4=
Subject key identifier: 68:A8:5E:11:CB:6E:4E:70:56:FB:06:9B:9C:12:70:85:70:8B:63:E8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 170F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aKheEctuTnBW-wabnBJwhXCLY-g.roa
Signing time: Sun 07 Feb 2021 12:16:21 +0000
ROA not before: Sun 07 Feb 2021 12:16:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5903 (0x170f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:16:21 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=68A85E11CB6E4E7056FB069B9C127085708B63E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:10:12:34:69:2e:8b:01:36:7c:86:e3:05:
69:c9:4a:3d:a9:b6:92:9d:1e:5f:95:3f:1e:dd:79:
1e:c4:02:d8:68:87:84:0f:38:8e:a6:23:bc:fe:34:
0c:1f:81:21:f7:02:ac:a9:5c:f7:d1:25:3c:7f:df:
b0:96:4c:a5:2f:f5:d5:3d:bd:06:f5:b7:b3:cb:b4:
a3:13:8c:61:3a:a9:b0:3f:e4:b2:3b:7a:e9:dc:e5:
78:e4:60:a5:2d:df:43:b4:60:7b:9a:a0:6f:57:a0:
0b:20:fc:a4:f7:29:3e:9b:9c:66:33:b9:d5:87:de:
cc:14:83:a8:8e:9d:96:54:a7:fe:99:b1:df:da:67:
95:18:0d:e1:dc:c5:23:9d:74:34:16:b5:12:f3:39:
07:10:b0:7b:f9:06:ff:db:db:19:42:cf:8f:4d:0c:
b0:44:de:c9:96:f4:ed:f7:ef:bd:7f:b9:3d:97:36:
f3:6c:ff:a6:8e:63:fc:4b:86:25:ee:51:6a:f9:98:
19:1a:6b:ba:13:5a:4e:d7:3b:a6:ec:51:77:1a:75:
2f:ca:26:79:bd:d9:63:b1:9c:a8:cf:f0:3b:50:b7:
31:dc:14:97:ca:e8:0a:a1:8e:51:09:85:5d:d8:40:
9c:cd:a2:b1:80:e3:b3:e9:cb:dd:2a:29:d1:e9:b2:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A8:5E:11:CB:6E:4E:70:56:FB:06:9B:9C:12:70:85:70:8B:63:E8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aKheEctuTnBW-wabnBJwhXCLY-g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.216.0/21
Signature Algorithm: sha256WithRSAEncryption
44:b6:ef:dd:e1:17:ef:32:d3:a6:74:95:3a:46:99:76:1e:fe:
e0:61:a1:3f:ea:14:ca:27:0e:f1:1d:2b:1d:e7:49:e8:de:c9:
8d:5b:66:db:c8:dd:89:6a:ea:cf:59:9d:de:55:39:23:c0:80:
fc:53:78:ee:52:e5:cb:25:5a:2a:ea:0e:dd:4e:9f:40:18:1d:
e0:4d:84:f7:5f:a5:83:d1:88:e3:e4:ff:1a:85:4b:91:bd:db:
19:36:7c:88:76:4f:04:b2:2b:e5:33:47:8c:b0:e5:a2:18:c3:
a5:e9:fb:49:25:a4:38:2d:6f:6f:c6:74:e2:f4:bf:bb:1f:41:
34:21:15:c2:81:e8:9a:81:61:74:2b:ad:a1:79:a8:91:9d:98:
8c:18:73:c7:34:e2:0c:e2:5b:05:b1:ed:60:b9:ec:08:6d:de:
0d:18:d6:90:ee:68:c6:f6:11:aa:af:aa:81:d0:24:0c:fa:9b:
39:f1:50:5c:f0:74:80:96:40:9d:d9:02:fa:f5:20:be:a1:44:
fd:99:9a:28:94:f9:8a:ae:c8:4c:92:f1:56:47:b9:67:54:f6:
81:58:3f:1f:98:fe:a2:e2:3c:a2:04:07:39:d4:fb:30:f3:8d:
af:e4:a8:50:d7:f2:29:e2:1c:e8:57:8d:fa:5c:03:90:20:c9:
e0:d2:2b:cd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjE2MjFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDY4QTg1RTExQ0I2RTRF
NzA1NkZCMDY5QjlDMTI3MDg1NzA4QjYzRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqjBASNGkuiwE2fIbjBWnJSj2ptpKdHl+VPx7deR7EAthoh4QP
OI6mI7z+NAwfgSH3AqypXPfRJTx/37CWTKUv9dU9vQb1t7PLtKMTjGE6qbA/5LI7
eunc5XjkYKUt30O0YHuaoG9XoAsg/KT3KT6bnGYzudWH3swUg6iOnZZUp/6Zsd/a
Z5UYDeHcxSOddDQWtRLzOQcQsHv5Bv/b2xlCz49NDLBE3smW9O33771/uT2XNvNs
/6aOY/xLhiXuUWr5mBkaa7oTWk7XO6bsUXcadS/KJnm92WOxnKjP8DtQtzHcFJfK
6AqhjlEJhV3YQJzNorGA47Ppy90qKdHpsoKHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUaKheEctuTnBW+wabnBJwhXCLY+gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FLaGVFY3R1VG5CVy13YWJu
Qkp3aFhDTFktZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6dgwDQYJKoZIhvcNAQELBQADggEBAES2793hF+8y06Z0lTpGmXYe/uBhoT/qFMon
DvEdKx3nSejeyY1bZtvI3Ylq6s9Znd5VOSPAgPxTeO5S5cslWirqDt1On0AYHeBN
hPdfpYPRiOPk/xqFS5G92xk2fIh2TwSyK+UzR4yw5aIYw6Xp+0klpDgtb2/GdOL0
v7sfQTQhFcKB6JqBYXQrraF5qJGdmIwYc8c04gziWwWx7WC57Aht3g0Y1pDuaMb2
EaqvqoHQJAz6mznxUFzwdICWQJ3ZAvr1IL6hRP2ZmiiU+YquyEyS8VZHuWdU9oFY
Px+Y/qLiPKIEBznU+zDzja/kqFDX8iniHOhXjfpcA5AgyeDSK80=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:35 2023 by rpki-client on console-fra.rpki-client.org