Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8EncR0x1XDUUHZ6JmhsalI55mXs.roa
File: 8EncR0x1XDUUHZ6JmhsalI55mXs.roa (raw, json)
Hash identifier: TWPcA9fRnaVR1LJUey2RlkW2AX66BMTpsEtCw5opSDY=
Subject key identifier: F0:49:DC:47:4C:75:5C:35:14:1D:9E:89:9A:1B:1A:94:8E:79:99:7B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8EncR0x1XDUUHZ6JmhsalI55mXs.roa
Signing time: Thu 15 Sep 2022 02:53:16 +0000
ROA not before: Thu 15 Sep 2022 02:53:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F049DC474C755C35141D9E899A1B1A948E79997B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:fb:8e:10:bf:02:32:86:8f:df:ea:66:4a:
0b:e2:d4:e5:02:a1:a8:9f:e3:a8:dd:57:39:2b:3b:
d0:b9:25:87:96:1b:cd:20:09:89:c9:bd:dc:ae:f8:
f3:80:b4:4f:99:ef:60:e8:de:e5:c5:99:5c:9b:7b:
2e:b3:ac:5d:90:e1:d0:99:8d:c6:37:8b:a6:e0:d3:
c9:c7:5d:9c:60:31:d9:d6:90:c4:0b:69:ae:45:47:
f4:39:e1:5f:00:ab:42:9d:28:b1:a9:6d:70:88:81:
84:a5:75:0b:07:0c:1a:20:52:a0:a0:09:39:e8:a9:
be:ad:34:35:a8:ca:c8:34:c1:13:41:f0:ec:bf:4c:
5d:65:2c:31:fb:3c:91:7a:85:e3:26:7c:26:6a:b9:
e7:0b:bd:53:77:43:42:6e:1d:82:9c:f9:3c:f0:11:
da:3e:53:61:8c:f9:d7:26:3a:51:a2:82:3a:0f:96:
36:b3:02:55:ba:9d:16:44:5e:50:87:6a:e0:57:2d:
78:2b:df:02:20:6a:10:5b:0f:8d:60:73:2e:54:ef:
43:53:71:8d:52:1e:d5:fe:4a:e2:3a:13:4b:f0:55:
48:69:5d:fd:af:e8:9f:4a:01:73:e0:09:48:30:e7:
c7:a0:f7:b4:8d:42:05:9b:1c:ea:08:85:fe:53:97:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:49:DC:47:4C:75:5C:35:14:1D:9E:89:9A:1B:1A:94:8E:79:99:7B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8EncR0x1XDUUHZ6JmhsalI55mXs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.0.0/17
Signature Algorithm: sha256WithRSAEncryption
68:3f:29:40:2f:5b:b6:57:55:ae:41:4a:b8:e8:82:c3:ce:48:
66:c1:ef:00:9e:2a:97:b0:58:28:4f:d1:a6:d5:93:63:79:ad:
1b:96:bc:5f:5e:6a:33:84:a6:62:3e:af:8d:2a:79:9c:48:6e:
15:4d:0a:8e:9f:70:4e:05:c8:63:80:6a:1e:00:b8:af:36:7c:
42:d8:57:9c:bc:e4:ad:3d:a6:05:45:fc:8a:35:f2:01:a7:6b:
f8:d0:89:0b:9a:46:a1:f2:33:ea:b8:2a:c0:15:f4:af:77:24:
ab:29:05:52:d4:13:de:e4:ca:76:41:82:51:0d:8b:c9:c1:78:
3d:22:a1:ac:87:0f:6d:f7:90:d4:50:73:e8:5e:c9:d4:86:59:
36:7c:10:62:8f:a3:43:11:49:22:a3:99:fb:fb:4f:fb:0a:dc:
7a:04:51:b3:05:56:01:7c:62:3b:26:9c:bf:d3:ab:89:33:96:
d1:e3:f0:c7:07:2b:55:85:00:6c:fe:89:c9:e8:15:3d:bc:aa:
4a:ba:9e:4f:cd:ce:59:6e:9f:80:1f:fb:ba:ff:ff:77:b9:7a:
2e:9c:a3:56:9b:af:7c:cc:33:93:15:3c:92:12:5e:58:0e:43:
1c:81:57:9e:0b:8e:72:e2:e4:34:39:aa:67:13:1f:6b:31:47:
69:1d:ee:45
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzMTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEYwNDlEQzQ3NEM3NTVD
MzUxNDFEOUU4OTlBMUIxQTk0OEU3OTk5N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNPvuOEL8CMoaP3+pmSgvi1OUCoaif46jdVzkrO9C5JYeWG80g
CYnJvdyu+POAtE+Z72Do3uXFmVybey6zrF2Q4dCZjcY3i6bg08nHXZxgMdnWkMQL
aa5FR/Q54V8Aq0KdKLGpbXCIgYSldQsHDBogUqCgCTnoqb6tNDWoysg0wRNB8Oy/
TF1lLDH7PJF6heMmfCZquecLvVN3Q0JuHYKc+TzwEdo+U2GM+dcmOlGigjoPljaz
AlW6nRZEXlCHauBXLXgr3wIgahBbD41gcy5U70NTcY1SHtX+SuI6E0vwVUhpXf2v
6J9KAXPgCUgw58eg97SNQgWbHOoIhf5TlxKdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8EncR0x1XDUUHZ6JmhsalI55mXswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhFbmNSMHgxWERVVUhaNkpt
aHNhbEk1NW1Ycy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd7
wAAwDQYJKoZIhvcNAQELBQADggEBAGg/KUAvW7ZXVa5BSrjogsPOSGbB7wCeKpew
WChP0abVk2N5rRuWvF9eajOEpmI+r40qeZxIbhVNCo6fcE4FyGOAah4AuK82fELY
V5y85K09pgVF/Io18gGna/jQiQuaRqHyM+q4KsAV9K93JKspBVLUE97kynZBglEN
i8nBeD0ioayHD233kNRQc+heydSGWTZ8EGKPo0MRSSKjmfv7T/sK3HoEUbMFVgF8
YjsmnL/Tq4kzltHj8McHK1WFAGz+icnoFT28qkq6nk/Nzllun4Af+7r//3e5ei6c
o1abr3zMM5MVPJISXlgOQxyBV54LjnLi5DQ5qmcTH2sxR2kd7kU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org