Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Au61Ugbg_i1gjU8JiAbsh2oZ94.roa
File: 7Au61Ugbg_i1gjU8JiAbsh2oZ94.roa (raw, json)
Hash identifier: 4vpDxB/tW8v/cLzzzH22ZVBGTS7OW6jmwyN5G3tqcd8=
Subject key identifier: EC:0B:BA:D5:48:1B:83:F8:B5:82:35:3C:26:20:1B:B2:1D:A8:67:DE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 236F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Au61Ugbg_i1gjU8JiAbsh2oZ94.roa
Signing time: Thu 08 Dec 2022 02:30:13 +0000
ROA not before: Thu 08 Dec 2022 02:30:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9071 (0x236f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Dec 8 02:30:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EC0BBAD5481B83F8B582353C26201BB21DA867DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:d2:d0:2f:9d:f4:65:fb:e4:e9:af:b8:75:
e4:45:75:42:5d:9a:86:f2:62:61:04:28:6f:80:49:
ed:e3:cf:3d:30:03:89:92:93:20:1f:72:e8:96:5f:
ef:cd:88:88:84:0c:34:c9:f7:6e:41:b3:5f:44:fa:
4d:51:24:86:fc:16:92:1b:22:6e:10:91:5a:ea:9c:
31:87:8d:33:83:a4:7b:a8:a0:ec:77:13:df:8e:21:
5a:69:26:87:09:a5:b0:b2:06:98:ad:c1:4e:c3:d0:
28:e9:74:10:1c:79:13:cf:bf:b8:08:77:f1:3b:a7:
08:68:28:51:a9:2b:26:8a:c1:20:a8:4f:2e:8d:25:
b4:08:f8:ba:c1:07:22:6e:a6:3d:4c:08:8e:b0:d6:
9b:76:fb:07:9e:d6:23:fc:61:a0:9c:fb:c4:25:2e:
9d:dc:03:60:d0:59:75:db:52:3e:1d:01:c3:ff:b6:
79:9f:b7:26:13:1a:78:76:e8:d0:57:76:ff:b8:6c:
98:95:e8:65:f1:b6:90:98:d5:0d:55:54:61:a5:95:
2b:5b:e7:ac:60:47:eb:f8:30:9c:12:98:9b:df:4f:
9b:77:cf:7a:aa:c4:ea:1d:3e:7b:93:d9:07:2c:44:
64:5f:3a:ee:f7:0d:f0:fc:aa:d7:d1:d8:56:7b:77:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0B:BA:D5:48:1B:83:F8:B5:82:35:3C:26:20:1B:B2:1D:A8:67:DE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Au61Ugbg_i1gjU8JiAbsh2oZ94.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.96.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:35:0c:e8:04:f4:44:a5:40:b9:49:13:a9:7f:7b:c6:fc:bc:
2d:7c:89:72:35:7c:6b:24:28:ea:4f:cc:a7:4b:a6:a5:ae:44:
5c:6a:0c:e4:67:f7:20:fa:59:b9:7c:b1:c5:66:d7:b1:31:ec:
1a:9d:87:4c:0f:55:00:17:19:c1:e8:30:fb:81:4c:9d:2a:87:
09:6a:9c:9a:9d:e4:9d:29:75:7d:4a:d2:eb:53:89:50:63:80:
b8:03:99:aa:58:1f:bc:60:e7:7d:c9:70:90:1c:8a:b4:31:53:
ec:87:25:86:36:e3:b1:2d:3e:73:cd:78:ce:9e:11:fb:f2:5f:
e9:da:32:73:c5:e6:69:68:8a:c8:f4:31:c4:12:17:90:f0:bf:
9e:e4:f3:ac:fd:84:14:b3:9c:4a:84:57:3e:53:52:26:6e:7b:
b6:87:e5:03:9e:25:3a:32:57:02:56:68:20:5c:d9:3f:8b:07:
c8:53:4a:f7:df:34:c0:23:69:2d:d5:f4:67:46:8a:3f:63:c0:
a2:52:cb:93:71:a7:56:fb:2b:9c:61:f1:4f:8c:c9:9d:86:2e:
47:f1:28:0c:c6:96:d3:e2:24:56:d6:f6:ae:80:f9:27:2c:7a:
9d:38:8d:5a:ba:f3:e2:b2:1e:7a:0a:89:ec:e7:35:cd:e5:5e:
a1:4d:53:e7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICI28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjEyMDgw
MjMwMTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVDMEJCQUQ1NDgxQjgz
RjhCNTgyMzUzQzI2MjAxQkIyMURBODY3REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTftLQL530Zfvk6a+4deRFdUJdmobyYmEEKG+ASe3jzz0wA4mS
kyAfcuiWX+/NiIiEDDTJ925Bs19E+k1RJIb8FpIbIm4QkVrqnDGHjTODpHuooOx3
E9+OIVppJocJpbCyBpitwU7D0CjpdBAceRPPv7gId/E7pwhoKFGpKyaKwSCoTy6N
JbQI+LrBByJupj1MCI6w1pt2+wee1iP8YaCc+8QlLp3cA2DQWXXbUj4dAcP/tnmf
tyYTGnh26NBXdv+4bJiV6GXxtpCY1Q1VVGGllStb56xgR+v4MJwSmJvfT5t3z3qq
xOodPnuT2QcsRGRfOu73DfD8qtfR2FZ7d4gZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7Au61Ugbg/i1gjU8JiAbsh2oZ94wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdBdTYxVWdiZ19pMWdqVThK
aUFic2gyb1o5NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wWAwDQYJKoZIhvcNAQELBQADggEBAD41DOgE9ESlQLlJE6l/e8b8vC18iXI1fGsk
KOpPzKdLpqWuRFxqDORn9yD6Wbl8scVm17Ex7Bqdh0wPVQAXGcHoMPuBTJ0qhwlq
nJqd5J0pdX1K0utTiVBjgLgDmapYH7xg533JcJAcirQxU+yHJYY247EtPnPNeM6e
EfvyX+naMnPF5mloisj0McQSF5Dwv57k86z9hBSznEqEVz5TUiZue7aH5QOeJToy
VwJWaCBc2T+LB8hTSvffNMAjaS3V9GdGij9jwKJSy5Nxp1b7K5xh8U+MyZ2GLkfx
KAzGltPiJFbW9q6A+Scsep04jVq68+KyHnoKieznNc3lXqFNU+c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org