Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xh4-XfBsEruLBY3ACRrYJdpJC-k.roa
File: xh4-XfBsEruLBY3ACRrYJdpJC-k.roa (raw, json)
Hash identifier: 6998R2+sLvXkh8Mopp+ZRNLGRccJW47APQ5Gap1kosE=
Subject key identifier: C6:1E:3E:5D:F0:6C:12:BB:8B:05:8D:C0:09:1A:D8:25:DA:49:0B:E9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A8F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xh4-XfBsEruLBY3ACRrYJdpJC-k.roa
Signing time: Wed 29 Sep 2021 02:45:29 +0000
ROA not before: Wed 29 Sep 2021 02:45:29 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6799 (0x1a8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:29 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C61E3E5DF06C12BB8B058DC0091AD825DA490BE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:f5:38:ce:dc:40:e4:17:51:fd:5e:7a:b8:
5d:ee:5e:cc:e7:cf:07:ae:8a:e1:90:c0:e3:98:33:
3f:89:21:cd:35:26:62:e5:cf:af:be:13:76:50:ef:
c7:3e:e0:81:96:79:3f:e4:b7:95:f8:42:a5:43:78:
26:61:82:e1:34:e1:c3:9b:07:b1:a0:3f:00:ea:ab:
aa:a0:d9:4e:3d:8a:26:6a:c5:a1:b3:63:d4:47:70:
9b:90:ee:59:28:42:2e:ed:35:a2:73:08:bd:5d:7c:
e1:f1:b1:1b:54:86:12:4e:e7:55:d8:19:c4:a8:e7:
a3:d7:d2:05:d9:c3:d1:4f:6d:ed:73:e2:c9:d3:2d:
0a:2f:15:3c:6e:1c:4e:23:ef:e5:ab:73:e7:56:97:
3f:2c:1f:bb:be:49:d1:72:32:f0:aa:3b:8e:68:26:
9a:22:48:67:38:15:86:04:55:c7:c2:c6:e8:f7:84:
45:d1:ff:fc:b4:a4:0a:f3:f0:b1:a6:9f:24:98:f4:
1f:a1:4e:f4:a0:2e:16:e1:51:09:f9:13:ae:cd:10:
6a:98:2b:bf:90:22:36:99:c5:3b:f5:63:fa:b4:ba:
53:a0:95:59:de:3d:e1:d3:27:7c:c3:48:a3:56:bb:
ae:55:98:78:21:5a:2e:30:46:5b:05:37:61:0d:c0:
bf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1E:3E:5D:F0:6C:12:BB:8B:05:8D:C0:09:1A:D8:25:DA:49:0B:E9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xh4-XfBsEruLBY3ACRrYJdpJC-k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.96.0/22
Signature Algorithm: sha256WithRSAEncryption
80:f6:f9:9a:8c:1c:4b:58:41:5d:b5:a2:7f:85:1e:e1:9b:9e:
e5:46:bb:cf:16:35:d2:c6:e9:2c:5e:e8:35:64:98:fd:11:45:
a4:18:f1:30:8a:6e:17:d9:66:43:bf:e9:4a:dd:d9:88:68:f9:
f5:98:5f:3e:04:51:ea:02:a9:d1:84:6e:ad:96:b2:7d:1d:ee:
d9:32:97:1b:f5:6e:0c:cb:5b:ea:b4:51:24:b5:62:dd:a3:24:
d2:6d:c4:f6:70:45:fe:57:7f:b6:0f:ab:ce:e5:11:06:3f:db:
41:7e:b1:e8:48:80:ff:c8:19:c2:33:e0:db:7a:ee:25:2c:67:
87:99:54:ab:59:08:7c:48:89:86:00:35:72:86:fc:86:55:21:
cd:86:e4:49:23:b6:56:2c:aa:a0:57:00:a4:f9:79:f1:db:97:
87:70:24:b9:ac:07:a2:ff:7d:92:4c:68:19:f6:cc:00:8f:d5:
ef:6e:cd:b8:88:ea:99:60:70:6b:fa:3e:76:73:65:78:3f:85:
5e:c4:26:f5:ee:0a:c0:6c:e3:2b:85:20:68:9b:0c:b9:37:17:
79:95:2b:1b:6a:b3:a2:fb:ed:c4:ad:22:57:bd:ad:e2:0a:2e:
fc:0c:d2:31:74:55:13:bb:d9:47:93:10:75:da:61:a0:08:64:
60:db:36:6c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGo8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ1MjlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEM2MUUzRTVERjA2QzEy
QkI4QjA1OERDMDA5MUFEODI1REE0OTBCRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRbfU4ztxA5BdR/V56uF3uXsznzweuiuGQwOOYMz+JIc01JmLl
z6++E3ZQ78c+4IGWeT/kt5X4QqVDeCZhguE04cObB7GgPwDqq6qg2U49iiZqxaGz
Y9RHcJuQ7lkoQi7tNaJzCL1dfOHxsRtUhhJO51XYGcSo56PX0gXZw9FPbe1z4snT
LQovFTxuHE4j7+Wrc+dWlz8sH7u+SdFyMvCqO45oJpoiSGc4FYYEVcfCxuj3hEXR
//y0pArz8LGmnySY9B+hTvSgLhbhUQn5E67NEGqYK7+QIjaZxTv1Y/q0ulOglVne
PeHTJ3zDSKNWu65VmHghWi4wRlsFN2ENwL9/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUxh4+XfBsEruLBY3ACRrYJdpJC+kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hoNC1YZkJzRXJ1TEJZM0FD
UnJZSmRwSkMtay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6WAwDQYJKoZIhvcNAQELBQADggEBAID2+ZqMHEtYQV21on+FHuGbnuVGu88WNdLG
6Sxe6DVkmP0RRaQY8TCKbhfZZkO/6Urd2Yho+fWYXz4EUeoCqdGEbq2Wsn0d7tky
lxv1bgzLW+q0USS1Yt2jJNJtxPZwRf5Xf7YPq87lEQY/20F+sehIgP/IGcIz4Nt6
7iUsZ4eZVKtZCHxIiYYANXKG/IZVIc2G5EkjtlYsqqBXAKT5efHbl4dwJLmsB6L/
fZJMaBn2zACP1e9uzbiI6plgcGv6PnZzZXg/hV7EJvXuCsBs4yuFIGibDLk3F3mV
Kxtqs6L77cStIle9reIKLvwM0jF0VRO72UeTEHXaYaAIZGDbNmw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org