Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d7MSpjfbXry2PZJ0kzqH0ZejTpE.roa
File: d7MSpjfbXry2PZJ0kzqH0ZejTpE.roa (raw, json)
Hash identifier: oeemVGlVA9XcR+0FpSXjYw+MvcuG0csAojFWNyuvdNE=
Subject key identifier: 77:B3:12:A6:37:DB:5E:BC:B6:3D:92:74:93:3A:87:D1:97:A3:4E:91
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1EAF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d7MSpjfbXry2PZJ0kzqH0ZejTpE.roa
Signing time: Wed 04 May 2022 07:49:31 +0000
ROA not before: Wed 04 May 2022 07:49:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 118.232.104.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7855 (0x1eaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: May 4 07:49:31 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=77B312A637DB5EBCB63D9274933A87D197A34E91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:cb:2f:0d:49:50:bf:d5:02:6f:88:9b:c9:
d7:86:8a:81:52:15:f7:7c:69:b8:af:83:dc:9d:47:
e4:a3:c3:34:6a:46:b2:62:d4:f3:d2:16:09:f0:6a:
a8:47:f3:1d:d0:c5:ea:c8:30:67:35:1c:7a:a5:e6:
d0:2c:c7:39:56:d7:6e:d9:10:7d:5e:56:e5:b1:77:
82:8b:28:e7:73:a2:d9:ae:e5:73:da:75:89:d3:43:
3f:a7:83:23:19:f5:a2:18:1b:14:82:0c:fb:5e:fe:
bb:dd:53:87:bb:9c:4e:e9:39:aa:67:6a:2f:3d:bd:
1f:f9:72:c5:e1:e9:00:30:e8:7c:67:06:2f:35:ad:
9a:94:47:39:51:87:9f:d3:f1:29:62:23:fc:34:f7:
cc:fc:c8:63:56:80:a5:ce:64:b8:4b:4a:04:1f:10:
07:26:d3:7f:1e:a8:97:c4:57:78:6a:52:03:01:a7:
ff:32:8a:f7:cf:24:ab:1d:ac:83:21:4c:d2:dc:5c:
14:fc:fa:26:77:89:85:d7:eb:0d:27:0d:97:dc:3a:
0e:1c:fb:8a:6c:81:76:d7:6c:7a:6e:c9:29:d5:11:
af:61:08:3e:d3:8f:40:46:86:9f:15:72:d4:95:40:
f5:3f:a8:49:7d:98:73:39:8f:00:18:37:30:5d:c4:
67:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B3:12:A6:37:DB:5E:BC:B6:3D:92:74:93:3A:87:D1:97:A3:4E:91
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d7MSpjfbXry2PZJ0kzqH0ZejTpE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.104.0/21
Signature Algorithm: sha256WithRSAEncryption
78:c7:ae:43:55:e3:67:23:62:61:5f:0a:c0:41:c7:cf:46:44:
0c:8f:ef:89:d5:b9:4e:a9:5c:1b:f7:46:79:c2:76:b6:43:2a:
ab:7d:99:fe:f0:81:f8:bd:e2:98:c0:4a:82:10:82:f6:53:06:
1e:89:bd:c5:3c:bb:b8:04:24:e0:5b:e9:ca:8b:6f:0f:27:ed:
eb:a9:e3:ce:90:00:cb:06:bc:b5:6a:73:7e:9a:9f:e0:dd:9f:
6f:09:a9:6e:8d:02:af:2f:99:98:49:a0:d0:81:e6:32:37:31:
16:c1:15:3c:09:57:4f:66:ca:b5:9b:33:94:52:0b:e3:2c:e3:
61:73:5d:19:14:1d:79:41:d1:36:f8:74:00:68:a5:c0:b3:79:
4e:bd:ec:72:1e:bb:ad:4c:c9:f1:d7:a3:9d:89:4d:6b:e5:40:
4d:84:48:95:5e:77:81:e6:c7:de:11:b6:c8:a0:ae:88:e3:99:
f0:00:c7:bb:c9:5f:f9:d4:8e:cb:24:39:2a:72:fc:2b:55:15:
35:09:a5:bc:70:93:bf:cd:b5:d6:83:24:31:01:90:0f:de:a0:
9e:63:ca:d1:54:9b:b7:5d:49:61:9d:73:8d:93:e8:67:c8:4e:
0c:3a:6c:d9:11:3b:26:d9:dc:49:78:de:a0:70:4f:0b:4e:1e:
c6:6e:04:60
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHq8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA1MDQw
NzQ5MzFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDc3QjMxMkE2MzdEQjVF
QkNCNjNEOTI3NDkzM0E4N0QxOTdBMzRFOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTS8svDUlQv9UCb4ibydeGioFSFfd8abivg9ydR+SjwzRqRrJi
1PPSFgnwaqhH8x3QxerIMGc1HHql5tAsxzlW127ZEH1eVuWxd4KLKOdzotmu5XPa
dYnTQz+ngyMZ9aIYGxSCDPte/rvdU4e7nE7pOapnai89vR/5csXh6QAw6HxnBi81
rZqURzlRh5/T8SliI/w098z8yGNWgKXOZLhLSgQfEAcm038eqJfEV3hqUgMBp/8y
ivfPJKsdrIMhTNLcXBT8+iZ3iYXX6w0nDZfcOg4c+4psgXbXbHpuySnVEa9hCD7T
j0BGhp8VctSVQPU/qEl9mHM5jwAYNzBdxGeHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUd7MSpjfbXry2PZJ0kzqH0ZejTpEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Q3TVNwamZiWHJ5MlBaSjBr
enFIMFplalRwRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6GgwDQYJKoZIhvcNAQELBQADggEBAHjHrkNV42cjYmFfCsBBx89GRAyP74nVuU6p
XBv3RnnCdrZDKqt9mf7wgfi94pjASoIQgvZTBh6JvcU8u7gEJOBb6cqLbw8n7eup
486QAMsGvLVqc36an+Ddn28JqW6NAq8vmZhJoNCB5jI3MRbBFTwJV09myrWbM5RS
C+Ms42FzXRkUHXlB0Tb4dABopcCzeU697HIeu61MyfHXo52JTWvlQE2ESJVed4Hm
x94RtsigrojjmfAAx7vJX/nUjsskOSpy/CtVFTUJpbxwk7/NtdaDJDEBkA/eoJ5j
ytFUm7ddSWGdc42T6GfITgw6bNkROybZ3El43qBwTwtOHsZuBGA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org