Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-D6oe9rbVBMbZ85m_de2W18WbSA.roa
File: -D6oe9rbVBMbZ85m_de2W18WbSA.roa (raw, json)
Hash identifier: LV+oimZWQgSRl/s86BwXsPxsq5I5Zxnup5QbUqlAYQk=
Subject key identifier: F8:3E:A8:7B:DA:DB:54:13:1B:67:CE:66:FD:D7:B6:5B:5F:16:6D:20
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21D9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-D6oe9rbVBMbZ85m_de2W18WbSA.roa
Signing time: Fri 25 Nov 2022 04:40:28 +0000
ROA not before: Fri 25 Nov 2022 04:40:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8665 (0x21d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F83EA87BDADB54131B67CE66FDD7B65B5F166D20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ae:5e:07:26:ed:05:1a:a0:5d:eb:db:87:0b:
2a:32:8e:6b:44:01:53:8e:b0:88:eb:aa:83:bf:3a:
6b:0b:e5:77:16:ff:00:4a:4c:95:e4:1c:39:92:18:
66:30:31:bd:43:51:b7:17:79:7b:7e:da:03:5e:ea:
64:53:6e:07:7d:3f:bb:e4:f1:72:ad:47:84:d2:d9:
b8:cc:5e:30:7c:4e:16:4d:1c:ba:ae:3b:4b:d9:6d:
ff:2a:90:b8:5a:9c:4b:36:54:e3:1b:83:9d:7d:23:
9b:9c:49:e1:77:0b:69:31:8d:f6:de:4a:e4:f0:67:
27:a5:a9:ac:59:80:27:7b:af:fc:ae:69:86:41:66:
6a:64:00:4d:21:b7:6f:26:8a:b6:06:85:ff:d0:16:
d1:03:ea:90:8f:43:7d:63:b8:1e:90:16:2a:da:14:
88:ad:c6:16:17:8a:6e:ac:f8:30:4a:21:9b:24:72:
52:70:84:82:f5:bc:66:31:b5:43:d2:6b:10:8f:90:
f9:90:14:32:bb:c1:a8:f4:cf:2e:4d:11:8d:f2:2f:
6f:c8:d9:7d:0f:ad:92:2d:e7:a3:b4:1e:26:b1:a9:
42:48:e4:c1:0a:e2:ac:8d:44:b5:1a:80:af:f4:3f:
c9:66:62:a9:76:48:d1:38:75:1e:9b:91:92:91:00:
f6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3E:A8:7B:DA:DB:54:13:1B:67:CE:66:FD:D7:B6:5B:5F:16:6D:20
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-D6oe9rbVBMbZ85m_de2W18WbSA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.92.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:60:e2:17:a9:80:07:0f:a4:d5:5b:35:47:68:f3:c9:68:bf:
66:f2:04:62:43:d0:0b:b8:57:f0:c2:9a:59:aa:f9:96:c9:1c:
50:f8:e4:c2:6e:89:2a:a4:45:0c:7e:47:c3:bb:15:c3:7a:92:
ed:bf:53:87:9c:cb:d9:60:ce:62:d9:4f:02:72:e4:f0:f6:71:
a9:78:f3:dc:8f:90:02:26:8e:9b:91:90:88:a7:d6:2f:4c:b8:
b9:a2:2b:a6:2c:66:45:7b:d2:ca:ee:af:7f:5d:8b:b0:f5:21:
5e:9e:d4:a0:26:2a:74:92:f4:74:3c:2a:dc:db:d7:88:fa:c1:
2f:db:d0:25:cd:cf:0d:39:ed:db:29:2b:b8:a0:ba:35:ce:22:
89:1a:4f:8b:1e:b7:ae:12:89:dd:3f:50:1f:a4:9d:af:34:37:
95:3e:2f:06:1a:91:16:46:7d:22:05:60:5d:7c:99:97:9e:da:
70:20:a6:da:71:77:48:9c:0b:07:2d:d6:32:8c:e7:9b:ad:6a:
8e:f0:b7:00:30:d6:58:95:f2:73:d3:98:ee:13:c8:57:34:94:
d1:6d:2e:24:2b:05:12:12:42:27:dc:73:35:e1:95:1d:c6:f8:
02:ab:21:66:94:08:14:eb:2d:51:d2:1f:46:78:e2:0c:d8:75:
c9:b6:e8:26
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMjhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEY4M0VBODdCREFEQjU0
MTMxQjY3Q0U2NkZERDdCNjVCNUYxNjZEMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjrl4HJu0FGqBd69uHCyoyjmtEAVOOsIjrqoO/OmsL5XcW/wBK
TJXkHDmSGGYwMb1DUbcXeXt+2gNe6mRTbgd9P7vk8XKtR4TS2bjMXjB8ThZNHLqu
O0vZbf8qkLhanEs2VOMbg519I5ucSeF3C2kxjfbeSuTwZyelqaxZgCd7r/yuaYZB
ZmpkAE0ht28mirYGhf/QFtED6pCPQ31juB6QFiraFIitxhYXim6s+DBKIZskclJw
hIL1vGYxtUPSaxCPkPmQFDK7waj0zy5NEY3yL2/I2X0PrZIt56O0HiaxqUJI5MEK
4qyNRLUagK/0P8lmYql2SNE4dR6bkZKRAPZVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+D6oe9rbVBMbZ85m/de2W18WbSAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1ENm9lOXJiVkJNYlo4NW1f
ZGUyVzE4V2JTQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wVwwDQYJKoZIhvcNAQELBQADggEBAKxg4hepgAcPpNVbNUdo88lov2byBGJD0Au4
V/DCmlmq+ZbJHFD45MJuiSqkRQx+R8O7FcN6ku2/U4ecy9lgzmLZTwJy5PD2cal4
89yPkAImjpuRkIin1i9MuLmiK6YsZkV70srur39di7D1IV6e1KAmKnSS9HQ8Ktzb
14j6wS/b0CXNzw057dspK7igujXOIokaT4set64Sid0/UB+kna80N5U+LwYakRZG
fSIFYF18mZee2nAgptpxd0icCwct1jKM55utao7wtwAw1liV8nPTmO4TyFc0lNFt
LiQrBRISQifcczXhlR3G+AKrIWaUCBTrLVHSH0Z44gzYdcm26CY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org