Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6PDzqLd_2noOmxV5PJWlEaYVXtI.roa
File: 6PDzqLd_2noOmxV5PJWlEaYVXtI.roa (raw, json)
Hash identifier: jaTq1fKqOOGBB0+z0E0hP3CsP2woGUOnKOMM7MqPveg=
Subject key identifier: E8:F0:F3:A8:B7:7F:DA:7A:0E:9B:15:79:3C:95:A5:11:A6:15:5E:D2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6PDzqLd_2noOmxV5PJWlEaYVXtI.roa
Signing time: Thu 15 Sep 2022 02:45:49 +0000
ROA not before: Thu 15 Sep 2022 02:45:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.236.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E8F0F3A8B77FDA7A0E9B15793C95A511A6155ED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3b:26:f3:91:ab:60:48:d6:62:c6:de:f4:60:
ed:da:27:3b:59:8a:89:93:31:93:8f:8c:77:57:bd:
aa:1c:3f:81:cf:89:87:99:29:2e:44:8a:97:68:bd:
8f:e2:9f:a7:c0:18:ba:2c:a6:df:3a:62:f6:6b:c3:
e8:c0:50:44:28:3e:2f:3f:ef:22:55:37:d7:98:c4:
2d:d6:69:fb:41:80:3c:24:d6:1a:c9:fe:a1:b5:ba:
5e:37:f3:01:69:33:8c:0c:d3:74:45:6e:6a:04:60:
70:51:ed:e0:14:20:88:02:3d:9d:2a:af:96:d3:94:
d1:56:d4:19:e9:0d:c8:b0:81:4a:d2:a5:ba:ff:49:
2d:55:10:40:c2:99:71:53:df:69:7b:27:53:d7:24:
b3:8d:e2:2c:44:2e:4d:73:5e:6a:84:d2:35:ff:0d:
75:80:96:c2:62:59:98:c6:95:1f:f6:27:ed:fb:54:
68:d9:72:c3:ad:c5:2c:f0:01:74:7b:94:56:49:41:
16:c2:64:ae:39:86:79:c8:03:52:fb:79:da:cc:13:
72:8c:89:a5:4d:24:eb:2d:ee:19:b5:c1:15:f0:6e:
50:81:8d:c4:af:a9:81:47:63:cf:fe:ed:e4:22:4c:
86:09:de:7f:a6:f5:1d:f9:42:90:49:fb:9a:37:5b:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F0:F3:A8:B7:7F:DA:7A:0E:9B:15:79:3C:95:A5:11:A6:15:5E:D2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6PDzqLd_2noOmxV5PJWlEaYVXtI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.236.128/25
Signature Algorithm: sha256WithRSAEncryption
35:02:55:72:63:63:84:87:98:e3:fd:cf:a3:00:ab:87:fb:c0:
1c:1e:7b:ec:97:b3:d6:b9:4f:3a:2e:de:89:9c:3d:68:8a:f1:
a0:04:24:6a:0a:e8:d8:39:57:e2:e0:40:d8:44:2e:d1:4b:ac:
9f:66:ad:08:98:d2:98:7a:7d:5c:06:1f:c5:30:40:d4:ce:52:
3c:e3:6b:23:c7:71:d2:29:ce:cb:c1:e6:b6:1f:f1:f7:76:d9:
17:65:6a:d6:60:f9:0d:a6:28:73:02:ea:95:12:8a:cf:9f:98:
fb:ab:c4:68:44:52:2a:ba:90:8b:4b:69:64:37:8d:45:77:d7:
a8:11:e1:63:bc:75:cc:87:09:6b:97:72:71:a6:8e:4d:5c:8f:
42:96:85:9b:88:53:17:56:08:e9:bc:b5:04:97:c4:a9:c2:a5:
c2:c9:87:ce:fc:fc:4d:17:db:d4:1e:21:f3:42:0f:f0:c6:6a:
a9:49:31:9a:d1:48:36:61:67:ff:18:50:bb:cc:83:a7:31:df:
af:ce:27:6d:d2:54:a8:3b:04:41:88:ce:29:45:ea:78:42:17:
a8:b6:c2:09:a2:92:7b:b0:86:c0:d6:d4:2b:c7:74:6a:cc:8e:
38:78:8f:8d:37:5e:33:1b:a0:8b:87:2a:51:6f:31:21:bd:b4:
5b:6f:b2:7f
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1NDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEU4RjBGM0E4Qjc3RkRB
N0EwRTlCMTU3OTNDOTVBNTExQTYxNTVFRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvOybzkatgSNZixt70YO3aJztZiomTMZOPjHdXvaocP4HPiYeZ
KS5EipdovY/in6fAGLospt86YvZrw+jAUEQoPi8/7yJVN9eYxC3WaftBgDwk1hrJ
/qG1ul438wFpM4wM03RFbmoEYHBR7eAUIIgCPZ0qr5bTlNFW1BnpDciwgUrSpbr/
SS1VEEDCmXFT32l7J1PXJLON4ixELk1zXmqE0jX/DXWAlsJiWZjGlR/2J+37VGjZ
csOtxSzwAXR7lFZJQRbCZK45hnnIA1L7edrME3KMiaVNJOst7hm1wRXwblCBjcSv
qYFHY8/+7eQiTIYJ3n+m9R35QpBJ+5o3W3PtAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQU6PDzqLd/2noOmxV5PJWlEaYVXtIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZQRHpxTGRfMm5vT214VjVQ
SldsRWFZVlh0SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7
w+yAMA0GCSqGSIb3DQEBCwUAA4IBAQA1AlVyY2OEh5jj/c+jAKuH+8AcHnvsl7PW
uU86Lt6JnD1oivGgBCRqCujYOVfi4EDYRC7RS6yfZq0ImNKYen1cBh/FMEDUzlI8
42sjx3HSKc7Lwea2H/H3dtkXZWrWYPkNpihzAuqVEorPn5j7q8RoRFIqupCLS2lk
N41Fd9eoEeFjvHXMhwlrl3Jxpo5NXI9CloWbiFMXVgjpvLUEl8SpwqXCyYfO/PxN
F9vUHiHzQg/wxmqpSTGa0Ug2YWf/GFC7zIOnMd+vzidt0lSoOwRBiM4pRep4Qheo
tsIJopJ7sIbA1tQrx3RqzI44eI+NN14zG6CLhypRbzEhvbRbb7J/
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org