Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hz3ZZTTNwZevfBgAiuxgDDqoyHY.roa
File: hz3ZZTTNwZevfBgAiuxgDDqoyHY.roa (raw, json)
Hash identifier: FBBzGU6djqTorbcLIvtCYWowrP7cjMjsghoqhSqRryU=
Subject key identifier: 87:3D:D9:65:34:CD:C1:97:AF:7C:18:00:8A:EC:60:0C:3A:A8:C8:76
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2038
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hz3ZZTTNwZevfBgAiuxgDDqoyHY.roa
Signing time: Fri 25 Nov 2022 04:38:28 +0000
ROA not before: Fri 25 Nov 2022 04:38:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8248 (0x2038)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=873DD96534CDC197AF7C18008AEC600C3AA8C876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1b:c0:5f:a9:fb:4f:8b:b2:d0:7e:9f:4c:7e:
54:00:87:cf:10:34:12:51:5d:c9:e8:60:ec:23:a8:
43:cf:43:fb:9f:51:7e:6e:a9:ab:a0:3e:3d:30:de:
b8:c7:3b:71:fe:7f:ec:74:af:ac:3e:81:3f:b1:d5:
5e:44:5f:2b:82:4d:79:cc:fa:29:46:e7:c8:e1:16:
eb:74:ee:72:11:3e:9a:9b:27:4e:dd:63:a1:10:21:
f8:bc:86:0f:90:19:5b:24:ca:7e:da:6a:01:46:cb:
dd:a6:3b:b5:b4:19:c5:d6:6b:e9:e3:ee:d2:1e:4c:
75:64:cd:05:55:87:e3:3d:36:7e:f2:29:f9:d2:86:
28:fc:b6:2a:16:d4:5c:62:8f:55:23:05:2e:e8:c5:
54:dd:2d:28:10:22:65:51:35:47:3d:ef:75:ee:29:
ea:1c:ea:21:4c:e1:5a:3b:f7:14:05:00:57:d0:e5:
96:c7:b0:a3:a9:22:82:04:74:ae:7f:a2:f1:22:3b:
df:24:9c:cb:9d:8f:07:e0:01:b5:3b:2d:fa:08:c5:
04:5f:9b:0d:76:cb:1d:7b:61:89:c0:90:ef:83:05:
89:46:f5:58:82:56:bf:97:5b:91:63:4f:f1:87:d2:
30:59:51:63:49:ec:f0:2b:94:31:1c:9c:61:13:8f:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3D:D9:65:34:CD:C1:97:AF:7C:18:00:8A:EC:60:0C:3A:A8:C8:76
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hz3ZZTTNwZevfBgAiuxgDDqoyHY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.179.0/24
Signature Algorithm: sha256WithRSAEncryption
00:71:45:a3:4c:c5:5c:8c:62:8c:6d:94:47:ee:02:c5:90:83:
ff:63:a0:a3:db:36:46:3b:09:d6:0a:03:cd:72:32:52:ad:90:
98:93:5e:d8:0e:d6:a7:66:4e:6f:41:72:10:47:3a:4d:6a:b5:
47:fb:82:e4:aa:79:1c:b5:b7:39:ee:5e:4d:7e:ae:50:9f:6a:
7f:19:02:52:bc:b4:46:ed:ac:09:bc:80:4a:08:30:9f:b9:eb:
fe:85:52:41:15:be:d2:6b:d8:c6:ed:ce:45:4f:d8:87:7c:f2:
36:37:7a:00:c5:a0:99:56:75:bb:80:32:30:a4:df:0f:58:41:
51:27:55:c6:f6:b3:14:38:74:bc:e0:78:a5:a1:19:52:3f:31:
c2:2a:0e:59:dd:d6:d8:50:8e:2d:7a:55:b9:7d:12:21:06:38:
98:e2:70:06:4f:21:11:96:51:78:c9:b9:34:fc:3f:a9:91:3c:
7f:87:01:5a:43:ce:bf:cb:f5:e9:c3:8f:86:30:fd:56:38:4a:
2c:88:ac:1d:42:b9:6d:d9:4c:73:33:61:e4:1b:87:d7:d7:30:
c9:e8:e7:6f:da:b2:e0:b7:89:13:45:98:df:b7:c6:f5:81:2b:
13:44:3a:b4:e9:90:88:4b:30:8b:68:6c:6b:34:74:37:03:a7:
8a:58:8a:76
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIDgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4MjhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDg3M0REOTY1MzRDREMx
OTdBRjdDMTgwMDhBRUM2MDBDM0FBOEM4NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOG8BfqftPi7LQfp9MflQAh88QNBJRXcnoYOwjqEPPQ/ufUX5u
qaugPj0w3rjHO3H+f+x0r6w+gT+x1V5EXyuCTXnM+ilG58jhFut07nIRPpqbJ07d
Y6EQIfi8hg+QGVskyn7aagFGy92mO7W0GcXWa+nj7tIeTHVkzQVVh+M9Nn7yKfnS
hij8tioW1Fxij1UjBS7oxVTdLSgQImVRNUc973XuKeoc6iFM4Vo79xQFAFfQ5ZbH
sKOpIoIEdK5/ovEiO98knMudjwfgAbU7LfoIxQRfmw12yx17YYnAkO+DBYlG9ViC
Vr+XW5FjT/GH0jBZUWNJ7PArlDEcnGETj+xVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUhz3ZZTTNwZevfBgAiuxgDDqoyHYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2h6M1paVFROd1pldmZCZ0Fp
dXhnRERxb3lIWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2
6bMwDQYJKoZIhvcNAQELBQADggEBAABxRaNMxVyMYoxtlEfuAsWQg/9joKPbNkY7
CdYKA81yMlKtkJiTXtgO1qdmTm9BchBHOk1qtUf7guSqeRy1tznuXk1+rlCfan8Z
AlK8tEbtrAm8gEoIMJ+56/6FUkEVvtJr2MbtzkVP2Id88jY3egDFoJlWdbuAMjCk
3w9YQVEnVcb2sxQ4dLzgeKWhGVI/McIqDlnd1thQji16Vbl9EiEGOJjicAZPIRGW
UXjJuTT8P6mRPH+HAVpDzr/L9enDj4Yw/VY4SiyIrB1CuW3ZTHMzYeQbh9fXMMno
52/asuC3iRNFmN+3xvWBKxNEOrTpkIhLMItobGs0dDcDp4pYinY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org