Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hSmHF8B3egL0m7ChgNlKYb8svPk.roa
File: hSmHF8B3egL0m7ChgNlKYb8svPk.roa (raw, json)
Hash identifier: YKD1nLvDRbO9zr2AnWup4JcsG5B1XoIx8EKbEDti6vU=
Subject key identifier: 85:29:87:17:C0:77:7A:02:F4:9B:B0:A1:80:D9:4A:61:BF:2C:BC:F9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E21
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hSmHF8B3egL0m7ChgNlKYb8svPk.roa
Signing time: Tue 29 Sep 2020 09:55:22 +0000
ROA not before: Tue 29 Sep 2020 09:55:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 118.232.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3617 (0xe21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:22 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=85298717C0777A02F49BB0A180D94A61BF2CBCF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:00:be:de:05:4e:1a:cc:6a:6e:c0:41:49:
81:ae:04:6d:24:f7:9e:e3:60:10:7e:52:d3:e4:ad:
18:11:95:e2:d4:42:95:a6:31:67:03:f7:87:9c:4e:
0f:c8:26:0f:05:0b:c6:64:2d:6e:e1:75:28:02:31:
e6:0e:4d:67:5f:f3:83:10:27:13:0a:b3:67:4d:de:
af:44:7b:86:0f:32:ac:ec:29:b5:db:d7:6f:2b:97:
41:9f:ff:79:6a:6c:8e:63:70:22:7d:58:a0:c1:51:
87:d9:a0:fe:97:0e:56:11:ad:32:4f:8a:00:c9:c6:
20:f8:4d:ea:06:d0:c8:dd:25:12:70:b5:3b:48:90:
31:15:f5:9d:07:b2:d0:da:ba:d7:27:a3:fc:fc:9b:
01:6e:cb:b4:cf:9e:4f:3a:e5:c4:17:95:b3:d0:02:
d7:b9:7a:72:43:64:b6:6c:61:7b:c6:b5:30:91:de:
d8:7a:55:a9:63:af:5b:28:d6:28:90:77:3d:c2:c2:
e2:83:c1:ae:fa:9e:ca:68:3f:b2:b4:62:2f:3d:f6:
2f:b5:ef:29:e6:64:9f:f2:c9:c1:1b:7d:ce:0f:23:
1b:de:2e:e9:27:36:82:51:6d:75:5f:58:9e:fd:cd:
e1:a0:1f:5c:41:b1:9d:70:97:30:31:23:b7:e8:91:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:29:87:17:C0:77:7A:02:F4:9B:B0:A1:80:D9:4A:61:BF:2C:BC:F9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hSmHF8B3egL0m7ChgNlKYb8svPk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.64.0/19
Signature Algorithm: sha256WithRSAEncryption
04:c7:bb:73:0d:ac:fa:e1:2a:cc:d0:34:78:e9:c7:04:d3:f4:
1d:64:8a:33:2a:18:c1:23:0d:7f:14:fb:ec:bf:ed:89:20:9e:
a5:f8:25:8e:43:e1:d9:48:ce:d0:68:d5:66:02:9e:04:b7:1a:
76:0f:a6:17:20:a0:eb:e5:a2:ed:e6:25:4e:9b:a6:40:4c:54:
1d:d6:b0:aa:2f:2f:fe:16:10:90:bc:a3:ae:16:a4:aa:74:e9:
3e:8c:54:13:88:d3:f5:bb:62:53:63:86:66:d1:31:6d:6d:28:
57:ce:ac:86:04:20:66:7f:76:f2:77:15:ad:29:74:5a:fa:ac:
13:62:81:ba:5e:ac:7d:61:79:0a:a6:fd:99:87:68:f9:4f:8e:
14:65:54:eb:7e:81:cc:fd:d2:ee:14:11:fb:88:1f:4d:e5:05:
39:1a:56:a5:62:7a:de:8b:30:00:d1:11:70:f9:e7:1e:1b:50:
e1:00:2e:a5:80:e6:b3:55:ee:e3:1c:5e:71:72:92:d0:66:0d:
ed:76:4b:bb:ad:5a:3b:e8:8b:71:b6:ac:a4:3b:8b:57:97:a6:
e1:83:04:6f:01:1b:1f:ea:3d:38:a5:8d:bf:09:09:92:cf:63:
86:a5:5b:17:69:22:47:27:57:5d:18:42:cc:1d:5e:1a:46:fa:
0b:5e:4d:e2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDiEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MjJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDg1Mjk4NzE3QzA3NzdB
MDJGNDlCQjBBMTgwRDk0QTYxQkYyQ0JDRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK/AC+3gVOGsxqbsBBSYGuBG0k957jYBB+UtPkrRgRleLUQpWm
MWcD94ecTg/IJg8FC8ZkLW7hdSgCMeYOTWdf84MQJxMKs2dN3q9Ee4YPMqzsKbXb
128rl0Gf/3lqbI5jcCJ9WKDBUYfZoP6XDlYRrTJPigDJxiD4TeoG0MjdJRJwtTtI
kDEV9Z0HstDautcno/z8mwFuy7TPnk865cQXlbPQAte5enJDZLZsYXvGtTCR3th6
Valjr1so1iiQdz3CwuKDwa76nspoP7K0Yi899i+17ynmZJ/yycEbfc4PIxveLukn
NoJRbXVfWJ79zeGgH1xBsZ1wlzAxI7fokW3pAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUhSmHF8B3egL0m7ChgNlKYb8svPkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2hTbUhGOEIzZWdMMG03Q2hn
TmxLWWI4c3ZQay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2
6EAwDQYJKoZIhvcNAQELBQADggEBAATHu3MNrPrhKszQNHjpxwTT9B1kijMqGMEj
DX8U++y/7YkgnqX4JY5D4dlIztBo1WYCngS3GnYPphcgoOvlou3mJU6bpkBMVB3W
sKovL/4WEJC8o64WpKp06T6MVBOI0/W7YlNjhmbRMW1tKFfOrIYEIGZ/dvJ3Fa0p
dFr6rBNigbperH1heQqm/ZmHaPlPjhRlVOt+gcz90u4UEfuIH03lBTkaVqViet6L
MADREXD55x4bUOEALqWA5rNV7uMcXnFyktBmDe12S7utWjvoi3G2rKQ7i1eXpuGD
BG8BGx/qPTiljb8JCZLPY4alWxdpIkcnV10YQswdXhpG+gteTeI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org