Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7JVwFGROrKy5v6rv_jqTaSHJueU.roa
File: 7JVwFGROrKy5v6rv_jqTaSHJueU.roa (raw, json)
Hash identifier: in23eLUyH8+MrYR6km0rw6Q/UcNM+NT1SAxKQutyEOI=
Subject key identifier: EC:95:70:14:64:4E:AC:AC:B9:BF:AA:EF:FE:3A:93:69:21:C9:B9:E5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 202A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7JVwFGROrKy5v6rv_jqTaSHJueU.roa
Signing time: Fri 25 Nov 2022 04:38:24 +0000
ROA not before: Fri 25 Nov 2022 04:38:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8234 (0x202a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EC957014644EACACB9BFAAEFFE3A936921C9B9E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b1:21:cd:cf:63:af:1b:17:11:19:d0:94:45:
48:6f:6b:31:0a:29:cc:17:f3:43:e9:19:6c:7e:f0:
c6:35:33:17:c9:06:76:b3:b3:f2:5d:b0:ee:75:14:
f9:f2:3e:68:a7:ff:2a:b5:fb:b0:0f:ca:6b:6e:3d:
b9:43:3b:35:b1:ba:31:f7:f8:d9:f0:2f:66:28:f1:
bd:ba:84:87:2b:1f:6b:e5:9e:08:5b:a0:e8:b1:96:
41:46:d0:31:43:9f:7d:eb:e0:1a:93:a9:52:8b:55:
f0:22:7e:d8:b0:33:42:cb:50:06:27:0a:4b:11:b4:
60:87:a8:51:21:d3:b0:ee:57:a0:6f:66:1d:59:0e:
5d:82:86:20:fc:16:49:93:c9:e6:4d:92:63:2f:4d:
08:83:5d:d7:a4:4f:81:25:f8:51:88:a9:32:a5:72:
50:46:22:83:06:e3:61:81:0a:7b:5f:3e:30:19:ab:
ce:19:31:f1:eb:a0:bf:81:09:a6:58:72:de:f7:c1:
c0:ac:bc:f5:7e:ce:db:f8:c6:f0:2c:16:1b:dd:91:
5c:07:5d:38:a0:50:ae:c3:0a:ff:f9:2f:9f:11:d5:
7d:8f:62:ba:b5:dd:7b:c0:29:c4:94:22:d0:62:37:
e3:0b:be:bd:62:43:68:f3:e1:53:96:0f:c9:44:c0:
a2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:95:70:14:64:4E:AC:AC:B9:BF:AA:EF:FE:3A:93:69:21:C9:B9:E5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7JVwFGROrKy5v6rv_jqTaSHJueU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.151.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a6:06:dc:3e:a8:80:da:15:93:73:d0:d8:f5:71:9c:c6:1e:
42:84:06:54:e6:97:7a:94:e1:76:df:a7:c7:a3:28:fd:57:1e:
1b:33:0b:be:86:4c:38:1f:00:00:27:75:f6:1e:4b:82:c6:1e:
cd:6e:6c:79:0b:b4:d6:26:b7:5d:fd:7a:ac:c5:9a:56:6a:53:
fd:ff:d5:62:41:3c:74:8a:2c:8a:41:c9:1e:e5:b6:e8:8a:28:
08:cf:86:10:aa:65:59:70:e3:ec:67:f9:9c:6a:b3:fa:38:b2:
c2:19:33:66:e3:a9:33:2b:cf:a1:f6:87:2f:ee:2b:92:83:5b:
d1:08:b9:2d:6a:67:85:16:2a:24:ab:5e:8b:52:89:e7:ac:b6:
06:a0:39:0f:ad:8d:68:8c:e3:52:29:09:83:be:47:38:f0:c6:
69:0b:47:41:39:bd:df:e4:2d:5e:32:38:f3:95:0a:22:32:85:
ce:5b:49:df:70:f6:df:18:80:8d:33:43:1d:98:62:7e:1f:68:
a7:24:ba:96:d8:b4:cd:d1:34:8b:51:54:d9:57:59:0e:f9:0e:
a0:e3:50:c2:b0:c8:cf:9c:65:56:b6:10:1f:24:3e:5b:30:36:
1c:3a:da:ea:5f:03:2c:47:a4:b1:89:1e:eb:29:20:66:8d:b6:
69:ec:33:25
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICICowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4MjRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVDOTU3MDE0NjQ0RUFD
QUNCOUJGQUFFRkZFM0E5MzY5MjFDOUI5RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqsSHNz2OvGxcRGdCURUhvazEKKcwX80PpGWx+8MY1MxfJBnaz
s/JdsO51FPnyPmin/yq1+7APymtuPblDOzWxujH3+NnwL2Yo8b26hIcrH2vlnghb
oOixlkFG0DFDn33r4BqTqVKLVfAiftiwM0LLUAYnCksRtGCHqFEh07DuV6BvZh1Z
Dl2ChiD8FkmTyeZNkmMvTQiDXdekT4El+FGIqTKlclBGIoMG42GBCntfPjAZq84Z
MfHroL+BCaZYct73wcCsvPV+ztv4xvAsFhvdkVwHXTigUK7DCv/5L58R1X2PYrq1
3XvAKcSUItBiN+MLvr1iQ2jz4VOWD8lEwKKLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7JVwFGROrKy5v6rv/jqTaSHJueUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdKVndGR1JPckt5NXY2cnZf
anFUYVNISnVlVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
w5cwDQYJKoZIhvcNAQELBQADggEBAKqmBtw+qIDaFZNz0Nj1cZzGHkKEBlTml3qU
4Xbfp8ejKP1XHhszC76GTDgfAAAndfYeS4LGHs1ubHkLtNYmt139eqzFmlZqU/3/
1WJBPHSKLIpByR7ltuiKKAjPhhCqZVlw4+xn+Zxqs/o4ssIZM2bjqTMrz6H2hy/u
K5KDW9EIuS1qZ4UWKiSrXotSieestgagOQ+tjWiM41IpCYO+RzjwxmkLR0E5vd/k
LV4yOPOVCiIyhc5bSd9w9t8YgI0zQx2YYn4faKckupbYtM3RNItRVNlXWQ75DqDj
UMKwyM+cZVa2EB8kPlswNhw62upfAyxHpLGJHuspIGaNtmnsMyU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org