Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cadcJJ03CDWVH_ekep7_EMyvZZQ.roa
File: cadcJJ03CDWVH_ekep7_EMyvZZQ.roa (raw, json)
Hash identifier: G6GrMxkJRsnt4dMh7aNgLv4xoJzcivJHMcHqtHuafn0=
Subject key identifier: 71:A7:5C:24:9D:37:08:35:95:1F:F7:A4:7A:9E:FF:10:CC:AF:65:94
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2195
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cadcJJ03CDWVH_ekep7_EMyvZZQ.roa
Signing time: Fri 25 Nov 2022 04:40:05 +0000
ROA not before: Fri 25 Nov 2022 04:40:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8597 (0x2195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=71A75C249D370835951FF7A47A9EFF10CCAF6594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:c0:bb:fe:b3:ea:de:32:fc:34:d3:49:1e:
b7:4d:b1:82:31:a4:8b:2a:dd:27:9a:62:e4:96:2e:
9d:91:8e:37:6e:bc:dc:55:37:bf:66:16:3b:09:46:
5e:64:3b:b1:86:7b:c4:46:e4:11:1c:11:9f:fe:ed:
0d:07:ad:81:ac:05:a3:fb:c6:fd:75:c0:d7:c6:8c:
01:07:c2:22:88:c1:40:43:0a:aa:bb:83:66:98:d1:
2f:59:01:ea:6f:d3:58:aa:dd:c2:5e:89:c2:53:16:
7d:f6:9d:66:3f:f8:d4:49:c2:6e:2b:9d:2d:7a:ea:
7c:f2:eb:95:3b:d9:3a:87:55:2e:39:67:5f:c7:1d:
03:99:26:fd:c0:32:6a:ff:d1:76:2e:83:ef:f0:ea:
78:b3:33:83:11:d1:ce:0d:d1:ac:c1:8b:74:b3:42:
61:7e:40:88:f6:40:63:bc:17:b3:3d:99:83:ac:42:
01:a4:1c:43:e5:aa:41:53:10:c3:4c:60:63:5f:71:
9f:9e:64:f1:47:50:6d:11:6b:b1:20:91:da:e1:1b:
f2:44:3a:1c:20:01:83:43:97:87:6d:1e:d6:13:1c:
7b:45:20:72:37:d6:79:3c:48:2e:2a:76:52:16:5b:
e8:99:ef:37:31:9a:0b:8e:ac:dd:46:07:27:9c:d3:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A7:5C:24:9D:37:08:35:95:1F:F7:A4:7A:9E:FF:10:CC:AF:65:94
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cadcJJ03CDWVH_ekep7_EMyvZZQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.0.0/19
Signature Algorithm: sha256WithRSAEncryption
26:00:8d:ec:71:95:00:9e:b0:1d:40:cf:89:78:53:47:2b:ac:
62:12:f1:72:67:4d:8a:76:87:f6:1b:ed:de:0c:74:99:36:3e:
23:5c:70:e5:72:0f:15:a3:d1:1b:9a:28:6c:84:e9:fd:68:b3:
d4:7a:fa:77:9a:26:53:ba:6e:7c:17:40:0b:f9:71:d5:20:77:
94:f5:7d:7f:f1:ba:e8:88:90:0d:14:dd:0b:19:a8:4d:0a:14:
55:b7:54:4f:f2:eb:60:0b:ef:30:8c:c6:75:3d:07:4a:44:4c:
a1:69:99:24:ef:ed:66:9f:93:dc:71:33:cf:81:86:13:37:11:
ed:9d:4b:42:f0:e7:5c:98:09:86:ed:fe:29:89:b8:7d:08:40:
73:6b:9e:c5:49:e1:7a:2f:d8:c6:94:f6:18:cb:7a:98:71:21:
7d:2f:bc:74:56:a9:88:f9:49:2f:77:26:64:d2:5a:b1:c2:90:
f1:b1:8e:8b:07:ae:09:c5:cf:59:bd:73:d3:ce:50:d3:14:2e:
21:cb:32:81:ed:8d:db:e1:45:ff:93:de:cc:59:e3:de:0d:a4:
36:01:11:c0:ca:a4:56:73:33:6d:5d:8a:4c:b9:29:41:4f:1d:
ac:8e:3e:26:2b:2a:71:18:f3:43:e1:4a:ef:87:d0:17:fc:0c:
64:8b:33:06
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIZUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDcxQTc1QzI0OUQzNzA4
MzU5NTFGRjdBNDdBOUVGRjEwQ0NBRjY1OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMzMC7/rPq3jL8NNNJHrdNsYIxpIsq3SeaYuSWLp2RjjduvNxV
N79mFjsJRl5kO7GGe8RG5BEcEZ/+7Q0HrYGsBaP7xv11wNfGjAEHwiKIwUBDCqq7
g2aY0S9ZAepv01iq3cJeicJTFn32nWY/+NRJwm4rnS166nzy65U72TqHVS45Z1/H
HQOZJv3AMmr/0XYug+/w6nizM4MR0c4N0azBi3SzQmF+QIj2QGO8F7M9mYOsQgGk
HEPlqkFTEMNMYGNfcZ+eZPFHUG0Ra7EgkdrhG/JEOhwgAYNDl4dtHtYTHHtFIHI3
1nk8SC4qdlIWW+iZ7zcxmguOrN1GByec0znNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcadcJJ03CDWVH/ekep7/EMyvZZQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NhZGNKSjAzQ0RXVkhfZWtl
cDdfRU15dlpaUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2
6AAwDQYJKoZIhvcNAQELBQADggEBACYAjexxlQCesB1Az4l4U0crrGIS8XJnTYp2
h/Yb7d4MdJk2PiNccOVyDxWj0RuaKGyE6f1os9R6+neaJlO6bnwXQAv5cdUgd5T1
fX/xuuiIkA0U3QsZqE0KFFW3VE/y62AL7zCMxnU9B0pETKFpmSTv7Wafk9xxM8+B
hhM3Ee2dS0Lw51yYCYbt/imJuH0IQHNrnsVJ4Xov2MaU9hjLephxIX0vvHRWqYj5
SS93JmTSWrHCkPGxjosHrgnFz1m9c9POUNMULiHLMoHtjdvhRf+T3sxZ494NpDYB
EcDKpFZzM21diky5KUFPHayOPiYrKnEY80PhSu+H0Bf8DGSLMwY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org