Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vtqD9OVZhy2927Z6iJr6Bn-ZhlY.roa
File: vtqD9OVZhy2927Z6iJr6Bn-ZhlY.roa (raw, json)
Hash identifier: 5uKXLChPUsHxLvZqSieXrNQKCNEW5fKJdbWxszVRnAg=
Subject key identifier: BE:DA:83:F4:E5:59:87:2D:BD:DB:B6:7A:88:9A:FA:06:7F:99:86:56
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vtqD9OVZhy2927Z6iJr6Bn-ZhlY.roa
Signing time: Thu 15 Sep 2022 02:54:00 +0000
ROA not before: Thu 15 Sep 2022 02:54:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:54:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BEDA83F4E559872DBDDBB67A889AFA067F998656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:1b:9d:57:39:2a:04:e7:82:da:14:34:bd:
1c:e3:37:0d:23:62:72:6d:77:84:d9:a2:8c:a3:2a:
63:66:1e:66:42:db:3d:cf:2f:71:c8:26:4f:e5:66:
1a:51:83:cd:83:d4:e2:57:62:ed:5e:1c:7e:6e:6f:
95:f9:1c:82:90:00:5d:13:10:69:11:4d:a6:90:3b:
34:31:c9:9c:d9:ba:26:d1:cc:e3:7e:b5:a7:4e:32:
7c:7c:4d:6f:a2:b1:49:71:c9:1b:76:44:33:fd:b3:
81:a7:b3:57:39:e2:3c:2d:54:79:67:ad:8e:f8:c9:
6e:80:68:de:21:f2:71:f3:d5:30:22:9f:48:e6:68:
15:90:a6:c7:05:8a:64:52:44:da:2e:2e:a3:e5:fa:
69:43:b6:f9:a5:17:8b:d6:13:fc:95:2e:9e:ca:5c:
36:6d:cf:72:e4:d5:ef:31:31:f5:39:71:f3:ce:a2:
a5:eb:46:e2:d4:a8:0e:d3:de:07:a4:89:b9:5a:a1:
29:35:ec:a2:cd:c2:f7:00:ba:92:ac:4b:3e:86:5e:
0e:2b:1a:48:56:71:50:1f:34:ce:10:da:4a:e6:53:
cd:39:f2:32:ca:a8:cc:58:18:ef:9b:c5:ef:56:43:
db:5e:74:fa:dd:ee:8c:0b:8b:00:7f:0d:63:49:5f:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DA:83:F4:E5:59:87:2D:BD:DB:B6:7A:88:9A:FA:06:7F:99:86:56
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vtqD9OVZhy2927Z6iJr6Bn-ZhlY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.132.0/22
Signature Algorithm: sha256WithRSAEncryption
66:d6:25:ba:78:79:d0:9a:d8:62:41:27:a9:38:8e:d4:a1:6e:
8a:53:7f:2c:46:9a:d6:a3:d3:c8:42:14:e2:69:0b:8e:ce:9c:
2e:5f:5a:64:af:13:03:bf:91:4d:6b:64:81:00:39:2c:c3:d4:
7e:c0:28:f4:f8:7d:5f:bc:f2:70:8a:f6:54:45:3d:4a:3e:85:
6e:59:fe:76:eb:a2:a3:d6:fc:19:89:bb:91:84:aa:2f:36:8d:
fb:11:ba:75:d7:5e:31:91:4a:0c:46:c4:1b:25:5c:13:22:3c:
52:3c:67:3e:03:e1:cd:45:01:3d:6b:f7:bb:7c:e7:f4:42:1f:
db:a2:57:f9:d5:81:80:e2:d2:1f:ef:22:06:52:c2:ba:8a:93:
db:a3:09:8b:de:da:87:a1:b4:4e:8a:20:2d:59:83:06:d0:7f:
d5:5b:3f:45:4b:9f:38:b0:50:97:3e:e8:43:43:bd:e2:70:90:
c9:20:cd:ae:a7:4b:e7:71:3b:a1:24:9d:63:91:ed:5f:7e:64:
8a:9c:f2:e9:9d:1c:8d:50:8c:69:4c:5b:81:5c:e9:38:84:c1:
6d:95:9e:52:f4:6b:17:b0:52:9a:02:9e:06:84:29:ae:68:80:
c2:93:e0:b7:3f:1d:57:a6:a2:cb:36:bb:55:88:f1:fc:44:c3:
18:0b:49:fe
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjU0MDBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEJFREE4M0Y0RTU1OTg3
MkRCRERCQjY3QTg4OUFGQTA2N0Y5OTg2NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChbBudVzkqBOeC2hQ0vRzjNw0jYnJtd4TZooyjKmNmHmZC2z3P
L3HIJk/lZhpRg82D1OJXYu1eHH5ub5X5HIKQAF0TEGkRTaaQOzQxyZzZuibRzON+
tadOMnx8TW+isUlxyRt2RDP9s4Gns1c54jwtVHlnrY74yW6AaN4h8nHz1TAin0jm
aBWQpscFimRSRNouLqPl+mlDtvmlF4vWE/yVLp7KXDZtz3Lk1e8xMfU5cfPOoqXr
RuLUqA7T3gekiblaoSk17KLNwvcAupKsSz6GXg4rGkhWcVAfNM4Q2krmU8058jLK
qMxYGO+bxe9WQ9tedPrd7owLiwB/DWNJX+CFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUvtqD9OVZhy2927Z6iJr6Bn+ZhlYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Z0cUQ5T1ZaaHkyOTI3WjZp
SnI2Qm4tWmhsWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6YQwDQYJKoZIhvcNAQELBQADggEBAGbWJbp4edCa2GJBJ6k4jtShbopTfyxGmtaj
08hCFOJpC47OnC5fWmSvEwO/kU1rZIEAOSzD1H7AKPT4fV+88nCK9lRFPUo+hW5Z
/nbroqPW/BmJu5GEqi82jfsRunXXXjGRSgxGxBslXBMiPFI8Zz4D4c1FAT1r97t8
5/RCH9uiV/nVgYDi0h/vIgZSwrqKk9ujCYve2oehtE6KIC1ZgwbQf9VbP0VLnziw
UJc+6ENDveJwkMkgza6nS+dxO6EknWOR7V9+ZIqc8umdHI1QjGlMW4Fc6TiEwW2V
nlL0axewUpoCngaEKa5ogMKT4Lc/HVemoss2u1WI8fxEwxgLSf4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org