Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/ZPA2H8D4GHLkFgGDT7P1Q4LtHMQ.roa
File: ZPA2H8D4GHLkFgGDT7P1Q4LtHMQ.roa (raw, json)
Hash identifier: XRpguZy3QjGOISc1ATt6MhBZK/4EuBgsjTRVYI24DEg=
Subject key identifier: 64:F0:36:1F:C0:F8:18:72:E4:16:01:83:4F:B3:F5:43:82:ED:1C:C4
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0A7E
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/ZPA2H8D4GHLkFgGDT7P1Q4LtHMQ.roa
Signing time: Thu 15 Sep 2022 02:50:03 +0000
ROA not before: Thu 15 Sep 2022 02:50:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131596
IP address blocks: 123.0.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2686 (0xa7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Sep 15 02:50:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=64F0361FC0F81872E41601834FB3F54382ED1CC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:93:88:41:86:f4:1d:48:d7:16:04:6d:6b:
63:6f:b9:3c:44:b8:e7:66:9d:66:7e:f2:07:1e:fd:
f3:ed:5c:0b:ae:12:0a:19:7c:9e:23:99:1d:3c:40:
6d:9d:4d:0b:71:46:46:d7:3b:bf:cc:fb:89:35:fa:
51:c9:73:6e:ac:dd:01:54:21:f1:b3:14:b9:93:13:
1b:2b:78:2f:ae:8b:58:e6:00:d6:ac:9d:55:7c:d5:
0d:7a:5a:e0:f5:45:9e:f6:c7:9b:ba:17:b4:14:0f:
e2:9f:41:f2:38:e3:d2:0d:32:89:e5:da:8f:36:2f:
cc:38:68:6c:d0:88:cf:43:45:52:58:28:64:eb:3c:
d4:e8:51:86:d1:94:70:26:bd:0e:a8:64:c4:c4:d9:
ca:2f:d7:ac:96:c7:39:aa:7b:c5:a8:2d:d5:39:b7:
4f:d4:59:9d:11:d2:9a:96:02:4b:ce:8b:51:a4:67:
ed:99:d4:bb:b5:b1:f5:99:93:7e:c1:3f:61:95:e7:
80:62:d9:56:b9:a0:ca:aa:c9:57:15:1d:17:5c:f2:
15:40:db:5e:41:b6:2e:82:ca:dd:59:31:de:7d:ec:
ff:e5:e5:96:24:ac:61:e4:50:01:7d:c2:47:6f:36:
06:d6:f5:9f:9c:45:17:7c:75:83:f8:ee:74:53:53:
b5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F0:36:1F:C0:F8:18:72:E4:16:01:83:4F:B3:F5:43:82:ED:1C:C4
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/ZPA2H8D4GHLkFgGDT7P1Q4LtHMQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1e:41:82:57:ba:77:4d:26:23:d2:bb:06:c9:f0:43:70:7f:7f:
a1:36:c3:c4:dd:01:69:2b:ad:5b:6f:73:6e:ab:e8:54:1c:a2:
fd:68:cd:9e:79:bb:75:f3:b2:41:1f:99:ef:a3:96:74:85:a0:
ce:9a:63:37:3a:ad:37:eb:81:55:40:fd:f0:3a:fb:53:69:df:
1a:21:74:86:95:ba:21:e5:bc:7f:33:46:92:7c:4c:d5:9c:96:
20:a0:e3:71:e8:da:b6:3c:75:b5:1b:9d:27:3c:6b:d8:cd:fb:
a2:54:ef:c2:06:48:2a:bc:d6:97:cf:66:2b:70:3c:24:de:e4:
97:82:12:2b:bc:2c:43:c9:18:23:45:08:ea:00:25:30:b9:46:
e4:9d:c8:22:5f:c0:c3:e7:89:52:9e:04:99:dc:d4:ad:b0:81:
1c:a4:71:7d:a1:22:0c:54:89:8a:cf:9d:41:7e:f1:77:e3:69:
aa:e0:a1:eb:f0:c8:2a:e9:15:33:9f:45:39:38:7e:4a:90:7d:
8c:b5:fc:70:e5:ec:d5:b7:d0:8a:d1:9f:f5:77:64:7a:cb:e8:
f9:ee:69:ea:73:9e:10:fc:da:a9:51:f7:8e:19:cb:bd:2d:97:
a3:26:64:ac:74:22:3c:ad:84:e3:1e:4b:b8:ab:03:0d:e5:e7:
c7:cb:5d:dc
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCn4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy
NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yMjA5MTUw
MjUwMDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDY0RjAzNjFGQzBGODE4
NzJFNDE2MDE4MzRGQjNGNTQzODJFRDFDQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5hJOIQYb0HUjXFgRta2NvuTxEuOdmnWZ+8gce/fPtXAuuEgoZ
fJ4jmR08QG2dTQtxRkbXO7/M+4k1+lHJc26s3QFUIfGzFLmTExsreC+ui1jmANas
nVV81Q16WuD1RZ72x5u6F7QUD+KfQfI449INMonl2o82L8w4aGzQiM9DRVJYKGTr
PNToUYbRlHAmvQ6oZMTE2cov16yWxzmqe8WoLdU5t0/UWZ0R0pqWAkvOi1GkZ+2Z
1Lu1sfWZk37BP2GV54Bi2Va5oMqqyVcVHRdc8hVA215Bti6Cyt1ZMd597P/l5ZYk
rGHkUAF9wkdvNgbW9Z+cRRd8dYP47nRTU7VdAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUZPA2H8D4GHLkFgGDT7P1Q4LtHMQwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO
McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v
Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9aUEEySDhENEdITGtGZ0dEVDdQ
MVE0THRITVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGewDA
MA0GCSqGSIb3DQEBCwUAA4IBAQAeQYJXundNJiPSuwbJ8ENwf3+hNsPE3QFpK61b
b3Nuq+hUHKL9aM2eebt187JBH5nvo5Z0haDOmmM3Oq0364FVQP3wOvtTad8aIXSG
lboh5bx/M0aSfEzVnJYgoONx6Nq2PHW1G50nPGvYzfuiVO/CBkgqvNaXz2YrcDwk
3uSXghIrvCxDyRgjRQjqACUwuUbkncgiX8DD54lSngSZ3NStsIEcpHF9oSIMVImK
z51BfvF342mq4KHr8Mgq6RUzn0U5OH5KkH2Mtfxw5ezVt9CK0Z/1d2R6y+j57mnq
c54Q/NqpUfeOGcu9LZejJmSsdCI8rYTjHku4qwMN5efHy13c
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org