Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cxOcqMlllnNJ_Ip07pG25mTHjDc.roa
File: cxOcqMlllnNJ_Ip07pG25mTHjDc.roa (raw, json)
Hash identifier: AmXT5YcNUnEOzPlOunCk/7EkeUjS47EH4dVY+kGyNio=
Subject key identifier: 73:13:9C:A8:C9:65:96:73:49:FC:8A:74:EE:91:B6:E6:64:C7:8C:37
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C5C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cxOcqMlllnNJ_Ip07pG25mTHjDc.roa
Signing time: Wed 29 Sep 2021 02:47:39 +0000
ROA not before: Wed 29 Sep 2021 02:47:39 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7260 (0x1c5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:39 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=73139CA8C965967349FC8A74EE91B6E664C78C37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3f:7f:24:db:e3:69:ae:ee:27:4a:a7:61:92:
6f:ef:90:37:40:60:2f:59:cf:23:7a:56:20:1d:f5:
2c:be:04:7c:15:8e:47:00:66:5a:b7:80:4b:d6:97:
db:a1:e7:0c:22:1d:68:c5:be:93:a2:c3:af:d7:48:
90:64:1c:f0:1f:25:1b:9c:63:65:64:6f:ba:a6:42:
12:4a:57:36:76:81:65:90:b3:4b:6d:9d:38:15:14:
f9:da:34:2e:32:da:4e:4b:6c:e6:31:6c:9e:5e:a8:
7f:d4:31:a3:9e:9c:4f:a1:5c:82:f1:29:2b:90:03:
dd:53:9f:ca:0b:a7:16:01:2e:9d:17:93:eb:67:6d:
b7:ee:c8:c7:95:32:f7:76:ea:15:64:a2:8a:1c:b1:
30:6a:da:e9:38:cf:74:b1:14:fd:24:26:0c:50:9b:
51:56:ba:66:18:f3:12:75:d8:6f:16:80:3c:49:77:
dc:10:8f:92:24:cd:3b:c2:cc:64:24:a0:73:e9:62:
75:63:61:70:6c:f3:ab:56:e0:ec:f6:9c:95:89:9d:
2f:c0:52:af:52:10:35:5e:f8:c6:98:14:b6:b4:24:
02:12:0c:e3:8b:25:6c:71:e0:2a:b4:9c:91:78:07:
9d:7f:fa:19:cd:7e:7d:43:97:2d:c1:d8:42:34:5a:
14:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:13:9C:A8:C9:65:96:73:49:FC:8A:74:EE:91:B6:E6:64:C7:8C:37
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cxOcqMlllnNJ_Ip07pG25mTHjDc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:10:0a:e7:25:92:df:c5:7b:e4:57:b6:88:fd:7c:be:4d:d9:
28:ee:09:77:38:97:77:0e:52:e8:bc:c2:6d:36:81:ac:b2:6f:
d9:cd:5b:32:d2:b6:65:d4:f0:01:87:50:be:4f:53:70:fb:5d:
d0:51:22:b6:7a:03:66:0d:0b:62:60:76:c9:9f:45:66:0f:6e:
e1:fe:1f:76:22:2a:eb:45:7b:17:3c:be:52:cc:0b:23:69:75:
7a:06:bc:16:82:2d:c1:36:73:90:2d:65:a7:31:aa:95:f4:ad:
8e:32:a8:d5:b7:22:e7:74:63:38:11:51:be:e0:e9:d8:78:6b:
40:ff:64:7c:d6:28:c5:6e:f0:3c:41:04:29:7d:aa:42:63:ad:
c2:52:c7:17:07:01:c7:b7:2f:50:44:64:b3:de:ef:f9:a7:2e:
41:33:f7:1d:e6:5c:1f:c3:6e:27:4e:2c:30:c8:74:89:37:49:
89:81:dc:21:f8:90:7c:9d:d0:2a:23:f9:0f:93:53:70:ba:39:
3e:84:a2:38:ba:65:84:27:2a:3b:7a:41:03:5c:17:e1:61:f8:
ee:5a:2c:de:45:4b:cd:72:c1:e1:0a:33:dd:ae:e6:d1:64:e0:
5e:a2:ed:21:8c:0e:03:0d:c5:cc:3a:83:b9:6b:81:7b:db:87:
d0:e0:e7:d8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHFwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3MzlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDczMTM5Q0E4Qzk2NTk2
NzM0OUZDOEE3NEVFOTFCNkU2NjRDNzhDMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeP38k2+Npru4nSqdhkm/vkDdAYC9ZzyN6ViAd9Sy+BHwVjkcA
Zlq3gEvWl9uh5wwiHWjFvpOiw6/XSJBkHPAfJRucY2Vkb7qmQhJKVzZ2gWWQs0tt
nTgVFPnaNC4y2k5LbOYxbJ5eqH/UMaOenE+hXILxKSuQA91Tn8oLpxYBLp0Xk+tn
bbfuyMeVMvd26hVkooocsTBq2uk4z3SxFP0kJgxQm1FWumYY8xJ12G8WgDxJd9wQ
j5IkzTvCzGQkoHPpYnVjYXBs86tW4Oz2nJWJnS/AUq9SEDVe+MaYFLa0JAISDOOL
JWxx4Cq0nJF4B51/+hnNfn1Dly3B2EI0WhQlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcxOcqMlllnNJ/Ip07pG25mTHjDcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2N4T2NxTWxsbG5OSl9JcDA3
cEcyNW1USGpEYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6RwwDQYJKoZIhvcNAQELBQADggEBALgQCuclkt/Fe+RXtoj9fL5N2SjuCXc4l3cO
Uui8wm02gayyb9nNWzLStmXU8AGHUL5PU3D7XdBRIrZ6A2YNC2JgdsmfRWYPbuH+
H3YiKutFexc8vlLMCyNpdXoGvBaCLcE2c5AtZacxqpX0rY4yqNW3Iud0YzgRUb7g
6dh4a0D/ZHzWKMVu8DxBBCl9qkJjrcJSxxcHAce3L1BEZLPe7/mnLkEz9x3mXB/D
bidOLDDIdIk3SYmB3CH4kHyd0Coj+Q+TU3C6OT6Eoji6ZYQnKjt6QQNcF+Fh+O5a
LN5FS81yweEKM92u5tFk4F6i7SGMDgMNxcw6g7lrgXvbh9Dg59g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org