Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CSLvZ5igJZOjUa2woXslfbnw43g.roa
File: CSLvZ5igJZOjUa2woXslfbnw43g.roa (raw, json)
Hash identifier: 8uRELX+cRNv94gRno/HIDJBVKsxC4QacYTfe1EUuhRc=
Subject key identifier: 09:22:EF:67:98:A0:25:93:A3:51:AD:B0:A1:7B:25:7D:B9:F0:E3:78
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CSLvZ5igJZOjUa2woXslfbnw43g.roa
Signing time: Thu 15 Sep 2022 02:52:55 +0000
ROA not before: Thu 15 Sep 2022 02:52:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0922EF6798A02593A351ADB0A17B257DB9F0E378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:42:31:81:3b:dd:a2:91:e8:d4:b4:fe:65:
d5:fd:81:ad:ff:6a:d5:8f:39:2e:d9:f4:86:21:91:
95:c0:b8:e8:aa:15:23:b5:e4:30:82:8c:4c:9c:ee:
05:d5:94:33:26:d8:2f:06:35:c6:af:60:0c:1f:f4:
81:98:93:70:fa:6e:43:ee:cf:02:6d:58:74:4f:36:
3f:bb:87:d7:96:6e:d7:eb:3d:a2:7d:96:90:5d:b9:
a7:68:5d:71:be:7a:0e:33:95:aa:72:c1:48:91:b9:
59:1c:c4:68:96:98:c2:d2:7b:ad:53:03:49:9c:a7:
e6:5b:fb:b0:8a:88:a6:38:28:66:67:87:30:04:f7:
9e:64:67:fc:d5:c4:22:8f:05:5e:68:3c:6d:59:89:
10:e7:f7:4c:ba:9e:9d:4a:4f:62:08:78:31:17:15:
08:1f:88:b5:26:41:cc:ce:36:cb:e3:85:f8:09:6e:
84:95:cd:1a:1b:e2:c8:57:0d:ee:5a:9a:50:95:97:
b8:12:b8:82:fc:75:21:99:6e:11:3b:c3:79:58:06:
88:43:8d:4c:20:f2:88:72:09:d1:5a:70:81:78:e7:
7a:75:c7:0b:22:3d:1c:77:a7:c0:7b:8f:ca:d1:89:
d2:ef:66:b8:04:10:23:01:48:d6:c1:f2:42:9e:1a:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:22:EF:67:98:A0:25:93:A3:51:AD:B0:A1:7B:25:7D:B9:F0:E3:78
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CSLvZ5igJZOjUa2woXslfbnw43g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
01:cb:ed:a5:36:ba:aa:5c:92:c8:2a:88:96:00:c9:04:89:a0:
37:95:55:bd:5f:d0:32:fa:2f:1f:17:8b:4c:26:71:e6:c6:33:
07:91:16:8c:63:7d:ec:f6:64:bc:6f:9d:6d:b1:0e:6e:2e:99:
10:80:df:49:9f:14:ea:7d:7f:1f:1a:1b:ee:f8:52:89:ad:6c:
af:8f:d6:6d:c8:17:04:ee:37:97:d8:a5:40:27:64:55:f4:3b:
10:4b:5b:eb:13:b2:cf:a2:57:76:e4:22:46:61:b9:9e:5d:d4:
5e:c8:35:19:8a:35:00:58:c4:e0:c0:0c:42:b4:c7:d9:ad:d0:
8b:ea:60:c9:54:46:26:60:ca:6a:a4:04:80:43:88:bb:48:13:
4c:26:d1:2b:3c:86:6f:e4:d9:03:4a:64:1b:0a:e0:b1:b0:fd:
8e:e5:f1:64:f7:6e:96:1c:b4:fe:87:86:56:31:b1:df:07:73:
bc:82:d3:e9:b8:38:b6:f7:2c:81:70:ab:5b:47:1c:2e:9f:40:
03:dc:00:e7:62:3c:8e:15:ea:c1:37:ba:78:4b:30:82:db:54:
7d:44:a4:39:68:a9:8e:e3:28:2b:50:5e:15:d9:e1:65:71:fc:
56:db:42:2b:6f:62:9c:a5:da:74:48:19:7e:7c:cb:33:9b:84:
90:b8:a2:ba
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUyNTVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDA5MjJFRjY3OThBMDI1
OTNBMzUxQURCMEExN0IyNTdEQjlGMEUzNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDE/0IxgTvdopHo1LT+ZdX9ga3/atWPOS7Z9IYhkZXAuOiqFSO1
5DCCjEyc7gXVlDMm2C8GNcavYAwf9IGYk3D6bkPuzwJtWHRPNj+7h9eWbtfrPaJ9
lpBduadoXXG+eg4zlapywUiRuVkcxGiWmMLSe61TA0mcp+Zb+7CKiKY4KGZnhzAE
955kZ/zVxCKPBV5oPG1ZiRDn90y6np1KT2IIeDEXFQgfiLUmQczONsvjhfgJboSV
zRob4shXDe5amlCVl7gSuIL8dSGZbhE7w3lYBohDjUwg8ohyCdFacIF453p1xwsi
PRx3p8B7j8rRidLvZrgEECMBSNbB8kKeGuu3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUCSLvZ5igJZOjUa2woXslfbnw43gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NTTHZaNWlnSlpPalVhMndv
WHNsZmJudzQzZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ7
wcAwDQYJKoZIhvcNAQELBQADggEBAAHL7aU2uqpcksgqiJYAyQSJoDeVVb1f0DL6
Lx8Xi0wmcebGMweRFoxjfez2ZLxvnW2xDm4umRCA30mfFOp9fx8aG+74UomtbK+P
1m3IFwTuN5fYpUAnZFX0OxBLW+sTss+iV3bkIkZhuZ5d1F7INRmKNQBYxODADEK0
x9mt0IvqYMlURiZgymqkBIBDiLtIE0wm0Ss8hm/k2QNKZBsK4LGw/Y7l8WT3bpYc
tP6HhlYxsd8Hc7yC0+m4OLb3LIFwq1tHHC6fQAPcAOdiPI4V6sE3unhLMILbVH1E
pDloqY7jKCtQXhXZ4WVx/FbbQitvYpyl2nRIGX58yzObhJC4oro=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org