Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9r4VKkqIje0GQX7Ff7ErAk5LjEc.roa
File: 9r4VKkqIje0GQX7Ff7ErAk5LjEc.roa (raw, json)
Hash identifier: n5gxcr0Da6RJhLkAvkml39+3rLfe9MrniDCEcuS8cdo=
Subject key identifier: F6:BE:15:2A:4A:88:8D:ED:06:41:7E:C5:7F:B1:2B:02:4E:4B:8C:47
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20EF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9r4VKkqIje0GQX7Ff7ErAk5LjEc.roa
Signing time: Fri 25 Nov 2022 04:39:18 +0000
ROA not before: Fri 25 Nov 2022 04:39:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8431 (0x20ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F6BE152A4A888DED06417EC57FB12B024E4B8C47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:c9:5c:9b:e8:09:13:08:8b:70:d7:cb:82:
6b:0d:86:74:49:5d:89:38:fd:fe:6b:c1:79:d5:38:
00:e1:b6:eb:f7:ee:77:e0:1b:a8:0f:ad:c3:c2:1a:
d4:17:5d:b9:e0:76:b4:e6:87:fe:bf:b8:54:94:7b:
73:7c:e4:6d:0c:7b:bf:e4:d6:bc:0e:81:8e:4f:bb:
80:b7:49:07:1b:b4:f7:5f:1b:12:94:18:cd:44:23:
bf:27:58:16:79:af:b0:9d:9c:44:fb:d5:80:27:76:
1d:32:94:d6:d4:3f:3d:6b:13:af:ea:60:b9:07:5a:
5c:f1:bd:5a:c0:06:ee:f4:54:3a:3b:ec:f3:83:1c:
32:d1:e6:42:fa:03:2a:f8:5f:28:68:03:53:36:34:
46:6e:45:a4:e6:3f:a5:47:59:da:26:ab:45:3a:5f:
4a:5f:c3:72:61:7e:87:9a:d1:2d:07:60:09:8a:80:
ea:b7:bc:49:eb:10:7d:b1:d4:7f:90:65:78:ce:35:
69:6c:1b:02:e8:61:91:f9:1e:2b:d5:f0:00:53:9a:
c1:c6:8f:ec:1f:f0:88:01:a1:2e:e5:03:c9:56:be:
18:e3:87:7b:80:cd:10:9b:7e:b1:62:4b:aa:55:2d:
ba:14:c4:58:54:cb:56:a4:5d:d6:52:1a:e0:a6:04:
91:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BE:15:2A:4A:88:8D:ED:06:41:7E:C5:7F:B1:2B:02:4E:4B:8C:47
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9r4VKkqIje0GQX7Ff7ErAk5LjEc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.104.0/22
Signature Algorithm: sha256WithRSAEncryption
65:fe:3d:ec:ad:1c:ef:40:86:6f:f9:d9:ed:e4:3c:2b:ef:d2:
d5:5e:35:89:66:f0:e7:92:1f:17:50:c6:a8:81:cd:ad:94:16:
80:d1:6d:74:f7:b6:fa:03:4e:f7:c8:e6:09:60:ef:23:7b:d9:
70:62:c8:27:5c:80:a7:49:c4:b4:a3:1a:5c:c5:56:d9:13:5b:
81:a0:4d:11:26:72:0b:9e:da:dd:91:57:04:82:6d:1a:f9:f9:
bf:2e:86:5b:5e:bc:9f:ed:42:a0:6b:4a:f9:21:8f:db:0f:bc:
b2:8a:74:f1:75:20:ca:c6:77:b5:9a:51:f2:5a:74:08:7f:f3:
7d:3f:19:04:7c:0b:ca:22:42:41:92:b7:87:8e:4b:e1:e8:84:
13:f9:f3:83:57:cb:69:e9:17:66:c9:ac:1d:d5:91:12:5d:30:
bc:64:39:77:88:ef:78:6e:e9:ed:9b:47:2b:c0:f2:6a:08:3b:
8e:51:0a:fe:f0:5d:5e:c1:fe:c1:d5:cc:cf:20:16:92:99:26:
d4:8b:66:a2:30:0d:eb:65:01:7b:40:6a:1c:e4:f0:4b:16:c9:
66:bc:3d:12:10:fe:d0:46:6f:14:fe:44:46:62:47:99:fe:6a:
0c:33:7e:24:52:30:58:0e:9f:9f:ea:e0:7a:e1:0b:57:6d:11:
ef:62:70:52
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIO8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEY2QkUxNTJBNEE4ODhE
RUQwNjQxN0VDNTdGQjEyQjAyNEU0QjhDNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPnslcm+gJEwiLcNfLgmsNhnRJXYk4/f5rwXnVOADhtuv37nfg
G6gPrcPCGtQXXbngdrTmh/6/uFSUe3N85G0Me7/k1rwOgY5Pu4C3SQcbtPdfGxKU
GM1EI78nWBZ5r7CdnET71YAndh0ylNbUPz1rE6/qYLkHWlzxvVrABu70VDo77POD
HDLR5kL6Ayr4XyhoA1M2NEZuRaTmP6VHWdomq0U6X0pfw3Jhfoea0S0HYAmKgOq3
vEnrEH2x1H+QZXjONWlsGwLoYZH5HivV8ABTmsHGj+wf8IgBoS7lA8lWvhjjh3uA
zRCbfrFiS6pVLboUxFhUy1akXdZSGuCmBJHDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU9r4VKkqIje0GQX7Ff7ErAk5LjEcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzlyNFZLa3FJamUwR1FYN0Zm
N0VyQWs1TGpFYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wmgwDQYJKoZIhvcNAQELBQADggEBAGX+PeytHO9Ahm/52e3kPCvv0tVeNYlm8OeS
HxdQxqiBza2UFoDRbXT3tvoDTvfI5glg7yN72XBiyCdcgKdJxLSjGlzFVtkTW4Gg
TREmcgue2t2RVwSCbRr5+b8uhltevJ/tQqBrSvkhj9sPvLKKdPF1IMrGd7WaUfJa
dAh/830/GQR8C8oiQkGSt4eOS+HohBP584NXy2npF2bJrB3VkRJdMLxkOXeI73hu
6e2bRyvA8moIO45RCv7wXV7B/sHVzM8gFpKZJtSLZqIwDetlAXtAahzk8EsWyWa8
PRIQ/tBGbxT+REZiR5n+agwzfiRSMFgOn5/q4HrhC1dtEe9icFI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org