Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4pHV9Evv_ahIrwW3GndLCvJSVwM.roa
File: 4pHV9Evv_ahIrwW3GndLCvJSVwM.roa (raw, json)
Hash identifier: tYhuqhMej9OCuVg1rJe7XqNwnRpIcSGrqREU4t6jUfI=
Subject key identifier: E2:91:D5:F4:4B:EF:FD:A8:48:AF:05:B7:1A:77:4B:0A:F2:52:57:03
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14B5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4pHV9Evv_ahIrwW3GndLCvJSVwM.roa
Signing time: Sun 07 Feb 2021 11:59:44 +0000
ROA not before: Sun 07 Feb 2021 11:59:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5301 (0x14b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:59:44 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E291D5F44BEFFDA848AF05B71A774B0AF2525703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:3f:d2:5b:14:6c:c7:1c:d9:a6:34:5a:a5:
84:67:f9:93:03:3c:b3:a0:f9:38:32:18:5a:69:ac:
53:dd:74:f3:a5:bf:4b:b1:a8:50:b2:be:ab:28:74:
1c:5d:45:00:b4:42:46:0f:1c:d5:ab:a0:60:ca:c2:
10:b1:08:4c:ab:8f:91:87:2d:17:ad:8f:63:12:5a:
d7:18:7a:03:bf:b7:76:b1:99:b4:a5:e6:49:4c:71:
a9:75:0b:ab:b1:a6:3e:0c:87:42:d8:a3:bd:01:a9:
f6:22:56:97:04:46:0e:bb:95:29:81:ae:2e:1c:8c:
a9:43:d1:11:0c:48:13:88:64:b0:04:0a:03:51:74:
a1:33:57:6f:b7:a7:1d:c1:3f:58:a1:06:20:ff:aa:
d9:1b:54:12:09:23:f6:6a:87:38:f7:3a:8f:d8:75:
e9:c6:8c:33:90:b3:8c:14:a0:9e:b0:8e:4b:ec:88:
e5:e6:c9:3d:cc:1f:92:4d:ec:90:e3:6e:b2:07:54:
91:6c:bd:e5:64:c2:bf:23:32:14:68:da:78:77:d2:
6d:5e:2f:f1:06:1d:cf:1c:68:8b:bd:2f:c4:f2:1d:
4f:7a:33:48:cb:0e:e3:e1:23:52:d2:e0:ef:57:4a:
8f:d2:28:68:90:c6:a7:43:8b:38:33:a5:38:a0:99:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:91:D5:F4:4B:EF:FD:A8:48:AF:05:B7:1A:77:4B:0A:F2:52:57:03
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4pHV9Evv_ahIrwW3GndLCvJSVwM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.168.0/22
Signature Algorithm: sha256WithRSAEncryption
56:42:47:f9:c0:98:58:49:91:5c:06:64:c8:b9:a4:58:56:37:
19:5e:8b:1a:db:7b:59:ea:59:d0:27:d2:85:45:df:26:d9:f2:
94:73:fd:42:d7:19:1a:52:e0:aa:ab:73:8e:fa:8c:97:56:ad:
bf:0f:27:23:77:ad:91:ad:f1:67:71:f8:c1:2f:4f:17:a8:a9:
26:f9:10:bd:ec:61:92:5f:74:47:ee:ae:38:d0:ec:ff:d9:ab:
7c:34:be:02:99:0b:27:ae:3e:c1:63:ae:39:04:53:4b:9f:77:
44:b4:95:95:e7:86:cd:df:d9:c5:92:80:87:12:e2:13:26:38:
31:9c:34:41:4e:40:97:9f:8b:79:9f:cc:5f:8b:74:6c:da:3e:
fa:b6:c2:0a:db:f9:6b:67:fb:80:14:e0:46:04:00:2b:ad:97:
67:e1:ca:b7:b2:f0:d4:89:67:3d:40:d3:84:eb:df:00:e5:55:
58:2f:99:1d:3d:1c:af:2e:75:c3:5e:e4:58:04:bc:00:53:86:
8e:57:db:7e:52:49:cd:f9:23:3c:69:df:51:dc:d7:81:e0:80:
1e:5f:40:ee:a7:e4:da:d7:ea:e2:9a:a4:63:8e:61:15:1f:70:
76:17:16:01:97:86:04:de:df:2a:ed:a8:58:a6:2a:9b:a4:47:
0a:f7:71:a7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFLUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU5NDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEUyOTFENUY0NEJFRkZE
QTg0OEFGMDVCNzFBNzc0QjBBRjI1MjU3MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9BD/SWxRsxxzZpjRapYRn+ZMDPLOg+TgyGFpprFPddPOlv0ux
qFCyvqsodBxdRQC0QkYPHNWroGDKwhCxCEyrj5GHLRetj2MSWtcYegO/t3axmbSl
5klMcal1C6uxpj4Mh0LYo70BqfYiVpcERg67lSmBri4cjKlD0REMSBOIZLAECgNR
dKEzV2+3px3BP1ihBiD/qtkbVBIJI/Zqhzj3Oo/YdenGjDOQs4wUoJ6wjkvsiOXm
yT3MH5JN7JDjbrIHVJFsveVkwr8jMhRo2nh30m1eL/EGHc8caIu9L8TyHU96M0jL
DuPhI1LS4O9XSo/SKGiQxqdDizgzpTigmYgNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU4pHV9Evv/ahIrwW3GndLCvJSVwMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRwSFY5RXZ2X2FoSXJ3VzNH
bmRMQ3ZKU1Z3TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wKgwDQYJKoZIhvcNAQELBQADggEBAFZCR/nAmFhJkVwGZMi5pFhWNxleixrbe1nq
WdAn0oVF3ybZ8pRz/ULXGRpS4Kqrc476jJdWrb8PJyN3rZGt8Wdx+MEvTxeoqSb5
EL3sYZJfdEfurjjQ7P/Zq3w0vgKZCyeuPsFjrjkEU0ufd0S0lZXnhs3f2cWSgIcS
4hMmODGcNEFOQJefi3mfzF+LdGzaPvq2wgrb+Wtn+4AU4EYEACutl2fhyrey8NSJ
Zz1A04Tr3wDlVVgvmR09HK8udcNe5FgEvABTho5X235SSc35Izxp31Hc14HggB5f
QO6n5NrX6uKapGOOYRUfcHYXFgGXhgTe3yrtqFimKpukRwr3cac=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:35 2025 by rpki-client