Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cM9O3QzVH43jfJHwGRb2FTBG3Rw.roa
File: cM9O3QzVH43jfJHwGRb2FTBG3Rw.roa (raw, json)
Hash identifier: 7o01kqNVHy9VBqHP9XK8sSqGcaDe2naEkpTyG/KCpWg=
Subject key identifier: 70:CF:4E:DD:0C:D5:1F:8D:E3:7C:91:F0:19:16:F6:15:30:46:DD:1C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1E83
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cM9O3QzVH43jfJHwGRb2FTBG3Rw.roa
Signing time: Wed 04 May 2022 06:33:26 +0000
ROA not before: Wed 04 May 2022 06:33:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.232.104.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7811 (0x1e83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: May 4 06:33:26 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=70CF4EDD0CD51F8DE37C91F01916F6153046DD1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:5e:03:99:51:00:96:ec:b2:09:28:ae:0a:
b7:86:09:7e:1c:a8:66:d0:0b:c7:9f:14:09:28:dd:
55:96:d1:e5:97:0b:46:6f:7a:59:fa:c1:92:b9:e0:
05:5c:5e:0f:73:37:10:00:75:6c:83:66:8b:67:14:
f4:2e:f5:53:de:5b:e5:4e:f9:36:6c:23:a3:9a:ea:
fc:36:5a:2e:eb:43:81:87:e3:88:f0:79:b1:6c:61:
5f:e2:b9:2c:2b:0a:b4:65:fb:2b:f1:82:fc:73:4a:
7c:f5:56:0a:ec:3d:80:c5:82:7f:bf:94:f8:cf:e5:
25:b2:8d:36:c6:21:4d:5a:a7:79:dd:0b:3b:e0:4f:
6a:b6:4c:b4:b3:1e:11:fc:71:33:77:4e:5b:a4:48:
04:07:0e:e6:0e:09:05:43:2b:45:d1:07:53:d7:b9:
2d:94:39:21:85:e1:66:28:72:74:3c:71:c0:8d:76:
0c:9a:58:e9:fe:31:1b:54:36:5e:1d:98:ec:60:2b:
a0:df:98:bf:6c:ac:5a:b9:de:0c:82:f1:b6:1e:2c:
d7:a4:af:f0:55:b6:97:5d:85:29:4c:46:71:f7:83:
a6:79:da:b4:1e:13:9b:54:38:15:fb:ac:3d:56:15:
19:f4:24:51:86:a2:b3:37:30:88:f6:b4:92:92:b8:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CF:4E:DD:0C:D5:1F:8D:E3:7C:91:F0:19:16:F6:15:30:46:DD:1C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cM9O3QzVH43jfJHwGRb2FTBG3Rw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.104.0/21
Signature Algorithm: sha256WithRSAEncryption
28:78:39:db:cd:68:ea:80:11:7b:e2:e3:85:83:55:59:ca:f8:
73:20:80:03:e5:56:a5:aa:48:9b:60:f2:04:9d:67:f5:ab:e1:
9f:4e:03:1d:78:e5:b1:b2:b0:d1:64:62:3e:62:aa:59:52:ec:
3c:ed:9a:be:64:fe:29:f0:ca:97:7f:03:69:3a:33:e3:e2:91:
09:44:4a:4c:6f:fc:ca:30:35:8a:ed:8b:9e:ae:d0:28:77:fa:
49:67:2b:ce:3e:01:05:76:3c:fb:0b:29:a5:a8:41:6a:2c:b7:
5b:d2:bb:30:ed:98:d2:49:d4:0a:33:84:38:dd:1c:8d:ab:20:
54:bf:d5:ab:82:48:74:be:ee:d5:84:79:d2:b0:cb:a9:2d:cb:
b7:6e:a2:22:ad:aa:25:a5:61:84:8d:39:f9:cc:01:9f:06:62:
e2:0a:76:54:2e:20:62:9f:39:9a:64:6e:81:28:ea:e6:f0:82:
02:0c:4a:db:db:06:bc:91:7f:7a:00:4a:6f:25:c0:82:95:d7:
25:16:cf:38:e6:78:b4:d9:dc:7f:6a:92:61:25:02:01:1d:7d:
e5:64:02:67:a7:6f:ea:8c:e9:6e:9d:fe:fc:6f:59:60:2d:64:
d2:5e:56:31:2e:77:94:ec:0d:d1:e8:4a:7f:e6:01:57:70:91:
13:71:7d:27
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHoMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA1MDQw
NjMzMjZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDcwQ0Y0RUREMENENTFG
OERFMzdDOTFGMDE5MTZGNjE1MzA0NkREMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsE14DmVEAluyyCSiuCreGCX4cqGbQC8efFAko3VWW0eWXC0Zv
eln6wZK54AVcXg9zNxAAdWyDZotnFPQu9VPeW+VO+TZsI6Oa6vw2Wi7rQ4GH44jw
ebFsYV/iuSwrCrRl+yvxgvxzSnz1VgrsPYDFgn+/lPjP5SWyjTbGIU1ap3ndCzvg
T2q2TLSzHhH8cTN3TlukSAQHDuYOCQVDK0XRB1PXuS2UOSGF4WYocnQ8ccCNdgya
WOn+MRtUNl4dmOxgK6DfmL9srFq53gyC8bYeLNekr/BVtpddhSlMRnH3g6Z52rQe
E5tUOBX7rD1WFRn0JFGGorM3MIj2tJKSuJptAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcM9O3QzVH43jfJHwGRb2FTBG3RwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NNOU8zUXpWSDQzamZKSHdH
UmIyRlRCRzNSdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6GgwDQYJKoZIhvcNAQELBQADggEBACh4OdvNaOqAEXvi44WDVVnK+HMggAPlVqWq
SJtg8gSdZ/Wr4Z9OAx145bGysNFkYj5iqllS7Dztmr5k/inwypd/A2k6M+PikQlE
Skxv/MowNYrti56u0Ch3+klnK84+AQV2PPsLKaWoQWost1vSuzDtmNJJ1AozhDjd
HI2rIFS/1auCSHS+7tWEedKwy6kty7duoiKtqiWlYYSNOfnMAZ8GYuIKdlQuIGKf
OZpkboEo6ubwggIMStvbBryRf3oASm8lwIKV1yUWzzjmeLTZ3H9qkmElAgEdfeVk
Amenb+qM6W6d/vxvWWAtZNJeVjEud5TsDdHoSn/mAVdwkRNxfSc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org