Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gnp7xNo3jTZiPI-QPA8Voc8RZCw.roa
File: gnp7xNo3jTZiPI-QPA8Voc8RZCw.roa (raw, json)
Hash identifier: 9TKUt4b6eux8WgBgwnRclD3N3pG8xm6AIV/L/gJiMM8=
Subject key identifier: 82:7A:7B:C4:DA:37:8D:36:62:3C:8F:90:3C:0F:15:A1:CF:11:64:2C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gnp7xNo3jTZiPI-QPA8Voc8RZCw.roa
Signing time: Thu 15 Sep 2022 02:45:49 +0000
ROA not before: Thu 15 Sep 2022 02:45:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=827A7BC4DA378D36623C8F903C0F15A1CF11642C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:72:0c:d8:6d:5f:96:df:d0:56:42:13:ca:
f2:c8:c5:96:7e:7e:7f:d0:ac:40:17:94:88:a4:b5:
b5:e4:5b:99:30:4a:a6:f0:4c:06:05:82:59:df:47:
e6:1c:36:d3:ba:59:c2:3c:3b:67:36:84:17:2b:b9:
08:52:83:dc:08:9b:6c:16:9e:b6:f4:82:bb:5f:d3:
b1:ac:d9:2c:73:e7:57:c8:78:75:2d:e3:68:9c:4f:
f4:cd:13:d2:e6:f9:be:95:0b:af:0d:2b:33:84:79:
19:68:33:f4:38:e7:ac:c2:8f:c8:73:ff:79:5d:3d:
d0:0b:96:b5:eb:17:3d:b7:18:48:58:91:f4:a8:a6:
04:26:d2:ca:45:3c:ac:65:6b:84:51:f2:f9:ce:7b:
fc:96:41:da:04:16:cc:38:e2:d4:8c:57:5c:92:07:
c0:7a:34:6e:8b:fe:21:f2:17:d0:7f:19:d3:ca:65:
77:07:86:91:05:c9:92:f2:8a:49:0d:ea:fa:bd:4e:
e6:94:93:02:6e:48:3d:a4:a9:b2:28:33:97:c5:c9:
71:f5:6a:00:9b:4a:b4:1d:10:eb:b5:24:62:14:ba:
7e:a8:ca:71:bd:3e:6b:1b:17:3c:cf:70:4d:a5:b1:
72:ee:65:ce:67:d8:66:bb:00:5c:ec:8f:fd:1b:95:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7A:7B:C4:DA:37:8D:36:62:3C:8F:90:3C:0F:15:A1:CF:11:64:2C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gnp7xNo3jTZiPI-QPA8Voc8RZCw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.84.0/22
Signature Algorithm: sha256WithRSAEncryption
99:82:9c:27:47:4d:01:c8:18:9c:84:55:39:c1:a4:25:41:a4:
f6:de:b9:6b:37:1e:5c:17:24:c2:af:3b:08:ad:c4:7b:e3:44:
26:c0:66:0b:fc:f2:25:c3:02:b3:e4:da:2d:f8:32:82:79:1f:
ef:3a:6e:0e:d1:eb:eb:3e:92:0b:01:51:53:be:c0:e2:39:50:
cc:92:12:2a:f8:3c:65:ae:2f:26:5e:14:77:5f:b2:66:9b:de:
33:ed:b2:eb:db:23:24:b8:9f:e7:3c:05:80:df:91:49:53:ba:
5a:b1:4e:a9:f1:1e:6a:07:bb:a2:20:4d:55:62:4b:26:d5:b5:
e4:3e:92:27:ea:58:9e:e1:5d:42:d3:0e:0e:b3:cd:a9:5c:30:
c0:3b:f1:e9:6b:06:a3:a2:79:57:c9:af:6f:fb:50:94:88:8e:
b1:4f:a3:09:2e:a4:0d:2a:9a:32:54:e3:6b:1a:2e:d3:53:5e:
25:6a:a2:2b:63:16:b2:12:ad:ae:fb:c3:3c:c0:6b:f9:d0:68:
7e:9e:0f:d9:c6:79:fe:f6:53:98:92:43:1b:9c:9f:75:53:0d:
2e:1c:f6:5c:69:21:c9:68:3a:0e:c8:fe:75:15:fb:71:20:11:
dc:ca:21:c0:25:ac:7c:54:ee:70:c5:3a:4f:08:40:55:99:d5:
ad:cf:10:ea
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1NDlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDgyN0E3QkM0REEzNzhE
MzY2MjNDOEY5MDNDMEYxNUExQ0YxMTY0MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVWXIM2G1flt/QVkITyvLIxZZ+fn/QrEAXlIiktbXkW5kwSqbw
TAYFglnfR+YcNtO6WcI8O2c2hBcruQhSg9wIm2wWnrb0grtf07Gs2Sxz51fIeHUt
42icT/TNE9Lm+b6VC68NKzOEeRloM/Q456zCj8hz/3ldPdALlrXrFz23GEhYkfSo
pgQm0spFPKxla4RR8vnOe/yWQdoEFsw44tSMV1ySB8B6NG6L/iHyF9B/GdPKZXcH
hpEFyZLyikkN6vq9TuaUkwJuSD2kqbIoM5fFyXH1agCbSrQdEOu1JGIUun6oynG9
PmsbFzzPcE2lsXLuZc5n2Ga7AFzsj/0blSCxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUgnp7xNo3jTZiPI+QPA8Voc8RZCwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ducDd4Tm8zalRaaVBJLVFQ
QThWb2M4UlpDdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6VQwDQYJKoZIhvcNAQELBQADggEBAJmCnCdHTQHIGJyEVTnBpCVBpPbeuWs3HlwX
JMKvOwitxHvjRCbAZgv88iXDArPk2i34MoJ5H+86bg7R6+s+kgsBUVO+wOI5UMyS
Eir4PGWuLyZeFHdfsmab3jPtsuvbIyS4n+c8BYDfkUlTulqxTqnxHmoHu6IgTVVi
SybVteQ+kifqWJ7hXULTDg6zzalcMMA78elrBqOieVfJr2/7UJSIjrFPowkupA0q
mjJU42saLtNTXiVqoitjFrISra77wzzAa/nQaH6eD9nGef72U5iSQxucn3VTDS4c
9lxpIcloOg7I/nUV+3EgEdzKIcAlrHxU7nDFOk8IQFWZ1a3PEOo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org