Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/saxOZsM0HTNtp6dw-KnjMVxu8i4.roa
File: saxOZsM0HTNtp6dw-KnjMVxu8i4.roa (raw, json)
Hash identifier: 49Al/z+DCcwT3aYUv8ln/f+bJHY0ib9sdrozI3haCp8=
Subject key identifier: B1:AC:4E:66:C3:34:1D:33:6D:A7:A7:70:F8:A9:E3:31:5C:6E:F2:2E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D1A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/saxOZsM0HTNtp6dw-KnjMVxu8i4.roa
Signing time: Wed 29 Sep 2021 02:48:37 +0000
ROA not before: Wed 29 Sep 2021 02:48:37 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 118.232.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7450 (0x1d1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:37 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B1AC4E66C3341D336DA7A770F8A9E3315C6EF22E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:53:63:bb:d3:cc:d2:67:88:f8:10:a3:cc:3f:
a5:10:0d:fa:8f:a3:ee:15:ef:06:d9:2d:dd:da:ec:
bf:40:6d:71:b4:26:87:62:dc:22:d3:5a:63:75:80:
cc:2d:ae:cd:61:94:39:61:df:18:ab:1b:47:aa:68:
63:60:85:55:c1:c7:5c:39:7a:f2:fb:c2:b1:01:f7:
6a:24:90:0b:e2:5a:5d:9b:8c:a2:eb:a2:dc:46:44:
ae:1a:26:93:dd:71:4b:31:cf:91:18:26:46:04:c5:
f6:03:19:71:1e:c0:e4:58:7e:59:5a:0b:d5:01:04:
68:67:a3:98:df:99:24:ab:83:25:78:37:48:30:7e:
da:eb:55:89:76:f3:d1:b6:f1:73:1d:d8:5e:f7:88:
1e:15:46:b8:a7:90:be:e8:27:c4:1d:c6:f2:53:e8:
9a:77:ac:35:c1:dd:e1:61:20:c8:0d:0e:0e:b8:b8:
c7:15:25:84:0b:f4:d4:d0:48:70:1a:41:a6:5d:89:
f9:fe:c5:0a:46:98:94:1e:dc:db:b7:6e:b0:9c:fd:
f9:f0:90:d9:32:af:05:8f:4a:63:f1:c4:12:5d:d6:
a2:63:1c:33:0c:b1:f9:88:66:6a:2d:6d:c8:e4:5b:
31:68:4b:75:78:a0:4b:e6:8f:7f:c7:a2:aa:8f:64:
a4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AC:4E:66:C3:34:1D:33:6D:A7:A7:70:F8:A9:E3:31:5C:6E:F2:2E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/saxOZsM0HTNtp6dw-KnjMVxu8i4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.0.0/18
Signature Algorithm: sha256WithRSAEncryption
38:83:42:a7:d8:5d:59:11:4d:b1:fe:db:64:9d:6f:69:28:09:
90:5f:5d:71:fd:39:81:e4:ef:c5:bb:c5:29:79:cf:23:f8:ba:
d7:24:e3:c1:f8:b6:1f:47:23:e1:8f:44:95:8c:be:39:42:55:
2b:be:47:95:5e:3d:a6:20:1a:ce:8c:46:98:40:23:fa:fe:74:
45:d9:59:a8:2b:a4:6a:08:fa:2c:e9:b2:b8:bf:f4:ea:b6:7e:
13:80:58:e3:d2:b9:f2:3a:8b:f5:ed:e8:61:d1:f0:bf:6d:03:
ec:2d:9e:d5:54:e9:2b:8b:12:be:ca:14:75:0f:ae:ba:52:12:
4a:38:f7:ed:c6:ce:fd:02:6a:b2:4e:a1:a9:49:bb:09:88:57:
af:6b:7a:d3:cf:c7:59:13:19:12:b5:ea:62:4b:08:c7:5f:c0:
69:ed:c6:2b:e5:6d:16:28:4d:1c:12:54:26:b5:b0:f9:5f:c0:
6a:6d:1c:9b:c2:20:e4:ce:31:c4:f0:f2:87:ae:f6:ca:f6:cd:
89:0b:50:4e:2a:ab:d1:bc:e3:15:ad:ab:73:47:d0:86:ff:25:
d9:30:10:e5:da:7b:be:cb:1e:4c:96:09:25:5d:e1:64:ae:44:
55:c7:90:34:5d:06:ed:c0:cb:79:b2:57:95:db:e0:56:b4:00:
aa:30:a6:f3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHRowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4MzdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEIxQUM0RTY2QzMzNDFE
MzM2REE3QTc3MEY4QTlFMzMxNUM2RUYyMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlU2O708zSZ4j4EKPMP6UQDfqPo+4V7wbZLd3a7L9AbXG0Jodi
3CLTWmN1gMwtrs1hlDlh3xirG0eqaGNghVXBx1w5evL7wrEB92okkAviWl2bjKLr
otxGRK4aJpPdcUsxz5EYJkYExfYDGXEewORYfllaC9UBBGhno5jfmSSrgyV4N0gw
ftrrVYl289G28XMd2F73iB4VRrinkL7oJ8QdxvJT6Jp3rDXB3eFhIMgNDg64uMcV
JYQL9NTQSHAaQaZdifn+xQpGmJQe3Nu3brCc/fnwkNkyrwWPSmPxxBJd1qJjHDMM
sfmIZmotbcjkWzFoS3V4oEvmj3/HoqqPZKSRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUsaxOZsM0HTNtp6dw+KnjMVxu8i4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3NheE9ac00wSFROdHA2ZHct
S25qTVZ4dThpNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ2
6AAwDQYJKoZIhvcNAQELBQADggEBADiDQqfYXVkRTbH+22Sdb2koCZBfXXH9OYHk
78W7xSl5zyP4utck48H4th9HI+GPRJWMvjlCVSu+R5VePaYgGs6MRphAI/r+dEXZ
WagrpGoI+izpsri/9Oq2fhOAWOPSufI6i/Xt6GHR8L9tA+wtntVU6SuLEr7KFHUP
rrpSEko49+3Gzv0CarJOoalJuwmIV69retPPx1kTGRK16mJLCMdfwGntxivlbRYo
TRwSVCa1sPlfwGptHJvCIOTOMcTw8oeu9sr2zYkLUE4qq9G84xWtq3NH0Ib/Jdkw
EOXae77LHkyWCSVd4WSuRFXHkDRdBu3Ay3myV5Xb4Fa0AKowpvM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org