Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/java0HBlMBUN-_9BNKbzcTaeszo.roa
File: java0HBlMBUN-_9BNKbzcTaeszo.roa (raw, json)
Hash identifier: Y1Z7hEu3F5thAmH5zkT2xRe98fe8JsDas6AKbIJKzCM=
Subject key identifier: 8D:AB:DA:D0:70:65:30:15:0D:FB:FF:41:34:A6:F3:71:36:9E:B3:3A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C7E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/java0HBlMBUN-_9BNKbzcTaeszo.roa
Signing time: Wed 29 Sep 2021 02:47:50 +0000
ROA not before: Wed 29 Sep 2021 02:47:50 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.232.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7294 (0x1c7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:50 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8DABDAD0706530150DFBFF4134A6F371369EB33A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:57:47:d9:05:97:db:6c:44:c3:1f:c9:52:
8d:62:a4:6b:e7:f1:30:08:6a:f3:a3:62:bc:af:3e:
f2:0b:54:c7:5d:22:a1:ac:3d:9f:cf:8f:ee:10:65:
84:cd:14:d4:85:44:1c:c5:82:54:7e:b5:32:74:95:
70:62:81:4b:17:0f:5b:37:37:9a:ca:eb:9f:69:14:
64:79:ca:a4:0b:f2:09:90:60:26:f2:f4:a6:90:0c:
e1:ba:be:1d:85:9a:3a:2b:43:f0:9b:50:3c:26:99:
d2:29:cb:eb:36:2a:1d:da:d9:52:9d:ae:89:ce:ab:
e3:89:90:5a:85:9e:fd:1a:37:a3:a2:77:a4:cd:dd:
21:b7:80:94:c7:f7:6d:0c:eb:21:d2:e8:f9:24:03:
a9:15:49:12:67:8a:3c:e4:97:4f:ce:f1:67:2a:3d:
56:1e:ac:f4:af:20:9f:e4:b7:6f:8a:78:a7:ed:a2:
e0:b4:69:8a:0f:32:49:7f:85:d1:d3:23:78:6a:a4:
6b:d3:97:c2:72:da:6f:3e:13:68:2c:0e:81:0b:ee:
14:5d:ad:4a:b6:be:5f:07:a8:d3:79:35:13:f4:d4:
df:d8:0f:ec:f2:9a:5c:7c:73:e4:7f:53:ad:3e:bc:
f3:53:73:ef:c1:ce:9e:19:9c:3f:60:e6:46:5e:af:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AB:DA:D0:70:65:30:15:0D:FB:FF:41:34:A6:F3:71:36:9E:B3:3A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/java0HBlMBUN-_9BNKbzcTaeszo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.124.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:8c:8f:92:01:f3:f3:5d:91:b9:99:a2:24:2c:90:8b:56:32:
1d:fd:e2:ae:85:a3:30:63:e3:1d:30:31:43:a3:d8:00:89:9d:
2d:3d:26:63:ec:5e:28:83:70:45:75:64:90:03:70:cf:d2:75:
01:b9:c5:c5:c8:5e:6f:25:92:61:ad:55:b8:81:c2:28:d0:cd:
59:05:bf:35:7f:f0:c7:ee:2e:30:ce:0f:a2:66:71:f4:a2:c1:
05:c3:ca:d1:ee:5a:e8:0a:f0:46:43:d4:b8:9b:5e:83:99:93:
7d:dc:7d:ad:4a:48:8f:05:12:21:92:bc:ec:d6:92:a0:0d:c6:
39:d9:11:a1:2d:2d:ce:82:82:56:bf:6a:3b:7b:b7:aa:63:08:
30:f9:f8:a2:26:e5:60:cd:cc:05:23:43:74:eb:5f:88:76:ca:
63:35:9a:07:5e:4d:ea:62:09:b5:f9:0e:00:2c:a3:05:fa:15:
1f:39:a8:14:56:28:e1:00:45:c1:da:81:8e:58:02:89:63:a9:
07:f7:6a:a7:1f:cd:b5:1b:45:bf:06:24:02:48:61:96:d9:82:
9a:53:05:9b:f7:67:67:4b:f7:1a:a6:ff:70:77:00:71:d7:54:
68:b1:34:72:f5:c0:85:70:54:48:e5:17:96:02:42:25:ea:81:
d4:6a:08:f2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3NTBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDhEQUJEQUQwNzA2NTMw
MTUwREZCRkY0MTM0QTZGMzcxMzY5RUIzM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKJFdH2QWX22xEwx/JUo1ipGvn8TAIavOjYryvPvILVMddIqGs
PZ/Pj+4QZYTNFNSFRBzFglR+tTJ0lXBigUsXD1s3N5rK659pFGR5yqQL8gmQYCby
9KaQDOG6vh2FmjorQ/CbUDwmmdIpy+s2Kh3a2VKdronOq+OJkFqFnv0aN6Oid6TN
3SG3gJTH920M6yHS6PkkA6kVSRJnijzkl0/O8WcqPVYerPSvIJ/kt2+KeKftouC0
aYoPMkl/hdHTI3hqpGvTl8Jy2m8+E2gsDoEL7hRdrUq2vl8HqNN5NRP01N/YD+zy
mlx8c+R/U60+vPNTc+/Bzp4ZnD9g5kZer8jRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjava0HBlMBUN+/9BNKbzcTaeszowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2phdmEwSEJsTUJVTi1fOUJO
S2J6Y1RhZXN6by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6HwwDQYJKoZIhvcNAQELBQADggEBAHqMj5IB8/NdkbmZoiQskItWMh394q6FozBj
4x0wMUOj2ACJnS09JmPsXiiDcEV1ZJADcM/SdQG5xcXIXm8lkmGtVbiBwijQzVkF
vzV/8MfuLjDOD6JmcfSiwQXDytHuWugK8EZD1LibXoOZk33cfa1KSI8FEiGSvOzW
kqANxjnZEaEtLc6Cgla/ajt7t6pjCDD5+KIm5WDNzAUjQ3TrX4h2ymM1mgdeTepi
CbX5DgAsowX6FR85qBRWKOEARcHagY5YAoljqQf3aqcfzbUbRb8GJAJIYZbZgppT
BZv3Z2dL9xqm/3B3AHHXVGixNHL1wIVwVEjlF5YCQiXqgdRqCPI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org