Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0sWU3KnHPM0KYqM1sGfXTZ04ens.roa
File: 0sWU3KnHPM0KYqM1sGfXTZ04ens.roa (raw, json)
Hash identifier: 2GohOm12Lo3snHcDAq0zK0YLZQHaTcOUGGiGT6YCt8s=
Subject key identifier: D2:C5:94:DC:A9:C7:3C:CD:0A:62:A3:35:B0:67:D7:4D:9D:38:7A:7B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1E41
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0sWU3KnHPM0KYqM1sGfXTZ04ens.roa
Signing time: Wed 27 Apr 2022 09:02:56 +0000
ROA not before: Wed 27 Apr 2022 09:02:56 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7745 (0x1e41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Apr 27 09:02:56 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D2C594DCA9C73CCD0A62A335B067D74D9D387A7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:77:14:98:cc:a8:8d:5a:3e:e0:39:ef:f2:
b2:6b:11:48:bf:46:ae:de:8f:67:68:e6:b0:3e:bf:
27:d4:eb:93:4e:32:be:4d:cd:de:69:ea:ff:c6:89:
2c:c5:fa:f8:4f:7d:8a:94:48:fd:19:d8:ee:5b:a8:
f4:c6:6c:cc:9f:7a:3f:b1:36:cb:c3:b6:a3:f3:21:
51:62:16:0f:4c:c2:7c:d4:73:7e:25:d1:62:f1:07:
0d:30:c8:19:1a:7b:cd:f7:e1:8d:fe:9e:7b:3c:b7:
14:95:db:d4:82:00:10:4f:ea:7e:6d:8a:90:68:bc:
11:d9:11:af:88:44:96:b1:55:7b:37:ad:19:02:ff:
18:f9:5c:41:15:a4:40:69:59:87:04:82:f8:83:bf:
f8:56:33:14:9a:f9:a9:f5:fa:41:b6:c6:ff:f0:ef:
af:6b:ad:44:a8:bd:ff:64:1e:49:e2:15:95:96:82:
b5:1a:da:7a:71:ae:63:dc:f3:4e:e9:68:30:5e:c7:
0b:77:29:67:bf:46:5c:24:53:9d:30:b7:b2:b9:4a:
de:bd:3d:d4:f0:1b:e5:60:17:9c:b8:a7:3a:02:4a:
18:1e:2e:47:42:e2:c1:dc:a5:c6:20:e4:8f:ed:b7:
dc:ac:9a:0c:22:52:14:c8:e6:36:aa:8d:09:5c:ce:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C5:94:DC:A9:C7:3C:CD:0A:62:A3:35:B0:67:D7:4D:9D:38:7A:7B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0sWU3KnHPM0KYqM1sGfXTZ04ens.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.220.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:8d:ac:11:12:43:1d:ed:58:7b:4d:01:9e:ec:6c:b2:b7:8f:
a7:39:bf:b4:16:55:33:28:07:37:d7:43:92:96:51:da:f2:35:
b2:1d:d3:a7:49:8d:a7:3e:e9:76:ba:bf:f2:1b:95:99:a1:85:
6e:66:5d:57:51:dd:8d:75:5d:c1:38:c9:7c:25:d4:47:f6:09:
c5:e9:ff:66:b9:06:40:1f:3a:92:1f:89:a2:27:19:1a:f9:7f:
e3:d8:a4:0f:e6:dd:10:46:a5:7c:ce:e8:31:0b:d4:4a:42:be:
f4:43:f4:23:b8:d5:1c:bb:5b:01:50:d2:60:33:a2:bb:66:47:
84:b5:b6:d2:c9:8a:36:12:2d:ff:73:c4:07:5e:83:eb:f3:b0:
00:42:b7:33:f4:6d:44:24:69:06:f3:b4:c9:f5:83:8c:87:dd:
0b:07:65:32:c9:61:cc:bc:be:0f:ad:a7:26:5d:7e:00:e1:17:
7e:a7:92:0f:ad:14:61:a8:6d:42:ff:4f:db:82:e5:e0:61:72:
2b:60:76:de:ed:7f:37:21:bd:4f:eb:d1:0b:f5:c3:17:59:1a:
5b:35:47:65:46:5e:17:a4:68:9d:96:20:9e:1b:c4:a4:4c:64:
cb:42:a5:20:40:72:c4:37:4d:4b:21:df:14:b1:42:9a:42:c2:
ad:5b:4f:9c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHkEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA0Mjcw
OTAyNTZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEQyQzU5NERDQTlDNzND
Q0QwQTYyQTMzNUIwNjdENzREOUQzODdBN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQc3cUmMyojVo+4Dnv8rJrEUi/Rq7ej2do5rA+vyfU65NOMr5N
zd5p6v/GiSzF+vhPfYqUSP0Z2O5bqPTGbMyfej+xNsvDtqPzIVFiFg9MwnzUc34l
0WLxBw0wyBkae8334Y3+nns8txSV29SCABBP6n5tipBovBHZEa+IRJaxVXs3rRkC
/xj5XEEVpEBpWYcEgviDv/hWMxSa+an1+kG2xv/w769rrUSovf9kHkniFZWWgrUa
2npxrmPc807paDBexwt3KWe/RlwkU50wt7K5St69PdTwG+VgF5y4pzoCShgeLkdC
4sHcpcYg5I/tt9ysmgwiUhTI5jaqjQlczvmhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU0sWU3KnHPM0KYqM1sGfXTZ04enswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBzV1UzS25IUE0wS1lxTTFz
R2ZYVFowNGVucy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wdwwDQYJKoZIhvcNAQELBQADggEBAJqNrBESQx3tWHtNAZ7sbLK3j6c5v7QWVTMo
BzfXQ5KWUdryNbId06dJjac+6Xa6v/IblZmhhW5mXVdR3Y11XcE4yXwl1Ef2CcXp
/2a5BkAfOpIfiaInGRr5f+PYpA/m3RBGpXzO6DEL1EpCvvRD9CO41Ry7WwFQ0mAz
ortmR4S1ttLJijYSLf9zxAdeg+vzsABCtzP0bUQkaQbztMn1g4yH3QsHZTLJYcy8
vg+tpyZdfgDhF36nkg+tFGGobUL/T9uC5eBhcitgdt7tfzchvU/r0Qv1wxdZGls1
R2VGXhekaJ2WIJ4bxKRMZMtCpSBAcsQ3TUsh3xSxQppCwq1bT5w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org