Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jiqsLtRMpzfYzLMVfNRgMJYzLbA.roa
File: jiqsLtRMpzfYzLMVfNRgMJYzLbA.roa (raw, json)
Hash identifier: AA7ft4iB6919Axs7DNvXLpp5GFjpwdthAU/r8Q30N5I=
Subject key identifier: 8E:2A:AC:2E:D4:4C:A7:37:D8:CC:B3:15:7C:D4:60:30:96:33:2D:B0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CC5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jiqsLtRMpzfYzLMVfNRgMJYzLbA.roa
Signing time: Wed 29 Sep 2021 02:48:11 +0000
ROA not before: Wed 29 Sep 2021 02:48:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.232.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7365 (0x1cc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8E2AAC2ED44CA737D8CCB3157CD4603096332DB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:7d:15:c6:ec:34:5b:a2:03:be:77:51:0b:
a4:06:5e:39:1a:98:11:0f:44:69:ad:92:3f:6e:3a:
19:2c:f8:c6:a7:b5:0f:e7:76:2f:81:5d:0a:c4:92:
9b:c7:a2:a6:ba:a1:bc:2d:9e:df:cb:6e:d7:f0:2e:
62:df:c4:76:6d:d7:03:12:39:d6:0f:ff:6f:b0:28:
95:70:5b:4e:c9:04:d0:80:41:9c:a5:d6:20:ec:04:
5f:75:e2:52:5a:db:5a:b6:7b:9a:c3:c2:f6:55:d7:
d8:c5:ae:b0:c2:33:d6:22:31:ff:87:dd:f1:c6:aa:
1b:24:09:d2:8b:dc:61:11:76:68:61:1d:51:1f:57:
27:bc:b5:59:f6:ae:cc:05:0a:54:fb:66:9e:d5:b9:
bf:a8:a9:49:38:06:29:dd:92:07:0e:08:66:27:7a:
ba:a9:c7:32:22:af:9f:44:db:27:33:da:1f:21:28:
7c:a2:0b:20:e6:ce:02:e9:57:b5:da:c8:2e:11:ce:
cc:f9:ea:91:dd:51:ef:d7:c3:dd:16:05:f1:a0:6b:
22:17:70:de:da:a6:13:96:d7:c7:7c:0c:e8:28:d7:
e6:da:47:76:44:4c:07:3c:89:52:a0:22:6f:72:ef:
84:0a:4b:aa:ba:61:41:75:d3:dd:68:28:f8:07:f9:
df:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2A:AC:2E:D4:4C:A7:37:D8:CC:B3:15:7C:D4:60:30:96:33:2D:B0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jiqsLtRMpzfYzLMVfNRgMJYzLbA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.240.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:8d:37:5f:b3:80:48:a2:24:6c:cc:8d:5a:9a:16:0e:e7:79:
59:c7:ac:a8:0c:53:8d:94:19:8c:a4:06:3e:7c:d9:0e:67:57:
df:e6:06:7b:f4:a8:3e:3b:bc:67:27:1e:e7:92:9a:13:14:7f:
86:f5:72:aa:59:01:6b:06:09:1c:0c:f4:b6:ca:29:ec:69:51:
1a:c3:04:b2:ef:61:46:bd:ae:9c:bd:87:88:6b:2e:08:ba:28:
a2:ad:61:ad:a8:ad:c6:e0:d4:0c:47:72:74:10:f6:9d:ff:eb:
e5:78:40:c1:5f:c1:f4:82:d2:b2:f4:77:19:b5:8e:63:65:1d:
ae:28:88:78:1b:04:b0:fe:7f:29:f9:e6:f1:27:35:10:96:2f:
58:9b:29:fb:a8:eb:2b:e4:5c:dc:b3:32:77:29:63:51:ce:c0:
1b:3a:51:4c:5d:20:59:77:38:dd:b7:57:23:ab:b0:9b:a1:f4:
20:35:82:d2:2d:e2:13:c6:9e:e3:c6:f4:10:c4:76:fa:fd:1e:
20:20:af:b0:21:cd:af:a7:bf:04:ea:fc:2e:64:fd:1b:43:16:
cb:16:af:a2:e1:a3:f2:96:ec:a7:b4:1e:d4:0e:7a:67:80:ba:
39:6b:ad:60:26:b9:ae:92:50:16:fb:ca:16:92:1f:e7:5e:d4:
0e:84:71:ff
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4MTFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDhFMkFBQzJFRDQ0Q0E3
MzdEOENDQjMxNTdDRDQ2MDMwOTYzMzJEQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuBn0Vxuw0W6IDvndRC6QGXjkamBEPRGmtkj9uOhks+MantQ/n
di+BXQrEkpvHoqa6obwtnt/LbtfwLmLfxHZt1wMSOdYP/2+wKJVwW07JBNCAQZyl
1iDsBF914lJa21q2e5rDwvZV19jFrrDCM9YiMf+H3fHGqhskCdKL3GERdmhhHVEf
Vye8tVn2rswFClT7Zp7Vub+oqUk4BindkgcOCGYnerqpxzIir59E2ycz2h8hKHyi
CyDmzgLpV7XayC4Rzsz56pHdUe/Xw90WBfGgayIXcN7aphOW18d8DOgo1+baR3ZE
TAc8iVKgIm9y74QKS6q6YUF1091oKPgH+d+fAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjiqsLtRMpzfYzLMVfNRgMJYzLbAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ppcXNMdFJNcHpmWXpMTVZm
TlJnTUpZekxiQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6PAwDQYJKoZIhvcNAQELBQADggEBAAuNN1+zgEiiJGzMjVqaFg7neVnHrKgMU42U
GYykBj582Q5nV9/mBnv0qD47vGcnHueSmhMUf4b1cqpZAWsGCRwM9LbKKexpURrD
BLLvYUa9rpy9h4hrLgi6KKKtYa2orcbg1AxHcnQQ9p3/6+V4QMFfwfSC0rL0dxm1
jmNlHa4oiHgbBLD+fyn55vEnNRCWL1ibKfuo6yvkXNyzMncpY1HOwBs6UUxdIFl3
ON23VyOrsJuh9CA1gtIt4hPGnuPG9BDEdvr9HiAgr7Ahza+nvwTq/C5k/RtDFssW
r6Lho/KW7Ke0HtQOemeAujlrrWAmua6SUBb7yhaSH+de1A6Ecf8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org