Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r3WF-iOVGdAfUPmLtSx7IS2skuU.roa
File: r3WF-iOVGdAfUPmLtSx7IS2skuU.roa (raw, json)
Hash identifier: /rbZ/ajfLIg9vQKI1Lx14qozzpJVBXIdQgyQbqOFfyA=
Subject key identifier: AF:75:85:FA:23:95:19:D0:1F:50:F9:8B:B5:2C:7B:21:2D:AC:92:E5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 227B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r3WF-iOVGdAfUPmLtSx7IS2skuU.roa
Signing time: Fri 25 Nov 2022 04:41:13 +0000
ROA not before: Fri 25 Nov 2022 04:41:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8827 (0x227b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AF7585FA239519D01F50F98BB52C7B212DAC92E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:80:a1:e2:eb:11:e5:7a:fb:d9:1a:ff:cb:
be:54:1f:13:43:fa:20:7e:76:4a:52:73:03:d1:6c:
6f:a3:57:50:79:80:3b:49:69:9b:e0:3d:16:2f:d4:
59:9f:dd:76:f5:90:92:16:7b:58:92:fe:dc:a7:a1:
a8:f5:dc:c6:dc:0d:59:48:d0:86:71:65:84:17:c7:
bb:49:28:db:38:45:66:5a:89:46:37:c7:ea:26:11:
3a:81:79:ff:26:b9:c1:41:74:72:56:46:13:8c:0f:
42:d6:e3:79:fa:94:c9:cf:2a:80:1e:3a:6f:63:fd:
a0:73:c9:e1:f2:ec:39:21:a9:46:9f:46:e5:7e:e0:
7c:46:5a:3c:a2:09:93:c7:aa:11:54:0c:41:83:c3:
b9:c5:5a:55:b7:1a:80:e2:ba:24:78:99:5b:f9:59:
e9:ec:13:93:cf:d6:99:95:bb:5a:8f:40:30:df:d0:
b5:01:f9:6b:1e:67:7d:c5:12:77:09:47:e2:3c:73:
b8:ac:b0:4f:5a:5e:32:05:b7:36:18:c1:e6:26:46:
e3:7f:12:66:d4:52:f1:4a:7f:a2:4d:51:18:22:93:
fc:58:94:03:8b:56:20:f1:bf:52:99:bb:d3:c8:8a:
49:df:6b:a6:a6:e7:c0:01:ec:8d:35:fb:59:4f:de:
c1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:75:85:FA:23:95:19:D0:1F:50:F9:8B:B5:2C:7B:21:2D:AC:92:E5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r3WF-iOVGdAfUPmLtSx7IS2skuU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5a:22:52:4f:6e:d3:73:e3:a2:b8:d6:1d:3f:c4:d7:d7:36:66:
4a:4d:73:ae:ae:d8:95:16:f8:15:bd:4f:f7:2a:b7:df:5d:36:
43:62:e8:54:00:ff:a7:29:e3:20:b6:a6:94:92:81:05:48:77:
65:6a:f4:f9:1c:39:db:bf:88:fb:fb:6f:55:79:a2:35:e8:a2:
9a:8c:9a:50:ef:7a:af:4e:03:43:88:f2:88:de:1c:e3:c5:f4:
9e:6e:0d:a0:7d:22:a7:d4:be:6e:a6:7d:f9:d7:b9:5e:87:3d:
1e:be:eb:29:fe:20:75:a3:54:57:db:6a:85:94:1d:8f:fc:53:
cf:97:57:55:21:25:47:7f:60:38:e2:95:19:e0:c2:b3:f2:34:
16:2f:00:a1:f6:3f:65:1e:9e:1f:09:e1:96:6c:db:0a:71:9d:
b6:e5:7f:80:a2:dd:c1:dd:65:fd:9a:27:c6:6e:c9:6b:fe:a6:
0e:30:1a:ff:06:4d:66:fb:5f:f7:3d:e3:32:4f:28:5d:9f:62:
31:64:35:cf:6b:1d:37:72:37:29:68:23:d6:5b:26:9e:b1:42:
1a:60:55:c8:3e:2f:c2:83:05:79:28:4d:ec:e3:69:6e:24:9c:
49:18:8b:06:b9:e0:98:dd:75:cb:c6:94:69:99:50:62:d6:ff:
53:d1:09:6a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICInswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxMTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEFGNzU4NUZBMjM5NTE5
RDAxRjUwRjk4QkI1MkM3QjIxMkRBQzkyRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdMYCh4usR5Xr72Rr/y75UHxND+iB+dkpScwPRbG+jV1B5gDtJ
aZvgPRYv1Fmf3Xb1kJIWe1iS/tynoaj13MbcDVlI0IZxZYQXx7tJKNs4RWZaiUY3
x+omETqBef8mucFBdHJWRhOMD0LW43n6lMnPKoAeOm9j/aBzyeHy7DkhqUafRuV+
4HxGWjyiCZPHqhFUDEGDw7nFWlW3GoDiuiR4mVv5WensE5PP1pmVu1qPQDDf0LUB
+WseZ33FEncJR+I8c7issE9aXjIFtzYYweYmRuN/EmbUUvFKf6JNURgik/xYlAOL
ViDxv1KZu9PIiknfa6am58AB7I01+1lP3sHpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUr3WF+iOVGdAfUPmLtSx7IS2skuUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3IzV0YtaU9WR2RBZlVQbUx0
U3g3SVMyc2t1VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ2
6EAwDQYJKoZIhvcNAQELBQADggEBAFoiUk9u03PjorjWHT/E19c2ZkpNc66u2JUW
+BW9T/cqt99dNkNi6FQA/6cp4yC2ppSSgQVId2Vq9PkcOdu/iPv7b1V5ojXoopqM
mlDveq9OA0OI8ojeHOPF9J5uDaB9IqfUvm6mffnXuV6HPR6+6yn+IHWjVFfbaoWU
HY/8U8+XV1UhJUd/YDjilRngwrPyNBYvAKH2P2Uenh8J4ZZs2wpxnbblf4Ci3cHd
Zf2aJ8ZuyWv+pg4wGv8GTWb7X/c94zJPKF2fYjFkNc9rHTdyNyloI9ZbJp6xQhpg
Vcg+L8KDBXkoTezjaW4knEkYiwa54JjddcvGlGmZUGLW/1PRCWo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org