Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4ZxD6oo1dkin-HjASQTpnp31hQo.roa
File: 4ZxD6oo1dkin-HjASQTpnp31hQo.roa (raw, json)
Hash identifier: UVhTjCwrpXY8nGO4fIgVJxKqOmEmjeD2rpIojqFMwCY=
Subject key identifier: E1:9C:43:EA:8A:35:76:48:A7:F8:78:C0:49:04:E9:9E:9D:F5:85:0A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B06
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4ZxD6oo1dkin-HjASQTpnp31hQo.roa
Signing time: Wed 29 Sep 2021 02:46:02 +0000
ROA not before: Wed 29 Sep 2021 02:46:02 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6918 (0x1b06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:02 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E19C43EA8A357648A7F878C04904E99E9DF5850A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:74:a7:58:35:ee:e3:9c:b3:22:86:c0:32:ab:
cb:87:63:5c:5f:94:47:58:1c:63:64:79:b3:60:63:
a7:1e:20:6d:92:4e:61:cf:fb:0d:c6:22:ef:42:84:
f4:db:19:d2:f7:84:e5:1c:50:7f:24:8b:ef:e5:6d:
6e:e4:d9:dd:fd:2c:47:b3:a1:e7:19:0f:7a:20:cc:
de:1b:5f:4f:75:e0:cc:c6:ee:a2:c0:4e:d5:c6:ea:
e7:33:5e:fd:f2:7f:b0:9b:2f:71:54:14:46:2e:60:
70:7b:4a:e2:d1:b8:2f:82:d7:41:11:1d:3d:ff:71:
ab:90:f5:5e:86:ea:68:2b:f0:88:d3:8a:99:be:d9:
b7:21:a1:e4:02:26:9e:aa:72:88:6a:b5:31:1b:1b:
da:18:f6:78:d9:0c:76:2f:10:bf:fe:35:69:59:9f:
2a:da:85:62:e6:d4:d0:d3:8d:51:34:33:8c:a1:df:
33:32:75:f2:e9:4f:e2:1b:82:43:e0:b0:0b:5b:cc:
f9:8d:34:2e:b5:18:f1:68:28:19:85:84:7a:8c:84:
24:18:98:50:74:ec:27:02:e6:44:68:db:38:3a:10:
96:2f:9e:e0:5b:ce:3a:72:86:c7:05:9c:54:20:df:
82:a5:84:d3:09:1a:bb:ec:d8:51:7e:12:d2:c0:3d:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9C:43:EA:8A:35:76:48:A7:F8:78:C0:49:04:E9:9E:9D:F5:85:0A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4ZxD6oo1dkin-HjASQTpnp31hQo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.176.0/22
Signature Algorithm: sha256WithRSAEncryption
07:55:b5:b2:bb:8f:c6:69:d0:55:38:db:6d:f6:3e:c7:cf:92:
2a:92:69:f4:c7:b0:f7:70:c2:88:3d:20:03:94:51:7b:f2:c2:
44:7b:77:56:b9:c3:f0:45:5f:3c:c3:14:ac:b9:fd:8a:ab:e1:
81:af:3c:77:a8:36:8d:49:39:60:58:d5:ec:75:36:99:14:16:
4d:13:0b:13:01:51:80:08:4f:eb:cf:1b:c3:6b:bb:ba:21:00:
0d:b6:f8:62:3a:f6:ae:a2:c4:4b:7f:86:6a:73:06:3f:1c:32:
b5:93:eb:cd:9d:dd:c2:3c:de:93:57:8e:4e:54:35:3e:f2:bc:
1c:8d:d1:03:f5:d4:93:16:1f:33:1d:3f:7f:09:74:ee:c3:6b:
b5:69:82:cb:da:2d:fa:49:3c:ed:8c:4f:6e:22:18:3d:40:02:
c8:8c:8b:53:d1:cb:fc:21:9a:0a:23:7b:35:89:43:5c:22:a0:
97:0d:4c:ad:70:73:00:0f:95:a5:7d:41:64:5a:5b:8c:8d:08:
d6:21:9f:1b:01:01:27:e8:5e:a3:3a:fa:a2:d5:04:dc:26:96:
9d:b9:0a:bb:9e:cd:4e:af:29:58:e7:91:b0:ac:bd:92:d2:d5:
94:6b:a3:e3:4c:82:14:74:27:7a:47:74:ac:18:88:e2:32:c6:
f2:ed:5a:4c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGwYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2MDJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEUxOUM0M0VBOEEzNTc2
NDhBN0Y4NzhDMDQ5MDRFOTlFOURGNTg1MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjdKdYNe7jnLMihsAyq8uHY1xflEdYHGNkebNgY6ceIG2STmHP
+w3GIu9ChPTbGdL3hOUcUH8ki+/lbW7k2d39LEezoecZD3ogzN4bX0914MzG7qLA
TtXG6uczXv3yf7CbL3FUFEYuYHB7SuLRuC+C10ERHT3/cauQ9V6G6mgr8IjTipm+
2bchoeQCJp6qcohqtTEbG9oY9njZDHYvEL/+NWlZnyrahWLm1NDTjVE0M4yh3zMy
dfLpT+IbgkPgsAtbzPmNNC61GPFoKBmFhHqMhCQYmFB07CcC5kRo2zg6EJYvnuBb
zjpyhscFnFQg34KlhNMJGrvs2FF+EtLAPZ35AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU4ZxD6oo1dkin+HjASQTpnp31hQowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRaeEQ2b28xZGtpbi1IakFT
UVRwbnAzMWhRby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wbAwDQYJKoZIhvcNAQELBQADggEBAAdVtbK7j8Zp0FU42232PsfPkiqSafTHsPdw
wog9IAOUUXvywkR7d1a5w/BFXzzDFKy5/Yqr4YGvPHeoNo1JOWBY1ex1NpkUFk0T
CxMBUYAIT+vPG8Nru7ohAA22+GI69q6ixEt/hmpzBj8cMrWT682d3cI83pNXjk5U
NT7yvByN0QP11JMWHzMdP38JdO7Da7VpgsvaLfpJPO2MT24iGD1AAsiMi1PRy/wh
mgojezWJQ1wioJcNTK1wcwAPlaV9QWRaW4yNCNYhnxsBASfoXqM6+qLVBNwmlp25
CruezU6vKVjnkbCsvZLS1ZRro+NMghR0J3pHdKwYiOIyxvLtWkw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org