Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oeV36UkfccblTJ72m8CEbxNMLYU.roa
File: oeV36UkfccblTJ72m8CEbxNMLYU.roa (raw, json)
Hash identifier: kME5EGRGgOeOGm/RG+aP7DtLvl0a7q0+JPBS09/NWMc=
Subject key identifier: A1:E5:77:E9:49:1F:71:C6:E5:4C:9E:F6:9B:C0:84:6F:13:4C:2D:85
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oeV36UkfccblTJ72m8CEbxNMLYU.roa
Signing time: Thu 15 Sep 2022 02:45:01 +0000
ROA not before: Thu 15 Sep 2022 02:45:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.176.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A1E577E9491F71C6E54C9EF69BC0846F134C2D85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:fb:8c:da:97:1e:21:2e:42:89:e9:60:5a:
f1:40:d0:fc:1d:48:9a:ee:64:67:a1:e3:f3:de:a2:
20:b8:98:e4:9f:fb:8e:c4:a3:11:13:e2:e2:9f:d2:
e4:32:45:c0:ec:1d:42:1d:ca:8b:a5:fc:67:79:ad:
d5:7a:6a:25:97:65:54:23:3b:31:70:9a:57:58:80:
a6:52:81:d8:1c:8d:68:ad:7f:99:65:30:34:a0:ef:
13:b8:95:fa:0c:8c:fe:25:9b:ac:5b:24:09:1b:9f:
61:fb:37:b4:25:3a:ff:cf:bd:20:4b:d0:71:59:44:
2b:4f:2c:91:c7:f2:de:74:f5:dd:83:58:5d:54:f2:
16:d8:00:66:68:2b:24:c7:16:4b:d5:2b:d1:16:c5:
a2:61:0e:5c:d2:9c:97:dd:41:fc:aa:41:d6:ae:96:
5b:71:12:0a:eb:c9:dc:fb:d4:c9:2a:bb:d3:3a:25:
0c:2c:01:e5:3b:8c:a7:e8:4c:ab:7b:7b:ef:a9:63:
32:2f:3e:d6:ff:42:45:8f:bb:25:3f:d0:b2:1d:45:
61:8f:61:eb:24:ec:53:85:00:3b:3a:9c:3f:be:bf:
33:ee:56:e2:9c:e7:62:eb:ef:86:8e:27:2f:b6:1f:
aa:d9:71:67:69:08:4a:87:06:4e:e7:07:7d:d8:ab:
7c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E5:77:E9:49:1F:71:C6:E5:4C:9E:F6:9B:C0:84:6F:13:4C:2D:85
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oeV36UkfccblTJ72m8CEbxNMLYU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.176.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:9f:50:55:1c:aa:91:54:3d:4e:9d:71:1a:63:78:fd:ff:84:
a3:ac:10:06:2d:92:02:3b:c4:9e:f1:57:09:48:b0:1b:8c:b4:
64:f1:1b:af:eb:0d:ab:71:99:fa:36:84:58:e1:6a:f0:d3:78:
2c:3f:68:91:39:fe:a4:db:67:8f:94:48:28:47:7d:84:e0:96:
b5:c6:ab:64:b7:c7:00:ed:c6:60:f4:0f:d1:fc:7d:23:e6:c8:
59:5a:54:d6:c1:8e:03:19:15:07:f9:75:3b:05:e3:70:e9:84:
86:d4:54:b9:c1:2b:c1:8c:dd:33:15:26:db:a9:63:a4:c5:b5:
ea:be:21:52:16:e9:b6:2e:9f:f0:c0:f4:7f:d9:1e:6e:ea:93:
88:a6:dc:53:42:ab:d3:eb:bd:e9:c9:fd:d8:19:e4:04:dc:ec:
cc:ea:99:6e:22:72:65:e6:15:e4:b1:4b:d6:11:90:00:e5:c2:
36:4b:4c:c9:e7:80:2d:48:f0:af:a8:7d:8f:d4:2f:a3:0c:54:
25:c7:e0:c2:69:dc:64:9b:61:d6:9e:a0:89:64:56:88:36:37:
1a:70:f0:c5:29:8b:5d:47:15:36:de:de:54:84:be:1a:d3:77:
95:c7:ab:88:2b:b9:7d:43:4e:8e:cd:3a:90:02:16:a5:fd:c5:
ed:3d:c6:3d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MDFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEExRTU3N0U5NDkxRjcx
QzZFNTRDOUVGNjlCQzA4NDZGMTM0QzJEODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3GPuM2pceIS5CielgWvFA0PwdSJruZGeh4/PeoiC4mOSf+47E
oxET4uKf0uQyRcDsHUIdyoul/Gd5rdV6aiWXZVQjOzFwmldYgKZSgdgcjWitf5ll
MDSg7xO4lfoMjP4lm6xbJAkbn2H7N7QlOv/PvSBL0HFZRCtPLJHH8t509d2DWF1U
8hbYAGZoKyTHFkvVK9EWxaJhDlzSnJfdQfyqQdaulltxEgrrydz71Mkqu9M6JQws
AeU7jKfoTKt7e++pYzIvPtb/QkWPuyU/0LIdRWGPYesk7FOFADs6nD++vzPuVuKc
52Lr74aOJy+2H6rZcWdpCEqHBk7nB33Yq3zLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUoeV36UkfccblTJ72m8CEbxNMLYUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29lVjM2VWtmY2NibFRKNzJt
OENFYnhOTUxZVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2
6bAwDQYJKoZIhvcNAQELBQADggEBAEyfUFUcqpFUPU6dcRpjeP3/hKOsEAYtkgI7
xJ7xVwlIsBuMtGTxG6/rDatxmfo2hFjhavDTeCw/aJE5/qTbZ4+USChHfYTglrXG
q2S3xwDtxmD0D9H8fSPmyFlaVNbBjgMZFQf5dTsF43DphIbUVLnBK8GM3TMVJtup
Y6TFteq+IVIW6bYun/DA9H/ZHm7qk4im3FNCq9PrvenJ/dgZ5ATc7MzqmW4icmXm
FeSxS9YRkADlwjZLTMnngC1I8K+ofY/UL6MMVCXH4MJp3GSbYdaeoIlkVog2Nxpw
8MUpi11HFTbe3lSEvhrTd5XHq4gruX1DTo7NOpACFqX9xe09xj0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org