Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AOJ8x8WDmMM5jZH3-v7nK3R_00M.roa
File: AOJ8x8WDmMM5jZH3-v7nK3R_00M.roa (raw, json)
Hash identifier: ct8MRiUfrtgH98RVr3a8liFxWK7bKgTg0Y86jtrE/bA=
Subject key identifier: 00:E2:7C:C7:C5:83:98:C3:39:8D:91:F7:FA:FE:E7:2B:74:7F:D3:43
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FEE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AOJ8x8WDmMM5jZH3-v7nK3R_00M.roa
Signing time: Mon 14 Nov 2022 02:31:14 +0000
ROA not before: Mon 14 Nov 2022 02:31:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8174 (0x1fee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 14 02:31:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=00E27CC7C58398C3398D91F7FAFEE72B747FD343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:01:bc:54:f7:30:8a:d4:50:a7:98:2f:3b:
d7:cb:8a:68:b6:ae:8f:15:d3:5c:29:13:e7:06:4b:
6f:87:76:44:a7:f5:d6:c9:78:50:f7:b8:2e:dc:82:
76:ae:4b:f6:b7:fb:3e:c3:b0:08:47:70:b7:a0:81:
b0:55:f4:cc:04:11:3f:e8:cc:60:e0:80:cf:d7:b9:
c9:6e:8e:ec:70:32:ef:a4:10:c3:9a:df:e0:1b:d6:
e9:af:35:60:c7:7b:30:18:90:eb:63:7e:cb:f1:f8:
ea:e0:a2:af:24:e9:79:64:e0:0b:8e:15:dc:a9:3d:
9e:fa:3d:fb:80:3d:44:fb:bf:da:35:8c:23:74:37:
fc:8c:28:39:03:7e:b2:35:2a:ff:a5:39:0e:fd:bb:
a3:81:5b:fa:18:61:c1:64:2b:9c:d9:ee:1c:01:5a:
79:17:4b:65:40:ba:3c:94:03:f9:e2:b9:ef:bb:92:
9d:5f:e2:ee:a4:d9:11:73:96:24:1c:d1:05:b5:5f:
90:cf:05:b6:94:c9:de:e0:7e:b0:f6:1f:6c:2e:81:
ea:7d:a1:33:87:17:2a:29:0e:87:cd:ff:63:5f:22:
0a:28:93:e7:2e:d8:6f:9f:d3:d3:44:b4:74:f4:62:
9e:52:9c:b2:ea:9e:a3:dd:9f:61:2f:fc:68:42:be:
bd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E2:7C:C7:C5:83:98:C3:39:8D:91:F7:FA:FE:E7:2B:74:7F:D3:43
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AOJ8x8WDmMM5jZH3-v7nK3R_00M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.238.0/24
Signature Algorithm: sha256WithRSAEncryption
32:2f:8f:63:b8:47:c5:0c:41:8c:65:3f:47:e3:b2:11:81:31:
48:43:d3:a6:d9:44:5c:9d:f2:4b:46:3e:93:64:f3:4a:0e:bb:
a3:86:2b:f8:82:f0:52:cf:5c:61:5d:4e:ad:06:ac:f0:d1:6a:
bd:69:d2:af:35:92:3a:f3:59:66:3a:74:a6:7b:f1:99:a5:31:
8f:23:f1:c8:3a:e7:5d:22:4a:7e:c2:4c:8f:4e:62:4e:1f:49:
88:98:f7:7d:c0:55:13:15:74:0e:e5:c4:bd:60:5a:66:5f:34:
37:4b:f4:fc:05:76:c2:75:b4:ce:46:45:7a:2f:58:30:46:4b:
4f:7e:71:e9:98:82:8d:c8:e3:07:17:93:12:b4:6e:6a:c5:29:
9b:bf:ae:0e:6a:e8:d3:94:e9:e7:86:f4:2a:2a:47:65:35:e5:
34:16:b5:99:d5:5d:19:e4:d4:17:d3:66:b4:50:93:ba:9e:99:
ad:55:01:eb:80:42:a5:a6:ca:ee:ff:4b:e1:72:b4:57:21:52:
b8:29:9b:7d:e8:89:ee:a1:71:fa:f3:5a:5f:27:5f:05:f1:4d:
c1:b9:42:5f:e0:a2:00:fa:48:94:f0:09:8d:fe:67:b2:74:b5:
95:c7:a6:41:4e:2f:82:23:e4:5a:27:f6:56:e9:1c:a1:00:1e:
11:20:d1:83
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH+4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMTQw
MjMxMTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDAwRTI3Q0M3QzU4Mzk4
QzMzOThEOTFGN0ZBRkVFNzJCNzQ3RkQzNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqxQG8VPcwitRQp5gvO9fLimi2ro8V01wpE+cGS2+HdkSn9dbJ
eFD3uC7cgnauS/a3+z7DsAhHcLeggbBV9MwEET/ozGDggM/XuclujuxwMu+kEMOa
3+Ab1umvNWDHezAYkOtjfsvx+Orgoq8k6Xlk4AuOFdypPZ76PfuAPUT7v9o1jCN0
N/yMKDkDfrI1Kv+lOQ79u6OBW/oYYcFkK5zZ7hwBWnkXS2VAujyUA/niue+7kp1f
4u6k2RFzliQc0QW1X5DPBbaUyd7gfrD2H2wugep9oTOHFyopDofN/2NfIgook+cu
2G+f09NEtHT0Yp5SnLLqnqPdn2Ev/GhCvr3fAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAOJ8x8WDmMM5jZH3+v7nK3R/00MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FPSjh4OFdEbU1NNWpaSDMt
djduSzNSXzAwTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
w+4wDQYJKoZIhvcNAQELBQADggEBADIvj2O4R8UMQYxlP0fjshGBMUhD06bZRFyd
8ktGPpNk80oOu6OGK/iC8FLPXGFdTq0GrPDRar1p0q81kjrzWWY6dKZ78ZmlMY8j
8cg6510iSn7CTI9OYk4fSYiY933AVRMVdA7lxL1gWmZfNDdL9PwFdsJ1tM5GRXov
WDBGS09+cemYgo3I4wcXkxK0bmrFKZu/rg5q6NOU6eeG9CoqR2U15TQWtZnVXRnk
1BfTZrRQk7qema1VAeuAQqWmyu7/S+FytFchUrgpm33oie6hcfrzWl8nXwXxTcG5
Ql/gogD6SJTwCY3+Z7J0tZXHpkFOL4Ij5Fon9lbpHKEAHhEg0YM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org