Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-GAT_jo2ygexT-2mTTZHGTkkPsc.roa
File: -GAT_jo2ygexT-2mTTZHGTkkPsc.roa (raw, json)
Hash identifier: B9jWhPtozfEKEPQOiYJ823VBKG7icAebbQBQrBC8+7Q=
Subject key identifier: F8:60:13:FE:3A:36:CA:07:B1:4F:ED:A6:4D:36:47:19:39:24:3E:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2157
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-GAT_jo2ygexT-2mTTZHGTkkPsc.roa
Signing time: Fri 25 Nov 2022 04:39:48 +0000
ROA not before: Fri 25 Nov 2022 04:39:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.193.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8535 (0x2157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F86013FE3A36CA07B14FEDA64D36471939243EC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:50:e3:4d:be:e6:c7:b1:33:fa:48:55:26:
e4:4f:9b:e1:a0:80:8e:9d:f1:b2:74:a8:4b:06:b3:
30:0d:80:de:29:19:10:21:9b:c1:2c:5a:a6:29:f3:
0c:5d:19:d7:6b:cc:99:ce:d6:05:35:b3:d3:23:39:
ec:93:f4:68:38:11:9b:b4:92:f5:45:68:fe:26:fd:
7a:e9:13:80:36:26:95:13:ec:dc:d1:ba:8b:77:5b:
90:36:6f:65:83:72:66:39:80:31:18:4b:33:58:df:
ce:1d:3c:45:72:75:e7:d1:81:8f:98:24:b9:a8:bd:
ca:8b:f6:7e:df:b5:00:7a:d0:dc:11:81:a4:82:68:
b7:e4:84:4f:dc:d8:2d:f0:9e:79:b2:53:d0:98:3f:
e3:f6:59:25:37:f1:97:fa:de:8c:1f:86:f7:15:06:
3e:77:25:69:0a:46:56:ce:26:79:f8:5d:23:fe:12:
1a:d9:34:5d:45:af:2c:e8:f2:2b:12:d9:dd:d0:46:
da:5f:d6:80:52:1f:85:3d:18:97:c8:a3:1b:1e:b6:
2b:31:5c:98:57:af:1c:c3:0f:53:62:04:b1:dc:28:
83:23:a4:d1:46:34:35:a4:4b:58:5c:0a:00:66:63:
1d:c4:f0:60:d1:ea:a7:7c:53:21:ac:94:97:10:9f:
ee:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:60:13:FE:3A:36:CA:07:B1:4F:ED:A6:4D:36:47:19:39:24:3E:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-GAT_jo2ygexT-2mTTZHGTkkPsc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.64.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:c2:65:c3:44:18:30:16:45:49:0f:4c:4a:b8:f5:75:84:7e:
02:33:1e:f0:ea:04:87:6d:81:c5:03:e5:d0:e5:f4:d9:10:6a:
5f:ad:40:b4:9e:9b:14:f7:60:85:18:22:81:50:0e:7b:cd:42:
a8:8e:94:9f:45:74:6e:be:36:95:ce:7b:43:80:b9:48:0f:59:
e8:fb:8a:22:f5:c5:48:82:10:61:fc:f4:d7:b6:65:d2:8f:b4:
f5:4f:25:00:98:d3:0c:52:79:78:8a:74:bf:9e:62:17:72:c8:
02:a9:92:74:85:9f:cf:11:1d:14:d5:82:ec:98:d0:58:94:97:
74:7b:8d:90:1d:ae:19:9e:8e:98:5b:2f:c4:4f:51:d8:69:a7:
2d:e9:3f:5a:16:79:2a:2c:49:16:ae:03:96:4c:69:bc:3f:bc:
57:e1:ce:42:fc:10:44:76:35:4d:09:89:91:9f:91:80:a6:1d:
ba:e4:c3:17:4a:55:db:88:d7:71:aa:0f:77:f9:a2:55:99:da:
d4:18:cb:01:c2:a8:46:10:63:08:8d:93:a7:3d:da:11:f0:7a:
a7:99:1e:2b:e5:cd:ef:99:61:38:b4:ac:05:cf:c5:fa:ac:66:
da:13:f9:3f:2e:52:f4:4f:94:d2:b9:77:cb:55:cd:cc:e4:51:
f6:71:5b:ca
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIVcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5NDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEY4NjAxM0ZFM0EzNkNB
MDdCMTRGRURBNjREMzY0NzE5MzkyNDNFQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCebFDjTb7mx7Ez+khVJuRPm+GggI6d8bJ0qEsGszANgN4pGRAh
m8EsWqYp8wxdGddrzJnO1gU1s9MjOeyT9Gg4EZu0kvVFaP4m/XrpE4A2JpUT7NzR
uot3W5A2b2WDcmY5gDEYSzNY384dPEVydefRgY+YJLmovcqL9n7ftQB60NwRgaSC
aLfkhE/c2C3wnnmyU9CYP+P2WSU38Zf63owfhvcVBj53JWkKRlbOJnn4XSP+EhrZ
NF1Fryzo8isS2d3QRtpf1oBSH4U9GJfIoxsetisxXJhXrxzDD1NiBLHcKIMjpNFG
NDWkS1hcCgBmYx3E8GDR6qd8UyGslJcQn+6ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+GAT/jo2ygexT+2mTTZHGTkkPscwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1HQVRfam8yeWdleFQtMm1U
VFpIR1Rra1BzYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
wUAwDQYJKoZIhvcNAQELBQADggEBAEzCZcNEGDAWRUkPTEq49XWEfgIzHvDqBIdt
gcUD5dDl9NkQal+tQLSemxT3YIUYIoFQDnvNQqiOlJ9FdG6+NpXOe0OAuUgPWej7
iiL1xUiCEGH89Ne2ZdKPtPVPJQCY0wxSeXiKdL+eYhdyyAKpknSFn88RHRTVguyY
0FiUl3R7jZAdrhmejphbL8RPUdhppy3pP1oWeSosSRauA5ZMabw/vFfhzkL8EER2
NU0JiZGfkYCmHbrkwxdKVduI13GqD3f5olWZ2tQYywHCqEYQYwiNk6c92hHweqeZ
Hivlze+ZYTi0rAXPxfqsZtoT+T8uUvRPlNK5d8tVzczkUfZxW8o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org