Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-_n6G8iFPAcNlT0bDgJivix40mE.roa
File: -_n6G8iFPAcNlT0bDgJivix40mE.roa (raw, json)
Hash identifier: EPipwMY12Q5w9TAohiEUJuw/LlSu6cf1EYf81YVqJxA=
Subject key identifier: FB:F9:FA:1B:C8:85:3C:07:0D:95:3D:1B:0E:02:62:BE:2C:78:D2:61
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2054
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-_n6G8iFPAcNlT0bDgJivix40mE.roa
Signing time: Fri 25 Nov 2022 04:38:35 +0000
ROA not before: Fri 25 Nov 2022 04:38:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8276 (0x2054)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FBF9FA1BC8853C070D953D1B0E0262BE2C78D261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:c6:2c:97:53:0d:53:39:68:fc:1e:62:9e:
18:8b:30:5f:ec:e7:12:6a:53:f8:28:55:96:c5:e4:
dc:75:2c:f1:61:3a:85:de:80:b9:d7:c9:41:d4:37:
c4:12:d6:30:ba:4e:c7:10:5f:ba:77:d5:a5:0d:d4:
58:f9:d4:7b:7a:c7:43:03:be:a6:45:f5:b6:3a:3d:
a8:15:dd:10:41:33:f2:a6:79:b0:e3:dc:30:c1:72:
da:ac:56:97:35:4e:41:84:34:fb:9c:cf:6d:69:b6:
f4:a1:7d:9f:7a:86:4e:4f:d6:87:07:3d:f1:32:df:
2a:73:6f:2d:14:c4:ee:ce:df:72:ec:1f:97:ad:fb:
f3:91:04:a4:73:8b:49:86:81:0c:f7:06:20:54:02:
50:9a:ed:dc:f6:f5:33:98:bf:da:80:12:ee:59:6e:
b7:72:b8:1c:73:b5:f6:1e:c2:ba:af:9b:be:e7:ab:
63:e2:d4:20:25:7f:61:87:7e:8f:9a:29:e7:d8:ee:
57:f6:b1:6f:c5:12:6b:a7:9f:b7:eb:55:f1:6f:97:
ca:f1:e8:60:90:67:f8:95:42:20:46:bf:85:99:20:
4c:f6:c5:a2:58:65:29:4b:5b:bc:e9:36:1c:97:ca:
38:a8:b1:59:e3:cd:db:c3:97:ca:0e:da:25:bf:e2:
1b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F9:FA:1B:C8:85:3C:07:0D:95:3D:1B:0E:02:62:BE:2C:78:D2:61
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-_n6G8iFPAcNlT0bDgJivix40mE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:f5:56:44:a4:1c:46:ac:b8:e8:2c:0c:f1:52:49:fd:81:0d:
1a:48:c3:3d:1c:07:cf:22:6b:74:2a:67:61:88:8a:16:7d:7f:
fd:b0:1c:da:86:a1:e5:8a:6f:a2:4e:53:3c:0c:8d:af:34:bb:
17:1b:28:ba:ac:a1:2e:ef:0f:38:91:8d:31:42:a3:36:a7:dd:
dd:7d:98:c5:fb:19:4a:6a:25:b0:cc:3f:da:4e:0c:79:28:92:
f9:58:4c:54:c2:be:d0:44:99:0a:25:ee:69:8f:03:28:b3:1c:
68:32:94:19:80:44:0c:a9:25:f2:e7:6e:0e:72:3f:6d:85:2a:
db:90:ae:14:c4:85:ef:ed:70:7f:53:28:4f:f1:f4:c2:8f:0d:
1e:da:28:f2:40:d5:50:3b:b2:56:9f:47:14:0b:21:1f:53:b9:
bc:3f:c6:b7:b3:d5:82:b7:ab:59:bf:5f:ae:53:6b:e0:cd:6c:
42:9e:6c:8a:0c:b7:78:d3:73:b7:56:16:88:22:a9:de:fe:2e:
4a:2a:6e:b0:26:8e:4a:24:9c:6c:78:0f:3a:67:a1:6f:45:a8:
a9:4a:a3:76:11:e2:6f:0c:2b:44:72:4d:84:bf:9e:8b:56:0c:
6b:ab:e4:63:29:94:90:63:0c:73:98:80:8e:cb:75:6c:3a:78:
81:76:9b:de
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4MzVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZCRjlGQTFCQzg4NTND
MDcwRDk1M0QxQjBFMDI2MkJFMkM3OEQyNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDU8sYsl1MNUzlo/B5inhiLMF/s5xJqU/goVZbF5Nx1LPFhOoXe
gLnXyUHUN8QS1jC6TscQX7p31aUN1Fj51Ht6x0MDvqZF9bY6PagV3RBBM/KmebDj
3DDBctqsVpc1TkGENPucz21ptvShfZ96hk5P1ocHPfEy3ypzby0UxO7O33LsH5et
+/ORBKRzi0mGgQz3BiBUAlCa7dz29TOYv9qAEu5ZbrdyuBxztfYewrqvm77nq2Pi
1CAlf2GHfo+aKefY7lf2sW/FEmunn7frVfFvl8rx6GCQZ/iVQiBGv4WZIEz2xaJY
ZSlLW7zpNhyXyjiosVnjzdvDl8oO2iW/4huxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+/n6G8iFPAcNlT0bDgJivix40mEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1fbjZHOGlGUEFjTmxUMGJE
Z0ppdml4NDBtRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
w8gwDQYJKoZIhvcNAQELBQADggEBAKb1VkSkHEasuOgsDPFSSf2BDRpIwz0cB88i
a3QqZ2GIihZ9f/2wHNqGoeWKb6JOUzwMja80uxcbKLqsoS7vDziRjTFCozan3d19
mMX7GUpqJbDMP9pODHkokvlYTFTCvtBEmQol7mmPAyizHGgylBmARAypJfLnbg5y
P22FKtuQrhTEhe/tcH9TKE/x9MKPDR7aKPJA1VA7slafRxQLIR9Tubw/xrez1YK3
q1m/X65Ta+DNbEKebIoMt3jTc7dWFogiqd7+LkoqbrAmjkoknGx4DzpnoW9FqKlK
o3YR4m8MK0RyTYS/notWDGur5GMplJBjDHOYgI7LdWw6eIF2m94=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org