Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kcC78toUNcciepeMIVw72gEXWoI.roa
File: kcC78toUNcciepeMIVw72gEXWoI.roa (raw, json)
Hash identifier: wnBArW6jRV5KLSXZy6ipvn3IYmkB23RjLdybziiGN2I=
Subject key identifier: 91:C0:BB:F2:DA:14:35:C7:22:7A:97:8C:21:5C:3B:DA:01:17:5A:82
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21CD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kcC78toUNcciepeMIVw72gEXWoI.roa
Signing time: Fri 25 Nov 2022 04:40:25 +0000
ROA not before: Fri 25 Nov 2022 04:40:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8653 (0x21cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=91C0BBF2DA1435C7227A978C215C3BDA01175A82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:6b:d1:6b:44:0d:de:54:66:ab:40:dd:df:
0a:36:d3:c2:39:e9:85:99:d8:70:07:e3:a4:64:2a:
22:6d:f1:74:8f:87:5e:8b:cc:ea:10:7e:ea:9b:c6:
e0:e6:7d:f7:35:93:52:21:1d:b8:2b:79:7f:5e:9b:
02:0c:0e:da:68:40:c6:73:98:97:14:ac:a9:ae:e9:
03:62:af:8d:26:8a:1d:96:b5:0a:e3:74:a8:10:bf:
ff:bf:0c:7d:e3:f8:c2:8e:0d:6c:43:56:cf:e9:04:
5f:11:f9:11:65:78:fc:bb:62:cd:21:7f:08:ac:41:
01:ba:85:6c:e2:a6:6b:4a:0e:51:3a:92:81:32:2b:
37:d4:78:89:1c:e2:3a:4e:6a:23:75:d8:61:03:c3:
08:d2:19:a9:79:51:97:1e:a3:b2:2d:10:0e:77:c5:
11:0f:6d:d6:b5:c2:ba:71:cd:6c:78:69:4f:62:a0:
40:ab:34:db:61:70:e7:ab:ff:f1:0a:18:e0:a5:93:
26:31:53:ee:56:1d:18:04:e6:4b:d5:77:1a:b9:c2:
8c:f9:29:b8:da:f3:01:a0:93:6f:8f:c8:39:6d:72:
f6:b8:5f:df:39:c9:b7:80:ef:0c:50:f6:ad:c7:0b:
22:a8:c2:aa:2c:e5:ae:97:0c:e1:ff:21:5a:59:a9:
64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C0:BB:F2:DA:14:35:C7:22:7A:97:8C:21:5C:3B:DA:01:17:5A:82
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kcC78toUNcciepeMIVw72gEXWoI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.36.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:09:27:22:41:29:47:d9:a2:cc:a7:47:33:c9:c2:66:44:f1:
7b:37:2e:85:43:7a:59:27:40:e4:a2:50:1a:c9:ff:ac:bc:c7:
9a:09:91:6e:87:ee:01:93:56:64:2a:19:61:02:5d:70:9e:be:
6d:4f:80:d6:5b:ac:9d:a2:ca:59:7a:77:ec:68:3f:77:8d:95:
a6:c6:dc:50:1a:ab:70:ae:90:c6:51:24:37:f6:71:87:02:fa:
72:74:98:74:bd:a6:fc:a3:5f:c6:b3:b9:c9:e8:9c:0b:f3:9a:
48:b9:86:5b:c1:46:c2:a8:ff:c5:a7:5f:87:0a:e1:cd:58:44:
01:61:c4:4a:18:1e:73:6c:17:21:35:78:58:44:71:8e:fe:fa:
ba:62:fe:fe:b7:7d:5f:c9:56:14:d1:5d:6f:f7:d5:ee:ee:07:
11:7d:60:36:a4:30:3c:8e:98:b2:ba:96:f9:2a:38:ee:36:95:
7e:a4:67:ae:96:43:46:c2:98:76:35:5f:e5:50:19:da:3b:4c:
b5:b2:61:08:f9:40:7c:ac:4e:b5:32:25:e4:9f:ae:c5:d0:af:
dd:39:69:b1:05:e0:73:3c:af:ce:ae:07:d0:a1:87:5e:d5:b8:
de:8a:2f:30:ca:6c:d1:d2:17:e9:0f:f0:42:55:24:f9:7e:4b:
26:4c:f9:a5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIc0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMjVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDkxQzBCQkYyREExNDM1
QzcyMjdBOTc4QzIxNUMzQkRBMDExNzVBODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChHWvRa0QN3lRmq0Dd3wo208I56YWZ2HAH46RkKiJt8XSPh16L
zOoQfuqbxuDmffc1k1IhHbgreX9emwIMDtpoQMZzmJcUrKmu6QNir40mih2WtQrj
dKgQv/+/DH3j+MKODWxDVs/pBF8R+RFlePy7Ys0hfwisQQG6hWzipmtKDlE6koEy
KzfUeIkc4jpOaiN12GEDwwjSGal5UZceo7ItEA53xREPbda1wrpxzWx4aU9ioECr
NNthcOer//EKGOClkyYxU+5WHRgE5kvVdxq5woz5Kbja8wGgk2+PyDltcva4X985
ybeA7wxQ9q3HCyKowqos5a6XDOH/IVpZqWQHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkcC78toUNcciepeMIVw72gEXWoIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tjQzc4dG9VTmNjaWVwZU1J
Vnc3MmdFWFdvSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6SQwDQYJKoZIhvcNAQELBQADggEBALkJJyJBKUfZosynRzPJwmZE8Xs3LoVDelkn
QOSiUBrJ/6y8x5oJkW6H7gGTVmQqGWECXXCevm1PgNZbrJ2iyll6d+xoP3eNlabG
3FAaq3CukMZRJDf2cYcC+nJ0mHS9pvyjX8azucnonAvzmki5hlvBRsKo/8WnX4cK
4c1YRAFhxEoYHnNsFyE1eFhEcY7++rpi/v63fV/JVhTRXW/31e7uBxF9YDakMDyO
mLK6lvkqOO42lX6kZ66WQ0bCmHY1X+VQGdo7TLWyYQj5QHysTrUyJeSfrsXQr905
abEF4HM8r86uB9Chh17VuN6KLzDKbNHSF+kP8EJVJPl+SyZM+aU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org