Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v2eDnU-H1M4Yp8DJbXxHEZ-q2iM.roa
File: v2eDnU-H1M4Yp8DJbXxHEZ-q2iM.roa (raw, json)
Hash identifier: YFkNFwVcmu9tfDZVuHlDCkE7IybQfPfXKA3Xpbn/Dc0=
Subject key identifier: BF:67:83:9D:4F:87:D4:CE:18:A7:C0:C9:6D:7C:47:11:9F:AA:DA:23
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21B4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v2eDnU-H1M4Yp8DJbXxHEZ-q2iM.roa
Signing time: Fri 25 Nov 2022 04:40:13 +0000
ROA not before: Fri 25 Nov 2022 04:40:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8628 (0x21b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BF67839D4F87D4CE18A7C0C96D7C47119FAADA23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:52:93:3d:8c:a4:e0:03:41:73:eb:9e:34:35:
d5:4f:2e:5e:b8:fa:55:be:93:9d:a2:2c:bf:8c:24:
7b:82:e0:db:94:6d:c6:93:e8:b8:32:8c:fa:9a:0e:
d8:1e:4b:0f:20:04:9e:b9:03:53:dc:19:36:89:9f:
53:7e:04:d5:0e:e2:d8:04:5d:e6:dc:5f:fb:5a:b0:
52:76:97:5d:f8:fe:05:36:4d:e0:9f:3a:a2:b3:4b:
a5:99:d5:8f:7c:ef:aa:08:92:8f:c4:e7:6f:27:14:
81:d1:bf:45:58:8c:a9:1a:04:20:d6:fe:ba:ed:94:
f1:e4:c0:c2:3e:ec:c0:94:66:54:f7:47:fc:7d:a6:
55:29:0d:fd:74:b2:77:49:3d:99:fc:c0:9b:97:30:
e5:dc:ec:60:cc:56:b1:72:b2:e8:86:50:20:a7:85:
ab:35:31:2d:ec:6b:d0:2f:8b:2f:3f:4c:80:07:56:
b1:16:cf:73:40:aa:84:e2:0b:33:28:74:67:2a:f8:
ed:1d:69:02:99:d9:4b:d5:07:7f:29:ed:70:72:9d:
35:03:16:c3:37:47:80:d6:12:c7:93:ad:f9:31:d5:
6c:bb:65:66:6a:b8:97:62:1c:b3:c1:ba:5d:49:bc:
c6:5f:44:2c:32:d1:f1:b2:55:29:42:52:c0:c3:23:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:67:83:9D:4F:87:D4:CE:18:A7:C0:C9:6D:7C:47:11:9F:AA:DA:23
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v2eDnU-H1M4Yp8DJbXxHEZ-q2iM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.245.0/24
Signature Algorithm: sha256WithRSAEncryption
50:00:b4:09:9a:07:12:48:c9:36:17:9a:cf:8e:01:60:6c:f6:
af:42:78:ca:82:f6:51:a3:14:eb:72:8f:cb:ad:a8:7a:37:5f:
c4:68:11:ef:5c:79:e3:5b:6a:16:03:30:50:b6:ec:de:4a:30:
0d:88:fd:94:05:c7:bf:c3:2a:4e:55:34:db:b2:66:46:78:8a:
e8:91:ea:37:3c:28:9f:41:29:35:42:ff:f2:0f:e0:c5:bd:91:
87:7d:12:da:b7:24:b8:07:9e:f1:e0:a0:ef:e7:aa:98:0d:f7:
4f:19:e1:01:24:8e:26:c5:aa:e7:41:06:ba:7c:8e:62:ca:2c:
f6:f9:87:57:d1:6a:52:41:ab:0b:72:e0:62:e3:1e:a7:e8:15:
4e:c5:27:d4:0a:b1:ec:b8:05:f0:86:1d:7b:5f:13:63:61:99:
a0:13:80:4f:c7:c5:c5:1c:d4:ae:09:01:69:ab:12:ab:92:d5:
58:55:15:9e:be:47:bb:ad:ee:b9:20:3e:4f:d0:09:f6:a6:bc:
5f:79:61:b3:ca:5f:e0:33:a6:2e:11:6d:83:6d:91:8b:33:f1:
0e:85:6d:74:e6:06:f0:4f:69:06:fd:c5:c5:43:15:76:f9:6d:
cb:2f:4a:fa:2f:b0:a5:1d:09:3f:09:22:ce:d0:51:25:1a:31:
bb:29:7a:87
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIbQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEJGNjc4MzlENEY4N0Q0
Q0UxOEE3QzBDOTZEN0M0NzExOUZBQURBMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvUpM9jKTgA0Fz6540NdVPLl64+lW+k52iLL+MJHuC4NuUbcaT
6LgyjPqaDtgeSw8gBJ65A1PcGTaJn1N+BNUO4tgEXebcX/tasFJ2l134/gU2TeCf
OqKzS6WZ1Y9876oIko/E528nFIHRv0VYjKkaBCDW/rrtlPHkwMI+7MCUZlT3R/x9
plUpDf10sndJPZn8wJuXMOXc7GDMVrFysuiGUCCnhas1MS3sa9Aviy8/TIAHVrEW
z3NAqoTiCzModGcq+O0daQKZ2UvVB38p7XBynTUDFsM3R4DWEseTrfkx1Wy7ZWZq
uJdiHLPBul1JvMZfRCwy0fGyVSlCUsDDIwmfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUv2eDnU+H1M4Yp8DJbXxHEZ+q2iMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3YyZURuVS1IMU00WXA4REpi
WHhIRVotcTJpTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2
6fUwDQYJKoZIhvcNAQELBQADggEBAFAAtAmaBxJIyTYXms+OAWBs9q9CeMqC9lGj
FOtyj8utqHo3X8RoEe9ceeNbahYDMFC27N5KMA2I/ZQFx7/DKk5VNNuyZkZ4iuiR
6jc8KJ9BKTVC//IP4MW9kYd9Etq3JLgHnvHgoO/nqpgN908Z4QEkjibFqudBBrp8
jmLKLPb5h1fRalJBqwty4GLjHqfoFU7FJ9QKsey4BfCGHXtfE2NhmaATgE/HxcUc
1K4JAWmrEquS1VhVFZ6+R7ut7rkgPk/QCfamvF95YbPKX+Azpi4RbYNtkYsz8Q6F
bXTmBvBPaQb9xcVDFXb5bcsvSvovsKUdCT8JIs7QUSUaMbspeoc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:00 2025 by rpki-client