Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oogdq8izXtXejDf4JiwDxgZO21o.roa
File: oogdq8izXtXejDf4JiwDxgZO21o.roa (raw, json)
Hash identifier: NlrlxewJuX29991laz/0p+ELSyjWZf+7ifOI8lf0W1U=
Subject key identifier: A2:88:1D:AB:C8:B3:5E:D5:DE:8C:37:F8:26:2C:03:C6:06:4E:DB:5A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2233
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oogdq8izXtXejDf4JiwDxgZO21o.roa
Signing time: Fri 25 Nov 2022 04:40:53 +0000
ROA not before: Fri 25 Nov 2022 04:40:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8755 (0x2233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A2881DABC8B35ED5DE8C37F8262C03C6064EDB5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:04:41:aa:a5:69:07:78:30:ff:52:dc:c3:
ca:9e:0c:e4:33:7d:95:cf:a3:a1:1b:dc:b9:6e:23:
c2:f8:35:44:c1:4a:54:2f:23:85:ab:bd:4c:18:c4:
c1:67:8d:7a:ea:44:f2:9b:1d:54:5f:6e:fa:d0:49:
7e:a3:a3:02:10:87:a7:3f:9f:44:dc:96:77:7b:37:
07:28:76:04:3b:31:94:0a:dd:c7:a2:e2:af:ad:cd:
8a:56:d1:4c:a6:84:59:49:b1:fb:10:2e:7c:5f:a1:
56:89:1d:07:4e:8a:e5:a6:17:3e:bb:9b:af:c6:b7:
5a:37:fe:3e:d5:34:f4:13:66:f2:01:3d:b7:3c:ec:
ce:41:be:61:44:36:24:4a:9b:63:f7:30:b5:00:4c:
2c:39:dd:20:98:e2:d6:33:42:20:f6:6c:65:8c:de:
88:b1:ee:4d:fc:19:a8:32:89:3f:3c:f1:da:8b:2f:
25:ff:a7:77:79:be:fc:91:41:6c:d6:6e:d4:12:d2:
6d:ae:cb:8f:09:79:52:ef:5f:a2:29:6f:d2:7f:5c:
14:47:2c:79:9c:9a:9f:9d:b1:84:7a:56:f6:c6:94:
8d:e5:86:1e:bf:e1:73:97:62:1b:6c:3b:af:da:89:
6e:b1:e7:74:36:2e:cc:bc:20:8c:3b:b0:28:7a:10:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:88:1D:AB:C8:B3:5E:D5:DE:8C:37:F8:26:2C:03:C6:06:4E:DB:5A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oogdq8izXtXejDf4JiwDxgZO21o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.68.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:34:fc:f0:3b:b6:56:e0:b0:4e:89:d5:c4:a9:c4:65:0a:f2:
b3:c6:50:26:72:31:38:ef:cd:19:ff:04:7a:5e:80:77:16:91:
0f:a0:f8:fe:72:93:d0:9a:78:7a:7e:24:77:1e:a2:7f:84:b3:
5d:14:94:d4:bb:d0:11:86:4b:7a:66:d5:ac:da:0f:93:d2:70:
62:60:4a:2a:b1:f5:f5:2b:a2:89:bf:a2:0b:02:23:06:98:68:
1d:22:8b:45:22:72:c4:1e:99:d6:9b:86:0c:ed:9a:06:71:85:
a8:c8:78:78:56:31:ad:7f:53:a0:f5:37:72:8b:75:1b:5d:f7:
de:6e:b9:08:df:6a:c9:e2:74:b7:3d:e7:4e:2c:5a:dc:1f:68:
73:93:aa:5e:ef:5f:d7:6c:aa:9e:da:20:b0:e1:6e:94:78:8a:
00:24:fe:6e:41:01:93:cb:85:36:5e:5f:a8:cb:94:6e:46:f3:
e8:3d:a1:fb:c4:2f:04:25:2d:c0:bf:e8:0d:7a:af:d3:e6:d1:
39:1c:c0:0a:7c:04:4c:d3:c2:73:1e:18:2b:f5:e5:7e:18:46:
90:31:b2:a1:c0:e6:e0:b2:03:0b:48:4e:98:a1:9f:3e:c4:a5:
87:6d:d0:fa:21:8a:fb:cf:76:ae:4a:c1:5d:b8:8b:52:9d:17:
1b:8a:56:5f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIjMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwNTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEEyODgxREFCQzhCMzVF
RDVERThDMzdGODI2MkMwM0M2MDY0RURCNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7NARBqqVpB3gw/1Lcw8qeDOQzfZXPo6Eb3LluI8L4NUTBSlQv
I4WrvUwYxMFnjXrqRPKbHVRfbvrQSX6jowIQh6c/n0Tclnd7NwcodgQ7MZQK3cei
4q+tzYpW0UymhFlJsfsQLnxfoVaJHQdOiuWmFz67m6/Gt1o3/j7VNPQTZvIBPbc8
7M5BvmFENiRKm2P3MLUATCw53SCY4tYzQiD2bGWM3oix7k38GagyiT888dqLLyX/
p3d5vvyRQWzWbtQS0m2uy48JeVLvX6Ipb9J/XBRHLHmcmp+dsYR6VvbGlI3lhh6/
4XOXYhtsO6/aiW6x53Q2Lsy8IIw7sCh6EE05AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUoogdq8izXtXejDf4JiwDxgZO21owHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29vZ2RxOGl6WHRYZWpEZjRK
aXdEeGdaTzIxby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6UQwDQYJKoZIhvcNAQELBQADggEBALc0/PA7tlbgsE6J1cSpxGUK8rPGUCZyMTjv
zRn/BHpegHcWkQ+g+P5yk9CaeHp+JHceon+Es10UlNS70BGGS3pm1azaD5PScGJg
Siqx9fUroom/ogsCIwaYaB0ii0UicsQemdabhgztmgZxhajIeHhWMa1/U6D1N3KL
dRtd995uuQjfasnidLc9504sWtwfaHOTql7vX9dsqp7aILDhbpR4igAk/m5BAZPL
hTZeX6jLlG5G8+g9ofvELwQlLcC/6A16r9Pm0TkcwAp8BEzTwnMeGCv15X4YRpAx
sqHA5uCyAwtITpihnz7EpYdt0PohivvPdq5KwV24i1KdFxuKVl8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org