Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Q45Id8NE5TuofqDPfpDEW_WNLQ.roa
File: 8Q45Id8NE5TuofqDPfpDEW_WNLQ.roa (raw, json)
Hash identifier: f+kuD7InG3ZnXgigtoml4/9mvhd/2gDQ7TBPTduVSq0=
Subject key identifier: F1:0E:39:21:DF:0D:13:94:EE:A1:FA:83:3D:FA:43:11:6F:D6:34:B4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DFE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Q45Id8NE5TuofqDPfpDEW_WNLQ.roa
Signing time: Tue 29 Sep 2020 09:55:13 +0000
ROA not before: Tue 29 Sep 2020 09:55:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3582 (0xdfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:13 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F10E3921DF0D1394EEA1FA833DFA43116FD634B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:81:a1:7e:c4:30:af:48:8d:a7:d3:28:e0:
62:be:34:cc:6d:59:0a:bf:48:dc:25:cb:6e:26:09:
89:79:bc:3a:f8:3a:39:c5:7e:ae:60:58:6a:c7:49:
a9:86:a9:11:65:3d:97:45:f0:f6:49:5d:4d:3d:0e:
ac:24:9c:36:1d:0b:6e:dd:a4:eb:ab:ba:b0:27:36:
68:a6:f2:fe:f2:e9:64:d4:91:4b:7d:9d:83:79:cd:
1a:0a:e7:9a:58:f0:ef:53:5b:e4:9b:79:7a:ff:88:
06:70:73:b6:2e:77:e1:2a:90:05:b1:92:4f:95:4a:
2a:2f:f1:07:37:b9:b7:52:61:98:23:6d:34:4d:76:
b1:56:6f:e4:03:50:6c:fa:e2:f2:f8:72:dc:11:e3:
4c:a4:0c:f5:04:a6:57:bf:2d:7a:44:3c:da:08:06:
fb:58:8e:9c:7f:bf:50:6b:d5:3a:c9:e9:63:e5:35:
36:bb:f6:a2:99:98:ae:98:6b:80:9c:f5:0c:6f:38:
6d:c4:77:e7:77:f0:55:1a:28:4a:a4:9b:0e:ae:15:
28:3f:bf:df:76:fb:bd:72:07:70:6a:89:7e:77:34:
74:f8:00:c0:7b:99:b4:c0:14:59:ef:2c:45:df:41:
24:8f:4f:37:4d:b3:c2:23:b0:c0:ab:2a:be:1d:8c:
b7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0E:39:21:DF:0D:13:94:EE:A1:FA:83:3D:FA:43:11:6F:D6:34:B4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Q45Id8NE5TuofqDPfpDEW_WNLQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.0.0/22
Signature Algorithm: sha256WithRSAEncryption
78:ea:1a:2e:c8:da:e3:2a:9a:78:26:44:f6:5b:03:c6:48:23:
31:06:d1:71:a4:89:28:f3:07:69:cd:e0:5b:e5:12:ac:fe:cf:
91:fc:1a:0b:f5:35:0f:27:1b:66:cb:b9:6e:9d:ce:93:9b:67:
0b:da:38:98:37:75:4c:a9:36:eb:97:e7:d2:b1:f8:73:41:b8:
82:6d:27:fd:17:09:15:05:68:e6:2d:f6:a9:13:4a:78:6a:36:
36:bd:8e:3f:75:df:e4:22:72:54:50:81:37:8f:db:71:16:4c:
6a:9e:83:9c:ff:9f:61:ec:30:4b:6c:2c:23:74:83:39:9c:21:
7f:38:37:ad:77:1e:b1:a4:2f:c1:6c:e6:eb:1e:15:cd:e1:b8:
1a:75:be:18:bb:a0:30:a6:f0:dd:52:c7:b1:0d:b1:55:ff:ad:
a1:79:b7:01:86:4f:d5:a7:96:b5:ef:6b:ac:02:98:6f:81:60:
60:a2:f5:53:ba:d7:77:f9:3c:f2:66:d6:df:fa:93:5f:8b:cd:
4b:6e:51:e8:f8:45:69:da:ed:2d:98:d9:bc:be:8a:70:08:96:
13:9f:82:e2:28:96:c4:c6:9f:c0:51:51:14:97:08:65:1a:6c:
26:e3:5e:62:27:19:c9:cb:63:4c:72:9b:6a:6e:25:7f:ea:cc:
d1:4a:ee:10
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDf4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEYxMEUzOTIxREYwRDEz
OTRFRUExRkE4MzNERkE0MzExNkZENjM0QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCp94GhfsQwr0iNp9Mo4GK+NMxtWQq/SNwly24mCYl5vDr4OjnF
fq5gWGrHSamGqRFlPZdF8PZJXU09DqwknDYdC27dpOururAnNmim8v7y6WTUkUt9
nYN5zRoK55pY8O9TW+SbeXr/iAZwc7Yud+EqkAWxkk+VSiov8Qc3ubdSYZgjbTRN
drFWb+QDUGz64vL4ctwR40ykDPUEple/LXpEPNoIBvtYjpx/v1Br1TrJ6WPlNTa7
9qKZmK6Ya4Cc9QxvOG3Ed+d38FUaKEqkmw6uFSg/v992+71yB3BqiX53NHT4AMB7
mbTAFFnvLEXfQSSPTzdNs8IjsMCrKr4djLeLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8Q45Id8NE5TuofqDPfpDEW/WNLQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhRNDVJZDhORTVUdW9mcURQ
ZnBERVdfV05MUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wAAwDQYJKoZIhvcNAQELBQADggEBAHjqGi7I2uMqmngmRPZbA8ZIIzEG0XGkiSjz
B2nN4FvlEqz+z5H8Ggv1NQ8nG2bLuW6dzpObZwvaOJg3dUypNuuX59Kx+HNBuIJt
J/0XCRUFaOYt9qkTSnhqNja9jj913+QiclRQgTeP23EWTGqeg5z/n2HsMEtsLCN0
gzmcIX84N613HrGkL8Fs5useFc3huBp1vhi7oDCm8N1Sx7ENsVX/raF5twGGT9Wn
lrXva6wCmG+BYGCi9VO613f5PPJm1t/6k1+LzUtuUej4RWna7S2Y2by+inAIlhOf
guIolsTGn8BRURSXCGUabCbjXmInGcnLY0xym2puJX/qzNFK7hA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org