Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hCcLZx5tBwozGuB7thuj9bQLb7s.roa
File: hCcLZx5tBwozGuB7thuj9bQLb7s.roa (raw, json)
Hash identifier: H+tXIrSVNfm6kplEQxj4Ke9/Jh3fK4nzIjb4RAIIrmE=
Subject key identifier: 84:27:0B:67:1E:6D:07:0A:33:1A:E0:7B:B6:1B:A3:F5:B4:0B:6F:BB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 205C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hCcLZx5tBwozGuB7thuj9bQLb7s.roa
Signing time: Fri 25 Nov 2022 04:38:37 +0000
ROA not before: Fri 25 Nov 2022 04:38:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8284 (0x205c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=84270B671E6D070A331AE07BB61BA3F5B40B6FBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:79:7d:8e:1d:12:66:81:8b:7e:15:d2:1f:
c6:be:d6:74:20:aa:3c:cb:be:6a:63:98:0d:d5:64:
82:b8:ba:73:0e:4d:de:79:99:66:ee:66:e9:cb:e2:
db:50:61:b0:52:eb:97:22:29:14:d5:1b:2b:fe:48:
9f:a4:f9:8b:6a:77:c6:4d:db:21:df:dd:6d:d7:5b:
a7:31:83:0d:fe:24:f3:e1:ce:fa:b4:8d:25:62:3e:
9f:10:46:47:4b:b1:67:cc:af:75:fa:6b:b1:43:4a:
32:d2:c4:d3:03:41:57:c6:3e:a4:06:58:34:5c:18:
bf:ee:4a:da:16:d9:2a:bd:46:de:84:12:ef:1b:82:
a3:88:ca:3f:d4:34:c1:33:25:00:10:bc:8f:9a:76:
16:00:86:09:bc:47:23:fe:ce:01:c7:3c:23:79:77:
13:9d:02:f1:61:96:05:7d:c2:71:95:31:3a:34:14:
e1:5f:cc:34:42:3b:03:65:8f:71:75:61:f6:96:52:
57:ca:67:aa:54:38:dd:56:f8:d6:42:c8:c6:fd:df:
80:7d:ab:c4:63:c5:3a:87:bf:b8:7a:e0:dc:3c:41:
13:2b:ab:1f:46:4b:d2:fb:1d:fb:60:7c:dd:9d:bc:
8f:e7:46:5e:ea:b3:77:f8:12:0b:8e:c5:2a:e9:28:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:27:0B:67:1E:6D:07:0A:33:1A:E0:7B:B6:1B:A3:F5:B4:0B:6F:BB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hCcLZx5tBwozGuB7thuj9bQLb7s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.77.0/24
Signature Algorithm: sha256WithRSAEncryption
40:47:b3:04:25:30:8e:29:05:56:3a:74:2f:13:e9:67:7b:76:
25:79:70:5f:b3:1f:e6:30:f3:c6:00:ac:1b:a9:f7:c9:48:ac:
8d:b8:94:be:96:00:0e:c4:e6:36:48:43:ae:d4:42:3e:98:4a:
86:20:09:21:c1:74:38:44:0b:f5:7b:9b:f5:aa:88:cf:07:01:
df:12:11:ed:9d:a8:68:9e:aa:2c:45:f0:21:2c:d0:b8:e2:9a:
41:44:79:8a:5b:9c:57:40:d9:8c:3e:4c:a8:a1:cc:a5:c6:65:
ed:25:ad:5e:2b:ac:f5:b5:cc:a5:74:80:49:2a:29:a3:ee:1c:
87:4b:4d:2d:46:84:69:ac:a3:c5:69:3d:73:ff:47:0f:3a:0e:
5b:99:ca:25:ee:a9:73:a9:a7:96:d3:c1:0c:e4:c6:7c:33:06:
98:d0:dd:30:76:0b:fe:48:ac:86:dc:14:2b:06:e1:af:c1:31:
12:63:d4:c0:9f:ba:e8:5b:a0:5c:2c:0f:c1:c4:63:53:e4:61:
76:8e:ca:2d:97:aa:4f:4f:4c:c3:75:0c:a5:3f:34:f7:62:22:
ff:57:94:bd:f5:31:76:fd:13:cc:47:2c:5a:7f:ee:0f:27:4e:
96:e2:ff:b0:0b:0a:80:3c:4c:ae:ff:2f:66:a4:96:34:79:e1:
b1:f0:62:b6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIFwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4MzdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDg0MjcwQjY3MUU2RDA3
MEEzMzFBRTA3QkI2MUJBM0Y1QjQwQjZGQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFb3l9jh0SZoGLfhXSH8a+1nQgqjzLvmpjmA3VZIK4unMOTd55
mWbuZunL4ttQYbBS65ciKRTVGyv+SJ+k+Ytqd8ZN2yHf3W3XW6cxgw3+JPPhzvq0
jSViPp8QRkdLsWfMr3X6a7FDSjLSxNMDQVfGPqQGWDRcGL/uStoW2Sq9Rt6EEu8b
gqOIyj/UNMEzJQAQvI+adhYAhgm8RyP+zgHHPCN5dxOdAvFhlgV9wnGVMTo0FOFf
zDRCOwNlj3F1YfaWUlfKZ6pUON1W+NZCyMb934B9q8RjxTqHv7h64Nw8QRMrqx9G
S9L7HftgfN2dvI/nRl7qs3f4EguOxSrpKKh5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUhCcLZx5tBwozGuB7thuj9bQLb7swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2hDY0xaeDV0Qndvekd1Qjd0
aHVqOWJRTGI3cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2
6E0wDQYJKoZIhvcNAQELBQADggEBAEBHswQlMI4pBVY6dC8T6Wd7diV5cF+zH+Yw
88YArBup98lIrI24lL6WAA7E5jZIQ67UQj6YSoYgCSHBdDhEC/V7m/WqiM8HAd8S
Ee2dqGieqixF8CEs0LjimkFEeYpbnFdA2Yw+TKihzKXGZe0lrV4rrPW1zKV0gEkq
KaPuHIdLTS1GhGmso8VpPXP/Rw86DluZyiXuqXOpp5bTwQzkxnwzBpjQ3TB2C/5I
rIbcFCsG4a/BMRJj1MCfuuhboFwsD8HEY1PkYXaOyi2Xqk9PTMN1DKU/NPdiIv9X
lL31MXb9E8xHLFp/7g8nTpbi/7ALCoA8TK7/L2akljR54bHwYrY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org