Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kktTa8qOStM5_E1R60wB4Ltm8H4.roa
File: kktTa8qOStM5_E1R60wB4Ltm8H4.roa (raw, json)
Hash identifier: RuamfEAG14Jsy1Tb1zsDbo9j6WedQTiy9JhpsnLjAXs=
Subject key identifier: 92:4B:53:6B:CA:8E:4A:D3:39:FC:4D:51:EB:4C:01:E0:BB:66:F0:7E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 164D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kktTa8qOStM5_E1R60wB4Ltm8H4.roa
Signing time: Sun 07 Feb 2021 12:09:34 +0000
ROA not before: Sun 07 Feb 2021 12:09:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5709 (0x164d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:09:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=924B536BCA8E4AD339FC4D51EB4C01E0BB66F07E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:f9:ff:46:14:b9:20:a5:e9:b8:2e:11:40:
8d:e4:ef:da:24:5c:ce:ab:6c:35:f4:cf:24:5c:78:
b5:26:6f:92:5a:23:cd:30:4d:15:09:8f:10:11:73:
88:c0:61:ca:2b:2d:27:01:e5:20:a7:02:26:9e:40:
db:2a:1d:a9:27:03:fd:a6:bc:71:90:2e:c7:4a:4e:
aa:f6:59:92:78:ce:70:71:eb:c1:96:99:67:fc:7a:
08:6b:ae:3d:1a:e9:e4:39:4a:24:b3:76:5a:d3:f6:
50:ac:2e:cb:85:4a:13:4f:c4:fc:fc:36:88:00:8d:
12:6a:29:fd:cd:51:df:3b:91:69:d7:57:e2:06:53:
6f:a8:7b:f2:79:11:02:c4:6c:11:86:7d:b0:9b:3d:
38:78:dd:c8:28:43:7f:ab:0c:94:c6:4d:02:e3:ce:
2c:91:ff:31:8b:e6:63:4b:c7:8a:a9:6c:7d:19:01:
e6:b8:24:66:bb:c2:24:45:19:2d:9f:9d:02:13:cd:
8d:75:f5:c2:80:d3:7e:a2:f2:c7:1d:bb:2b:bb:8a:
88:91:e7:05:0a:b8:b7:e2:15:74:bf:a0:fa:20:1e:
3d:da:6e:8b:bf:43:95:54:ea:92:2e:90:46:11:10:
09:71:8f:c7:04:03:e7:f5:5f:ff:9e:4a:b0:31:05:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4B:53:6B:CA:8E:4A:D3:39:FC:4D:51:EB:4C:01:E0:BB:66:F0:7E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kktTa8qOStM5_E1R60wB4Ltm8H4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.224.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:9c:ea:14:74:c0:d0:f0:77:1a:a3:ce:0a:d4:e2:0a:0b:7f:
fc:62:95:8d:3f:5a:ae:cf:60:ba:64:6c:a5:9e:9d:33:20:fd:
c9:ea:fd:f2:a9:25:5d:28:5c:dc:0e:d2:cc:c5:d8:df:f6:49:
5f:c5:30:c7:d7:11:71:e6:37:2e:ea:88:ab:52:29:10:04:3c:
1a:35:e2:53:58:b1:c5:b7:b3:21:98:fc:45:1a:71:55:f3:eb:
23:ec:11:d8:7b:6b:79:16:de:16:30:37:ec:1b:fa:27:1a:e1:
10:1a:5b:b6:4a:91:93:47:16:3e:5e:f1:32:28:52:6d:16:8c:
14:57:30:18:cd:18:5b:fa:e6:cf:2d:a6:25:c8:a9:2f:1f:60:
e4:9e:ee:0c:0c:20:dc:3e:63:aa:a8:69:c8:53:6c:34:e6:87:
e0:61:c1:ee:5c:c2:be:5e:ea:df:2b:b0:61:d9:be:b1:61:4e:
ec:12:7b:37:b1:31:1a:82:dc:c6:ff:d7:bf:85:95:12:55:17:
a4:4c:51:18:65:c4:aa:00:78:ef:b1:09:0d:18:ca:00:9b:e0:
84:3a:21:c2:66:47:95:ce:b1:46:26:84:bd:29:8e:ff:b0:3c:
57:26:26:90:f0:ae:55:a0:fc:38:87:4d:d0:4d:4b:00:e2:38:
eb:33:1f:5b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFk0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjA5MzRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDkyNEI1MzZCQ0E4RTRB
RDMzOUZDNEQ1MUVCNEMwMUUwQkI2NkYwN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnivn/RhS5IKXpuC4RQI3k79okXM6rbDX0zyRceLUmb5JaI80w
TRUJjxARc4jAYcorLScB5SCnAiaeQNsqHaknA/2mvHGQLsdKTqr2WZJ4znBx68GW
mWf8eghrrj0a6eQ5SiSzdlrT9lCsLsuFShNPxPz8NogAjRJqKf3NUd87kWnXV+IG
U2+oe/J5EQLEbBGGfbCbPTh43cgoQ3+rDJTGTQLjziyR/zGL5mNLx4qpbH0ZAea4
JGa7wiRFGS2fnQITzY119cKA036i8scduyu7ioiR5wUKuLfiFXS/oPogHj3abou/
Q5VU6pIukEYREAlxj8cEA+f1X/+eSrAxBWAzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkktTa8qOStM5/E1R60wB4Ltm8H4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2trdFRhOHFPU3RNNV9FMVI2
MHdCNEx0bThINC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6eAwDQYJKoZIhvcNAQELBQADggEBAAqc6hR0wNDwdxqjzgrU4goLf/xilY0/Wq7P
YLpkbKWenTMg/cnq/fKpJV0oXNwO0szF2N/2SV/FMMfXEXHmNy7qiKtSKRAEPBo1
4lNYscW3syGY/EUacVXz6yPsEdh7a3kW3hYwN+wb+ica4RAaW7ZKkZNHFj5e8TIo
Um0WjBRXMBjNGFv65s8tpiXIqS8fYOSe7gwMINw+Y6qoachTbDTmh+Bhwe5cwr5e
6t8rsGHZvrFhTuwSezexMRqC3Mb/17+FlRJVF6RMURhlxKoAeO+xCQ0YygCb4IQ6
IcJmR5XOsUYmhL0pjv+wPFcmJpDwrlWg/DiHTdBNSwDiOOszH1s=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-fra.rpki-client.org