Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2EtHk3NOZZXuS0WE8fA1XJK-jWc.roa
File: 2EtHk3NOZZXuS0WE8fA1XJK-jWc.roa (raw, json)
Hash identifier: 9Nd6qdZvsSAef2TMz9RKI+1G8GRseNRmXsLjk4idqS0=
Subject key identifier: D8:4B:47:93:73:4E:65:95:EE:4B:45:84:F1:F0:35:5C:92:BE:8D:67
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D42
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2EtHk3NOZZXuS0WE8fA1XJK-jWc.roa
Signing time: Wed 29 Sep 2021 02:48:48 +0000
ROA not before: Wed 29 Sep 2021 02:48:48 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.195.8.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7490 (0x1d42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:48 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D84B4793734E6595EE4B4584F1F0355C92BE8D67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:82:52:70:57:66:c9:d7:b3:b4:91:0d:53:
e7:3c:ba:74:64:1f:8c:9b:72:ce:07:e1:27:c2:ad:
1e:ab:35:5f:32:f4:fe:01:4a:53:24:65:34:f7:7e:
75:82:3a:ef:7d:e1:30:17:68:1b:6e:64:25:44:e8:
d9:d0:56:b4:13:ea:b1:e1:77:17:d2:fb:f2:0a:92:
23:fb:b8:c3:a8:bb:f4:c9:3b:26:cb:69:89:5c:1a:
76:c7:d6:38:d6:ac:95:78:ea:8b:db:30:10:4c:5b:
db:12:45:ec:a1:fd:bc:5a:44:8a:8c:18:1e:e5:5f:
ac:f0:fb:d7:d2:db:04:b7:22:8d:bc:b1:45:18:bd:
59:58:97:fd:35:97:dd:b4:07:38:0e:71:59:c6:56:
38:89:ac:09:40:a2:00:c7:16:1c:5d:0b:7d:38:d2:
fd:aa:e8:42:97:6a:7f:cb:89:74:4d:29:10:2b:83:
67:3a:ca:13:d4:45:70:ee:ce:c6:f5:28:7b:d9:dc:
30:dc:2b:33:70:75:9d:4d:bc:8b:e0:8b:fd:43:34:
92:a2:f4:cd:97:aa:5b:3e:ce:25:b9:53:6d:1c:88:
35:c0:16:7d:bf:9e:f8:55:a6:01:a9:07:7a:3a:c2:
c8:11:c8:9b:c6:f9:05:1a:91:4d:fe:5a:2d:e9:0e:
1b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4B:47:93:73:4E:65:95:EE:4B:45:84:F1:F0:35:5C:92:BE:8D:67
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2EtHk3NOZZXuS0WE8fA1XJK-jWc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.8.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:1f:e4:42:13:0a:1a:6a:00:c8:78:61:24:fa:04:60:f5:c7:
66:37:5f:b5:ee:68:87:18:91:46:23:f6:8e:6b:b1:a1:63:3e:
0a:40:bc:71:d6:86:f9:83:59:3b:c9:29:35:80:c4:6d:12:0b:
11:32:2a:09:47:1e:ce:94:b3:b4:a3:9f:e3:69:b7:84:5c:05:
af:1f:f8:52:74:0e:bc:c6:f4:77:64:63:02:df:bf:51:36:ee:
0a:1a:7e:cd:14:72:8e:71:5c:dd:2d:d4:99:0b:f9:7b:24:6f:
76:d7:c8:aa:c8:23:7b:f1:c2:58:31:02:cd:a0:fc:68:03:af:
81:64:c2:07:43:f8:a4:89:76:7e:c3:a4:3f:92:3a:e6:10:8c:
d0:72:48:b5:e5:d5:9e:5d:ad:50:25:2f:46:9c:ec:96:7d:53:
3f:b7:7f:0a:ee:72:5a:72:19:28:67:cc:6a:59:b7:c6:da:58:
a5:f3:48:b1:da:4e:82:97:b5:21:03:5f:a8:a2:bd:bf:2a:30:
fc:f6:e9:40:b5:ab:de:74:6b:45:2b:dd:5a:b1:3f:43:de:1c:
d1:07:7b:7e:06:14:70:e2:75:cc:8c:03:dc:d7:26:a2:38:d2:
35:35:5b:3f:85:ee:3b:6b:26:f7:88:6a:6c:a9:1d:cb:67:09:
15:e5:49:4f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHUIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4NDhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEQ4NEI0NzkzNzM0RTY1
OTVFRTRCNDU4NEYxRjAzNTVDOTJCRThENjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6y4JScFdmydeztJENU+c8unRkH4ybcs4H4SfCrR6rNV8y9P4B
SlMkZTT3fnWCOu994TAXaBtuZCVE6NnQVrQT6rHhdxfS+/IKkiP7uMOou/TJOybL
aYlcGnbH1jjWrJV46ovbMBBMW9sSReyh/bxaRIqMGB7lX6zw+9fS2wS3Io28sUUY
vVlYl/01l920BzgOcVnGVjiJrAlAogDHFhxdC3040v2q6EKXan/LiXRNKRArg2c6
yhPURXDuzsb1KHvZ3DDcKzNwdZ1NvIvgi/1DNJKi9M2Xqls+ziW5U20ciDXAFn2/
nvhVpgGpB3o6wsgRyJvG+QUakU3+Wi3pDhsDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU2EtHk3NOZZXuS0WE8fA1XJK+jWcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJFdEhrM05PWlpYdVMwV0U4
ZkExWEpLLWpXYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7
wwgwDQYJKoZIhvcNAQELBQADggEBAA0f5EITChpqAMh4YST6BGD1x2Y3X7XuaIcY
kUYj9o5rsaFjPgpAvHHWhvmDWTvJKTWAxG0SCxEyKglHHs6Us7Sjn+Npt4RcBa8f
+FJ0DrzG9HdkYwLfv1E27goafs0Uco5xXN0t1JkL+Xskb3bXyKrII3vxwlgxAs2g
/GgDr4FkwgdD+KSJdn7DpD+SOuYQjNBySLXl1Z5drVAlL0ac7JZ9Uz+3fwruclpy
GShnzGpZt8baWKXzSLHaToKXtSEDX6iivb8qMPz26UC1q950a0Ur3VqxP0PeHNEH
e34GFHDidcyMA9zXJqI40jU1Wz+F7jtrJveIamypHctnCRXlSU8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org