Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mgtnnvxtBmiUgZENjSLV0NWVpto.roa
File: mgtnnvxtBmiUgZENjSLV0NWVpto.roa (raw, json)
Hash identifier: gqClWvJ+42gL2MzEOhPTJu6xae15/iSCfgTa0xL1Rmw=
Subject key identifier: 9A:0B:67:9E:FC:6D:06:68:94:81:91:0D:8D:22:D5:D0:D5:95:A6:DA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1833
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mgtnnvxtBmiUgZENjSLV0NWVpto.roa
Signing time: Sun 07 Feb 2021 12:27:10 +0000
ROA not before: Sun 07 Feb 2021 12:27:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6195 (0x1833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:27:10 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9A0B679EFC6D06689481910D8D22D5D0D595A6DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:bb:d5:ab:f5:d2:a0:a5:a0:1d:3b:1c:c1:
6a:19:67:49:77:63:15:27:d0:e8:01:73:2c:66:26:
57:94:59:d6:ac:0b:e4:9f:c6:82:6c:2b:d2:4e:d9:
51:af:99:e0:b4:3f:61:5c:10:5f:bd:1d:cd:da:bf:
4d:c5:45:7b:28:5a:8d:42:ed:f0:76:e7:a8:92:0e:
5a:72:e2:61:a2:e4:3b:2f:99:35:bc:47:a3:bf:ac:
bd:a3:5a:3b:95:9f:1f:d3:93:6a:46:64:7b:08:fd:
fd:d9:fa:5e:cb:18:2d:c0:39:17:97:97:51:22:fe:
83:f2:3d:a1:19:3c:f1:13:76:73:85:28:3d:2a:8b:
8f:0e:d2:6e:1a:1a:23:f5:63:94:0a:ae:3c:bc:08:
dc:70:7c:78:9c:12:b0:1f:bc:3c:3f:76:ad:6f:d7:
20:2f:3d:31:1e:10:f5:43:ef:c2:4a:77:19:8a:b9:
bb:50:31:b4:ff:20:e9:67:e4:bb:86:0c:c7:53:27:
ac:62:c4:10:79:10:b9:04:73:71:b6:16:28:49:88:
30:18:dd:75:26:b6:78:fd:fb:c0:12:bf:96:64:bf:
42:77:28:20:15:71:8f:9d:d7:97:fb:61:54:16:a9:
24:4d:5d:44:1c:6a:25:00:2e:a8:db:b4:ac:29:dd:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0B:67:9E:FC:6D:06:68:94:81:91:0D:8D:22:D5:D0:D5:95:A6:DA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mgtnnvxtBmiUgZENjSLV0NWVpto.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.200.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:88:b8:0d:70:42:30:0a:d9:c0:03:9e:ae:ce:65:f5:62:0b:
c6:9c:86:1e:a5:ff:9e:c8:de:08:98:db:18:12:56:12:97:a7:
d0:ca:7f:b8:7b:77:58:30:ff:fe:35:4e:40:59:25:64:d7:8e:
9f:a4:c3:71:3d:f7:70:29:3a:24:3d:94:0d:2a:53:27:cc:36:
53:7d:37:c3:22:f6:db:67:11:64:7a:ab:9b:32:6d:f9:41:95:
64:6c:ff:b5:14:7f:94:91:4d:7f:72:63:cb:29:48:8d:e3:4b:
39:bb:dd:c6:1c:29:d2:e5:01:4a:4b:74:64:9c:ee:f2:1a:57:
20:1a:d5:d1:64:63:fc:a5:d1:31:dd:1a:22:c4:b8:a9:ab:a4:
8f:cf:56:83:ad:ef:79:69:42:5a:9d:7c:f1:d4:19:b7:f2:06:
82:76:7b:2d:ef:35:88:5b:aa:c6:c9:3d:69:d9:87:a3:98:63:
1c:df:8e:34:55:b1:2b:47:0a:a1:03:31:9f:e0:6c:7c:a3:04:
88:d7:50:00:50:4f:9c:e5:8b:66:c9:58:89:b7:1a:25:f2:2a:
d4:f6:4c:1d:a3:89:e0:37:7d:ac:80:69:b6:0e:98:61:54:5e:
03:ea:4c:09:8d:dc:7e:05:c8:4c:5e:cc:f3:0f:ed:c1:47:75:
22:14:b4:13
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGDMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjI3MTBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDlBMEI2NzlFRkM2RDA2
Njg5NDgxOTEwRDhEMjJENUQwRDU5NUE2REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCi77vVq/XSoKWgHTscwWoZZ0l3YxUn0OgBcyxmJleUWdasC+Sf
xoJsK9JO2VGvmeC0P2FcEF+9Hc3av03FRXsoWo1C7fB256iSDlpy4mGi5DsvmTW8
R6O/rL2jWjuVnx/Tk2pGZHsI/f3Z+l7LGC3AOReXl1Ei/oPyPaEZPPETdnOFKD0q
i48O0m4aGiP1Y5QKrjy8CNxwfHicErAfvDw/dq1v1yAvPTEeEPVD78JKdxmKubtQ
MbT/IOln5LuGDMdTJ6xixBB5ELkEc3G2FihJiDAY3XUmtnj9+8ASv5Zkv0J3KCAV
cY+d15f7YVQWqSRNXUQcaiUALqjbtKwp3c6fAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmgtnnvxtBmiUgZENjSLV0NWVptowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21ndG5udnh0Qm1pVWdaRU5q
U0xWME5XVnB0by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6MgwDQYJKoZIhvcNAQELBQADggEBAE6IuA1wQjAK2cADnq7OZfViC8achh6l/57I
3giY2xgSVhKXp9DKf7h7d1gw//41TkBZJWTXjp+kw3E993ApOiQ9lA0qUyfMNlN9
N8Mi9ttnEWR6q5sybflBlWRs/7UUf5SRTX9yY8spSI3jSzm73cYcKdLlAUpLdGSc
7vIaVyAa1dFkY/yl0THdGiLEuKmrpI/PVoOt73lpQlqdfPHUGbfyBoJ2ey3vNYhb
qsbJPWnZh6OYYxzfjjRVsStHCqEDMZ/gbHyjBIjXUABQT5zli2bJWIm3GiXyKtT2
TB2jieA3fayAabYOmGFUXgPqTAmN3H4FyExezPMP7cFHdSIUtBM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org