Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/apGoL0PRajbt7PTWjuzdrYatotY.roa
File: apGoL0PRajbt7PTWjuzdrYatotY.roa (raw, json)
Hash identifier: NcTdnI3uQJlWhsbLlDJVeQNxhJz8X0+q8IGG4pKAfKI=
Subject key identifier: 6A:91:A8:2F:43:D1:6A:36:ED:EC:F4:D6:8E:EC:DD:AD:86:AD:A2:D6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 17A7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/apGoL0PRajbt7PTWjuzdrYatotY.roa
Signing time: Sun 07 Feb 2021 12:22:01 +0000
ROA not before: Sun 07 Feb 2021 12:22:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6055 (0x17a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:22:01 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6A91A82F43D16A36EDECF4D68EECDDAD86ADA2D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:0b:8e:c4:bc:bd:9a:61:3f:3e:38:24:1d:
86:14:70:13:ae:77:fe:db:38:89:0e:91:56:e9:fe:
61:19:8a:ac:f9:00:6f:02:ef:10:c9:03:21:7f:1f:
22:79:2f:4f:00:c8:cc:a9:4e:f4:fa:a2:b8:66:aa:
9e:39:22:24:ad:32:6c:ba:07:04:c8:77:82:16:02:
95:3f:48:02:17:d1:dd:40:ad:27:a3:c9:b9:26:8f:
97:8d:60:28:f0:30:20:9a:b9:af:51:ea:0a:30:92:
a1:16:39:e7:d8:f7:33:ff:bb:42:5e:db:77:99:cc:
fe:19:a2:d5:5d:54:fa:b8:8e:af:f2:ed:c3:43:0b:
c0:da:eb:d3:ca:13:4c:5f:77:87:10:55:61:f1:11:
e1:6a:40:da:f4:67:22:fa:76:60:40:de:89:e6:b3:
79:77:77:ac:f7:71:bf:26:d4:aa:ed:93:e5:84:4f:
a6:97:c4:0a:58:b3:43:cf:a6:6f:2b:85:2a:d6:ec:
01:6e:80:67:e3:f0:e8:82:7a:29:8d:75:da:87:df:
77:72:fd:05:31:2d:13:9d:55:00:e1:99:84:ea:bf:
84:ab:26:80:39:25:13:26:51:84:2b:bb:5b:8b:b3:
ea:92:fa:53:f5:50:a8:30:17:ba:20:b4:34:27:0f:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:91:A8:2F:43:D1:6A:36:ED:EC:F4:D6:8E:EC:DD:AD:86:AD:A2:D6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/apGoL0PRajbt7PTWjuzdrYatotY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.104.0/21
Signature Algorithm: sha256WithRSAEncryption
14:8f:85:31:dc:ed:f6:94:e6:61:c1:80:15:ca:ef:bf:e3:11:
e0:48:7d:45:f8:1e:4f:9d:fb:45:9d:bc:79:af:5a:3d:4d:eb:
6f:4d:93:af:db:ec:de:e0:f4:d9:b3:7c:ab:a9:86:d3:9d:0f:
8a:69:6d:9e:54:08:8e:2c:57:13:fa:c7:44:e4:61:2b:df:5e:
8e:2d:0a:e0:71:de:dd:75:fa:40:e8:79:66:af:91:f8:c5:c5:
5e:31:dc:ae:87:35:e7:62:92:10:1a:33:b8:c6:2a:43:31:c7:
15:28:a0:3a:fc:f0:2e:be:53:ed:eb:46:03:68:1d:5a:a4:5d:
e2:0e:a6:64:eb:25:80:9a:db:20:0b:7a:46:1b:0c:1d:46:eb:
95:01:de:25:65:c8:4a:5b:72:9b:1d:b7:6c:66:ab:21:e8:6c:
0a:80:2f:01:86:4a:2a:53:89:8b:dc:db:f9:4e:10:5c:c2:5f:
3a:62:ff:5d:c8:53:6b:ca:47:f6:70:c1:1a:fb:62:71:d1:c9:
f8:46:e3:f1:41:16:0e:45:61:70:b6:3a:fe:42:3d:9f:bc:0e:
c8:cd:e8:3f:dd:9a:a8:fb:e3:d1:2c:97:13:df:2c:4a:c8:7c:
b8:10:d4:2c:6f:ac:2f:22:18:d3:88:2a:66:1f:e0:f1:82:c9:
cd:87:91:4b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF6cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjIyMDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDZBOTFBODJGNDNEMTZB
MzZFREVDRjRENjhFRUNEREFEODZBREEyRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCk3AuOxLy9mmE/PjgkHYYUcBOud/7bOIkOkVbp/mEZiqz5AG8C
7xDJAyF/HyJ5L08AyMypTvT6orhmqp45IiStMmy6BwTId4IWApU/SAIX0d1ArSej
ybkmj5eNYCjwMCCaua9R6gowkqEWOefY9zP/u0Je23eZzP4ZotVdVPq4jq/y7cND
C8Da69PKE0xfd4cQVWHxEeFqQNr0ZyL6dmBA3onms3l3d6z3cb8m1Krtk+WET6aX
xApYs0PPpm8rhSrW7AFugGfj8OiCeimNddqH33dy/QUxLROdVQDhmYTqv4SrJoA5
JRMmUYQru1uLs+qS+lP1UKgwF7ogtDQnD+83AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUapGoL0PRajbt7PTWjuzdrYatotYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FwR29MMFBSYWpidDdQVFdq
dXpkcllhdG90WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6GgwDQYJKoZIhvcNAQELBQADggEBABSPhTHc7faU5mHBgBXK77/jEeBIfUX4Hk+d
+0WdvHmvWj1N629Nk6/b7N7g9NmzfKuphtOdD4ppbZ5UCI4sVxP6x0TkYSvfXo4t
CuBx3t11+kDoeWavkfjFxV4x3K6HNedikhAaM7jGKkMxxxUooDr88C6+U+3rRgNo
HVqkXeIOpmTrJYCa2yALekYbDB1G65UB3iVlyEpbcpsdt2xmqyHobAqALwGGSipT
iYvc2/lOEFzCXzpi/13IU2vKR/ZwwRr7YnHRyfhG4/FBFg5FYXC2Ov5CPZ+8DsjN
6D/dmqj749EslxPfLErIfLgQ1CxvrC8iGNOIKmYf4PGCyc2HkUs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org