Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/deAm__oz7cJLcB3zXrSzg1Zpu_E.roa
File: deAm__oz7cJLcB3zXrSzg1Zpu_E.roa (raw, json)
Hash identifier: QgdLaVrLkGBRBZQtHyfBO0R0s4iP+AQd/1DwkTtZ59w=
Subject key identifier: 75:E0:26:FF:FA:33:ED:C2:4B:70:1D:F3:5E:B4:B3:83:56:69:BB:F1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/deAm__oz7cJLcB3zXrSzg1Zpu_E.roa
Signing time: Thu 15 Sep 2022 02:45:05 +0000
ROA not before: Thu 15 Sep 2022 02:45:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=75E026FFFA33EDC24B701DF35EB4B3835669BBF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:ad:14:26:f6:cb:58:7f:e9:9b:81:7e:91:
c4:23:09:53:e9:9d:b2:b1:df:9c:bd:f7:2d:d5:15:
2e:41:89:57:fa:6a:75:03:05:92:aa:48:c9:11:69:
d1:37:e7:e5:bd:2a:45:6f:8f:b6:9c:ab:1c:0f:96:
e2:45:1d:72:b5:8d:6e:7a:2b:d3:0a:13:2c:b1:00:
11:bf:5c:4f:18:29:2e:64:2d:fc:c4:b0:9b:62:ac:
d5:23:80:20:bc:8f:a8:86:65:1b:99:b9:28:9f:e8:
df:1a:9f:2f:7b:d3:ae:b2:7f:32:3f:83:4f:08:0b:
42:d7:79:c9:b4:e6:80:b5:b1:0e:fd:48:58:43:47:
8f:76:1b:fe:7d:6f:5b:69:37:e5:aa:74:ed:91:61:
27:0e:66:eb:38:95:4b:4b:56:43:65:11:97:99:1b:
20:ee:92:15:fa:b6:88:4f:c8:66:d0:fa:7e:c2:79:
0f:50:e7:d3:0f:73:aa:24:89:8b:9b:5a:2e:17:7a:
0a:aa:ec:c2:16:55:0b:08:29:5d:2e:68:c0:4e:7a:
8d:c8:02:80:4f:5f:3c:3a:cc:15:3f:99:11:33:3f:
69:a7:4e:d3:37:ef:d6:6f:a2:41:d4:7c:7b:4a:bd:
24:3e:61:eb:75:8e:ce:88:33:e0:6f:8f:c1:98:18:
b5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E0:26:FF:FA:33:ED:C2:4B:70:1D:F3:5E:B4:B3:83:56:69:BB:F1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/deAm__oz7cJLcB3zXrSzg1Zpu_E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.48.0/22
Signature Algorithm: sha256WithRSAEncryption
42:19:63:bb:9b:e0:78:56:00:be:bf:a9:b9:d1:4e:2e:d5:c4:
d6:a9:52:6e:67:c2:98:19:cb:47:e4:84:c2:c6:eb:39:ba:c5:
d3:b8:0e:c5:b8:7b:fb:69:bd:5b:79:fd:05:30:d3:64:0a:9c:
81:48:02:67:c1:1e:82:ac:29:d0:f1:28:c6:b6:b7:e1:07:3c:
19:a2:c9:d7:43:03:62:eb:14:41:55:22:4c:bc:d9:f1:27:24:
2c:47:86:69:4d:45:0a:54:93:85:12:d6:25:4f:da:ac:5b:d7:
87:f2:e4:f8:73:de:99:2a:63:58:2a:08:73:a3:aa:cc:a1:26:
f4:cf:99:88:ac:3a:03:89:e2:1b:92:de:32:91:3c:c6:31:bb:
a3:c0:86:12:86:12:bd:d4:e2:a5:d3:9c:35:39:19:db:0a:26:
42:ae:cd:15:ba:a5:ed:56:d1:3e:6e:6e:36:18:81:d8:84:53:
73:76:2b:4c:09:98:96:c8:3c:1f:f1:cc:7a:ee:af:32:6a:f2:
70:4d:98:76:11:d3:58:2d:f1:75:a5:88:2b:cf:a9:c9:43:ca:
c0:e1:da:a1:1b:7c:dd:e9:b4:a6:83:a2:04:47:db:95:08:a0:
10:84:09:a0:fb:a5:ff:80:29:7d:47:97:2e:e6:ed:f3:52:19:
f0:1a:95:a9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDc1RTAyNkZGRkEzM0VE
QzI0QjcwMURGMzVFQjRCMzgzNTY2OUJCRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCccq0UJvbLWH/pm4F+kcQjCVPpnbKx35y99y3VFS5BiVf6anUD
BZKqSMkRadE35+W9KkVvj7acqxwPluJFHXK1jW56K9MKEyyxABG/XE8YKS5kLfzE
sJtirNUjgCC8j6iGZRuZuSif6N8any97066yfzI/g08IC0LXecm05oC1sQ79SFhD
R492G/59b1tpN+WqdO2RYScOZus4lUtLVkNlEZeZGyDukhX6tohPyGbQ+n7CeQ9Q
59MPc6okiYubWi4Xegqq7MIWVQsIKV0uaMBOeo3IAoBPXzw6zBU/mREzP2mnTtM3
79ZvokHUfHtKvSQ+Yet1js6IM+Bvj8GYGLUhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUdeAm//oz7cJLcB3zXrSzg1Zpu/EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2RlQW1fX296N2NKTGNCM3pY
clN6ZzFacHVfRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6DAwDQYJKoZIhvcNAQELBQADggEBAEIZY7ub4HhWAL6/qbnRTi7VxNapUm5nwpgZ
y0fkhMLG6zm6xdO4DsW4e/tpvVt5/QUw02QKnIFIAmfBHoKsKdDxKMa2t+EHPBmi
yddDA2LrFEFVIky82fEnJCxHhmlNRQpUk4US1iVP2qxb14fy5Phz3pkqY1gqCHOj
qsyhJvTPmYisOgOJ4huS3jKRPMYxu6PAhhKGEr3U4qXTnDU5GdsKJkKuzRW6pe1W
0T5ubjYYgdiEU3N2K0wJmJbIPB/xzHrurzJq8nBNmHYR01gt8XWliCvPqclDysDh
2qEbfN3ptKaDogRH25UIoBCECaD7pf+AKX1Hly7m7fNSGfAalak=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:19 2025 by rpki-client