Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i88LF8fB9BIocnGAoI4gmx6fjAY.roa
File: i88LF8fB9BIocnGAoI4gmx6fjAY.roa (raw, json)
Hash identifier: p7vXH+P6MVigGH12vhGmLFEo3y/hH+RkQIIUWqNQ95o=
Subject key identifier: 8B:CF:0B:17:C7:C1:F4:12:28:72:71:80:A0:8E:20:9B:1E:9F:8C:06
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CC6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i88LF8fB9BIocnGAoI4gmx6fjAY.roa
Signing time: Wed 29 Sep 2021 02:48:11 +0000
ROA not before: Wed 29 Sep 2021 02:48:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.232.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7366 (0x1cc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8BCF0B17C7C1F41228727180A08E209B1E9F8C06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:43:47:b7:69:94:38:8e:d7:91:88:ef:e0:
2a:87:cf:8b:4f:cf:44:4b:3e:e5:d6:2c:ce:57:d8:
e5:5a:b9:31:77:25:f6:38:4f:ac:a2:59:85:06:f9:
6a:54:66:3f:4c:b1:85:ac:ee:89:23:e3:dd:e5:cb:
16:3a:30:69:6a:b0:3e:6b:b7:a0:af:ff:62:93:14:
5a:0e:df:c0:e4:05:40:84:14:15:56:fd:73:66:92:
b6:6d:b4:0b:0c:94:b9:73:a7:b2:1a:1d:8d:e8:74:
70:c8:2e:bd:f1:9f:77:a2:67:35:9f:1e:9c:b6:52:
7d:1e:4a:74:a0:e2:d7:a4:08:4e:bf:9c:eb:3d:da:
39:1a:4b:28:c7:d9:cf:04:e1:5c:c1:0f:9e:a5:aa:
5b:48:d0:19:7f:c1:d5:6d:3a:6c:75:9f:df:8b:58:
6d:ae:d1:3b:99:25:e6:9c:74:2e:61:56:73:8c:be:
d7:b5:e1:18:ae:6c:11:9e:46:c8:fd:05:2d:db:cb:
eb:46:fb:7b:ec:38:13:63:60:f2:1a:c9:a7:15:d7:
0d:d6:3d:89:0f:f1:07:10:61:52:4d:b9:b1:aa:f8:
b8:a1:b2:54:d8:59:e4:ef:7f:42:b0:82:ac:40:10:
81:80:6f:95:43:82:9f:4d:03:b4:52:60:11:e5:94:
53:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CF:0B:17:C7:C1:F4:12:28:72:71:80:A0:8E:20:9B:1E:9F:8C:06
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i88LF8fB9BIocnGAoI4gmx6fjAY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.248.0/21
Signature Algorithm: sha256WithRSAEncryption
56:6a:37:bf:df:3c:e8:31:6e:f1:a1:e1:e7:0b:93:68:43:ea:
e5:c8:c7:7b:5e:52:d9:2d:85:ca:68:62:03:89:21:ff:89:df:
ee:b5:48:c8:fb:bd:64:b7:82:60:eb:90:cf:6e:d0:1a:3c:e1:
4d:72:0b:7a:04:cf:b7:ff:04:91:7c:69:63:54:c3:1c:86:5d:
9f:33:9f:71:cb:01:2c:d3:e6:bb:d5:ff:d0:b7:82:18:b2:22:
02:ec:ce:10:06:08:39:01:88:c1:8c:48:d5:78:e2:3f:4f:31:
93:18:11:fa:28:80:6a:86:05:a5:5e:8d:4a:e3:d0:0b:90:37:
27:84:0b:e1:02:e3:28:55:92:e6:16:4a:34:14:57:2c:47:1c:
79:b7:f3:c7:db:f2:28:0b:62:69:fd:8b:0f:21:07:e1:c6:d7:
44:e7:5e:ec:4a:54:12:3f:50:80:fe:53:3f:44:8d:45:8a:d7:
d5:08:75:3a:49:e1:f5:91:17:c4:20:49:15:85:51:23:0c:ef:
83:00:48:dc:03:4d:33:44:4e:e1:8c:7b:93:79:b7:13:7b:04:
94:38:3c:30:c7:80:55:f0:cf:dd:11:7a:74:82:4b:1f:ef:ed:
ce:ff:c6:7e:dc:7b:cf:ed:fa:ae:a4:54:46:c6:2d:70:ed:00:
74:6c:77:7b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHMYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4MTFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDhCQ0YwQjE3QzdDMUY0
MTIyODcyNzE4MEEwOEUyMDlCMUU5RjhDMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsB0NHt2mUOI7XkYjv4CqHz4tPz0RLPuXWLM5X2OVauTF3JfY4
T6yiWYUG+WpUZj9MsYWs7okj493lyxY6MGlqsD5rt6Cv/2KTFFoO38DkBUCEFBVW
/XNmkrZttAsMlLlzp7IaHY3odHDILr3xn3eiZzWfHpy2Un0eSnSg4tekCE6/nOs9
2jkaSyjH2c8E4VzBD56lqltI0Bl/wdVtOmx1n9+LWG2u0TuZJeacdC5hVnOMvte1
4RiubBGeRsj9BS3by+tG+3vsOBNjYPIayacV1w3WPYkP8QcQYVJNubGq+LihslTY
WeTvf0KwgqxAEIGAb5VDgp9NA7RSYBHllFM9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUi88LF8fB9BIocnGAoI4gmx6fjAYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2k4OExGOGZCOUJJb2NuR0Fv
STRnbXg2ZmpBWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6PgwDQYJKoZIhvcNAQELBQADggEBAFZqN7/fPOgxbvGh4ecLk2hD6uXIx3teUtkt
hcpoYgOJIf+J3+61SMj7vWS3gmDrkM9u0Bo84U1yC3oEz7f/BJF8aWNUwxyGXZ8z
n3HLASzT5rvV/9C3ghiyIgLszhAGCDkBiMGMSNV44j9PMZMYEfoogGqGBaVejUrj
0AuQNyeEC+EC4yhVkuYWSjQUVyxHHHm388fb8igLYmn9iw8hB+HG10TnXuxKVBI/
UID+Uz9EjUWK19UIdTpJ4fWRF8QgSRWFUSMM74MASNwDTTNETuGMe5N5txN7BJQ4
PDDHgFXwz90RenSCSx/v7c7/xn7ce8/t+q6kVEbGLXDtAHRsd3s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org