Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f7nhAzUZ0tAdJshOJg8g0cMzFA4.roa
File: f7nhAzUZ0tAdJshOJg8g0cMzFA4.roa (raw, json)
Hash identifier: zhhEFdztmR3tarGsCoCS6zzLWO/dW1OoLcSh7CfAC3k=
Subject key identifier: 7F:B9:E1:03:35:19:D2:D0:1D:26:C8:4E:26:0F:20:D1:C3:33:14:0E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D95
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f7nhAzUZ0tAdJshOJg8g0cMzFA4.roa
Signing time: Tue 29 Sep 2020 09:54:44 +0000
ROA not before: Tue 29 Sep 2020 09:54:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3477 (0xd95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:44 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7FB9E1033519D2D01D26C84E260F20D1C333140E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:3f:83:79:51:08:d5:af:97:75:6b:d4:ed:
a5:66:34:64:aa:6b:aa:dc:09:ef:b9:b2:6d:71:ee:
62:a7:80:a0:c5:aa:97:a0:73:f7:52:8b:5f:61:17:
48:75:b7:ef:20:8c:ab:5e:88:62:11:2e:9f:a4:2e:
df:d7:69:2e:d7:5a:24:de:90:2d:fd:2f:9f:be:12:
28:d9:36:11:1f:00:20:77:5f:ea:37:44:14:b9:bc:
8d:2e:0a:cb:63:71:74:f6:54:92:aa:a2:8e:e5:ad:
69:0c:89:38:83:a6:3d:a9:a7:1a:13:5b:f4:64:f5:
1e:e3:5f:60:70:6d:d2:21:a8:c8:3d:1d:6c:c8:b5:
29:6c:4c:3c:03:25:8a:96:a9:05:0b:02:19:34:f0:
f3:82:c0:1f:f0:9f:2f:5d:e6:66:f3:fa:10:e7:86:
80:a8:92:6f:fc:df:1f:e5:d2:5b:6a:19:ad:ea:a7:
f4:41:a2:c5:6f:1e:6d:51:84:87:9b:15:b2:09:dd:
22:2b:0b:ad:9c:2b:fe:b0:b7:3e:0b:28:8d:05:b1:
55:f0:ec:b9:df:59:6a:b4:88:ec:0e:d7:bf:e5:bf:
0e:7f:0c:4c:db:2d:02:ce:ac:ec:db:74:3b:de:a7:
8f:95:43:07:4d:f9:e8:16:b0:52:7b:66:2c:da:23:
1e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B9:E1:03:35:19:D2:D0:1D:26:C8:4E:26:0F:20:D1:C3:33:14:0E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f7nhAzUZ0tAdJshOJg8g0cMzFA4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.40.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:68:43:69:25:bc:c3:d6:cb:29:26:da:c8:37:92:96:dc:a1:
33:e0:3c:72:9b:b0:85:4b:50:da:5c:39:a5:55:f6:53:ac:a0:
31:9f:7c:56:5a:32:ed:1b:6f:e2:f0:2d:65:52:20:ad:c6:b2:
83:36:e9:8a:d4:a0:2f:0d:12:fe:8e:ae:45:02:43:e1:fc:3f:
cc:42:27:7d:2c:a8:36:bf:20:ff:c9:ba:ca:64:4e:62:52:70:
fc:63:a1:d9:bd:84:12:ad:0a:4d:2b:46:f2:c5:31:82:2c:91:
c2:39:24:53:57:ef:1a:e6:b0:99:2b:13:06:32:b1:9c:4c:97:
d9:1b:3f:48:ab:83:87:5b:de:13:02:42:c7:cf:87:19:9e:45:
ec:9e:22:6c:fc:ff:c9:ce:4e:e8:16:67:75:d7:63:61:52:4d:
ae:62:61:42:69:51:6d:ff:c5:15:81:1e:a9:e7:0b:15:05:95:
29:69:b7:86:30:d5:62:5b:6c:68:fc:47:ef:77:db:1a:90:e9:
71:1d:38:47:e3:9f:21:70:a9:78:d7:73:3d:89:e0:8e:2b:32:
6c:db:80:e4:7b:15:6e:b4:16:39:3f:f9:77:a1:20:e4:ca:b6:
db:05:e4:cc:17:e0:a9:54:1a:45:42:21:60:39:52:e2:ea:2e:
86:f0:b4:db
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDZUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0NDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdGQjlFMTAzMzUxOUQy
RDAxRDI2Qzg0RTI2MEYyMEQxQzMzMzE0MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1pj+DeVEI1a+XdWvU7aVmNGSqa6rcCe+5sm1x7mKngKDFqpeg
c/dSi19hF0h1t+8gjKteiGIRLp+kLt/XaS7XWiTekC39L5++EijZNhEfACB3X+o3
RBS5vI0uCstjcXT2VJKqoo7lrWkMiTiDpj2ppxoTW/Rk9R7jX2BwbdIhqMg9HWzI
tSlsTDwDJYqWqQULAhk08POCwB/wny9d5mbz+hDnhoCokm/83x/l0ltqGa3qp/RB
osVvHm1RhIebFbIJ3SIrC62cK/6wtz4LKI0FsVXw7LnfWWq0iOwO17/lvw5/DEzb
LQLOrOzbdDvep4+VQwdN+egWsFJ7ZizaIx5dAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUf7nhAzUZ0tAdJshOJg8g0cMzFA4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Y3bmhBelVaMHRBZEpzaE9K
ZzhnMGNNekZBNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6SgwDQYJKoZIhvcNAQELBQADggEBAHpoQ2klvMPWyykm2sg3kpbcoTPgPHKbsIVL
UNpcOaVV9lOsoDGffFZaMu0bb+LwLWVSIK3GsoM26YrUoC8NEv6OrkUCQ+H8P8xC
J30sqDa/IP/JuspkTmJScPxjodm9hBKtCk0rRvLFMYIskcI5JFNX7xrmsJkrEwYy
sZxMl9kbP0irg4db3hMCQsfPhxmeReyeImz8/8nOTugWZ3XXY2FSTa5iYUJpUW3/
xRWBHqnnCxUFlSlpt4Yw1WJbbGj8R+932xqQ6XEdOEfjnyFwqXjXcz2J4I4rMmzb
gOR7FW60Fjk/+XehIOTKttsF5MwX4KlUGkVCIWA5UuLqLobwtNs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org