Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CH0c-IHBx25nXu2Crd1GeCyGUxk.roa
File: CH0c-IHBx25nXu2Crd1GeCyGUxk.roa (raw, json)
Hash identifier: eP64W4U265jmPsG45j1x8YkREw3G1lA3V8R6/nOgMSk=
Subject key identifier: 08:7D:1C:F8:81:C1:C7:6E:67:5E:ED:82:AD:DD:46:78:2C:86:53:19
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AA3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CH0c-IHBx25nXu2Crd1GeCyGUxk.roa
Signing time: Wed 29 Sep 2021 02:45:34 +0000
ROA not before: Wed 29 Sep 2021 02:45:34 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6819 (0x1aa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:34 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=087D1CF881C1C76E675EED82ADDD46782C865319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:86:98:a9:95:5b:1b:6f:73:be:c4:a7:3d:
ec:59:06:00:1e:db:d0:2a:a0:e5:92:4c:8e:35:37:
b8:8e:b5:25:68:4b:c0:4e:5e:3a:12:61:27:9a:89:
90:1f:cb:15:ac:90:09:65:00:41:a3:84:50:da:2c:
39:e6:de:e6:57:2d:43:9c:b2:85:fd:c1:7e:99:3e:
f4:18:64:82:ad:36:2a:c0:ee:d5:87:65:fa:0e:98:
06:0d:28:a6:4e:2e:7a:13:96:8b:46:38:1c:ea:e6:
e7:ee:68:ed:38:a1:c9:34:28:1f:c9:11:8f:96:4e:
8e:9a:2f:6d:ac:a8:64:f9:9f:c4:02:00:5b:0b:3c:
c0:dc:8e:68:5e:cd:1f:41:01:86:fe:0c:30:26:a9:
34:a6:67:50:07:17:bc:9e:83:7a:2a:d7:11:eb:62:
9c:11:91:7c:a2:e3:1b:06:cc:99:a3:f9:1d:42:b8:
e9:4e:50:e1:88:f4:b2:26:2b:25:a4:c3:be:79:b0:
08:47:93:a2:20:48:0f:eb:77:d8:1a:97:f8:31:d9:
6b:4a:5a:c0:6b:23:23:94:9a:52:89:9b:d2:e0:8f:
bb:b9:1d:03:9d:55:31:df:73:3f:9d:16:2d:07:73:
63:02:a8:58:ff:a8:97:87:eb:ed:a0:dd:4e:a7:41:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7D:1C:F8:81:C1:C7:6E:67:5E:ED:82:AD:DD:46:78:2C:86:53:19
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CH0c-IHBx25nXu2Crd1GeCyGUxk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:3e:14:41:37:28:ff:00:5b:0f:56:c0:00:d8:9f:14:a1:f7:
50:70:79:7c:59:9b:47:5b:b9:5e:e7:33:6c:aa:10:0f:df:fb:
10:5a:0a:b5:19:29:f5:af:38:f1:54:f0:a2:73:08:2c:74:b3:
4f:dd:e6:db:f3:8f:4f:2b:58:41:19:7b:81:b2:af:fa:fe:e5:
0d:7b:b2:a3:da:2e:6b:c9:be:dc:f8:2f:63:d3:ab:2c:6e:46:
2b:ae:ca:3b:e1:bc:e8:9a:6c:35:58:bf:6f:7f:99:a2:dd:d9:
56:3f:c2:a9:65:4c:69:ab:ac:3b:b6:4a:b5:de:c8:9d:d3:1e:
a5:62:fd:9f:82:fe:48:12:c6:28:eb:12:c0:87:f7:5f:98:76:
3d:a0:9d:ab:1c:35:48:80:38:34:ca:85:1d:ea:ba:5e:43:d7:
6a:80:d5:f1:51:23:7f:a4:df:c9:10:89:0a:59:c6:8d:e8:72:
af:39:b7:17:62:46:bf:67:9c:9e:94:45:ee:06:90:61:2c:f6:
d7:49:4f:49:4d:73:d0:2f:2b:da:af:17:27:98:87:57:25:16:
4f:03:ba:02:a9:c6:12:de:7c:fe:5f:3d:73:47:f2:ec:8c:9e:
4c:c6:1c:64:d0:c8:b1:95:47:02:7a:50:5f:dd:57:50:b6:d6:
69:6e:56:58
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGqMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ1MzRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDA4N0QxQ0Y4ODFDMUM3
NkU2NzVFRUQ4MkFEREQ0Njc4MkM4NjUzMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgaoaYqZVbG29zvsSnPexZBgAe29AqoOWSTI41N7iOtSVoS8BO
XjoSYSeaiZAfyxWskAllAEGjhFDaLDnm3uZXLUOcsoX9wX6ZPvQYZIKtNirA7tWH
ZfoOmAYNKKZOLnoTlotGOBzq5ufuaO04ock0KB/JEY+WTo6aL22sqGT5n8QCAFsL
PMDcjmhezR9BAYb+DDAmqTSmZ1AHF7yeg3oq1xHrYpwRkXyi4xsGzJmj+R1CuOlO
UOGI9LImKyWkw755sAhHk6IgSA/rd9gal/gx2WtKWsBrIyOUmlKJm9Lgj7u5HQOd
VTHfcz+dFi0Hc2MCqFj/qJeH6+2g3U6nQUStAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUCH0c+IHBx25nXu2Crd1GeCyGUxkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NIMGMtSUhCeDI1blh1MkNy
ZDFHZUN5R1V4ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wCgwDQYJKoZIhvcNAQELBQADggEBAA8+FEE3KP8AWw9WwADYnxSh91BweXxZm0db
uV7nM2yqEA/f+xBaCrUZKfWvOPFU8KJzCCx0s0/d5tvzj08rWEEZe4Gyr/r+5Q17
sqPaLmvJvtz4L2PTqyxuRiuuyjvhvOiabDVYv29/maLd2VY/wqllTGmrrDu2SrXe
yJ3THqVi/Z+C/kgSxijrEsCH91+Ydj2gnascNUiAODTKhR3qul5D12qA1fFRI3+k
38kQiQpZxo3ocq85txdiRr9nnJ6URe4GkGEs9tdJT0lNc9AvK9qvFyeYh1clFk8D
ugKpxhLefP5fPXNH8uyMnkzGHGTQyLGVRwJ6UF/dV1C21mluVlg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org