Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FenOkemY-LGb1vLKj9oVT8jP44E.roa
File: FenOkemY-LGb1vLKj9oVT8jP44E.roa (raw, json)
Hash identifier: ne/BY8ncnDRwKHb9CaedYU/Eafn9K1k1i7LSET+y6Us=
Subject key identifier: 15:E9:CE:91:E9:98:F8:B1:9B:D6:F2:CA:8F:DA:15:4F:C8:CF:E3:81
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FenOkemY-LGb1vLKj9oVT8jP44E.roa
Signing time: Thu 15 Sep 2022 02:45:11 +0000
ROA not before: Thu 15 Sep 2022 02:45:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=15E9CE91E998F8B19BD6F2CA8FDA154FC8CFE381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:ab:e3:2a:4c:9e:13:13:f5:86:bb:b7:87:
ef:2b:68:b1:ad:b1:03:57:0e:25:87:89:f8:a8:2e:
ba:3d:72:22:18:93:f0:32:35:7e:9f:57:a3:cc:27:
61:e8:b0:47:8f:b8:3a:c7:3a:f7:c1:87:05:c6:b4:
6c:a4:a2:d7:da:49:54:0c:ec:9c:9a:c0:cf:5b:4d:
de:02:af:c3:e5:7d:b4:14:d6:c3:4b:ae:71:cf:6b:
60:0a:68:3a:4a:3f:aa:66:3f:ca:67:a2:14:27:a6:
bf:95:7b:ee:55:8a:70:b5:5a:f7:d4:2f:74:cf:87:
81:86:39:d0:73:76:98:3a:e8:9d:30:40:e4:28:ec:
51:f2:f4:57:17:e9:50:2e:37:b2:53:0a:74:f6:53:
1e:61:b9:54:06:ce:81:f9:87:87:09:f3:5d:8f:19:
5b:76:95:78:9c:32:37:37:11:ab:e8:9a:f1:e1:50:
a4:61:12:77:4d:94:99:de:69:25:44:ac:0d:28:eb:
6c:18:ee:5d:e7:0d:fe:32:22:b2:58:29:26:93:3d:
cf:30:3b:27:d1:97:ac:d0:e6:28:ab:ff:a2:f5:2c:
0e:07:3a:fe:1c:4f:22:55:36:b8:dc:79:b8:d7:6d:
f1:3b:50:5e:ed:ad:b8:26:12:5c:a9:bf:db:b0:3a:
a0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E9:CE:91:E9:98:F8:B1:9B:D6:F2:CA:8F:DA:15:4F:C8:CF:E3:81
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FenOkemY-LGb1vLKj9oVT8jP44E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.120.0/21
Signature Algorithm: sha256WithRSAEncryption
12:53:7c:ba:d6:6d:a9:b9:f8:79:81:75:ca:be:73:7e:06:92:
58:c7:3a:f7:aa:30:cd:66:20:43:f0:c5:dc:f5:bf:31:e1:34:
f6:02:ba:90:65:f7:1c:9a:e7:92:4d:12:70:d3:f2:b4:43:bb:
84:5c:25:b2:f7:50:e2:c7:6e:2e:4a:94:f1:90:8c:c1:0c:55:
4f:52:5b:0b:1c:be:a8:47:c7:3f:e1:e3:27:9d:94:a6:19:95:
30:08:65:3d:15:78:1e:c1:5c:16:d1:0e:d2:42:57:96:6a:2c:
7c:fa:47:32:1f:98:cd:1e:98:06:b3:39:51:b5:82:62:a1:3b:
f5:6e:b9:26:e6:de:28:5c:e3:0f:1a:80:a9:14:35:38:db:4f:
e5:60:de:8a:0a:ac:d2:55:72:e9:6f:4b:8f:02:3b:43:47:6f:
ca:7a:2e:df:33:df:96:e8:58:05:aa:e9:88:4f:d4:6c:e9:3f:
3b:5c:2b:d4:f1:a1:7e:a5:07:d5:3c:7f:c9:0f:59:68:ba:61:
a8:e2:64:2c:5e:70:7a:d9:b4:3c:ae:e8:cd:12:bb:df:c0:f0:
04:93:68:5e:38:2d:ba:18:d8:34:6a:81:1c:da:f2:82:fd:0a:
fe:e2:59:6a:e6:ff:f8:e0:58:b3:9f:bf:e6:71:55:ce:f6:6a:
2a:b9:5b:3e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE1RTlDRTkxRTk5OEY4
QjE5QkQ2RjJDQThGREExNTRGQzhDRkUzODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCj6avjKkyeExP1hru3h+8raLGtsQNXDiWHifioLro9ciIYk/Ay
NX6fV6PMJ2HosEePuDrHOvfBhwXGtGykotfaSVQM7JyawM9bTd4Cr8PlfbQU1sNL
rnHPa2AKaDpKP6pmP8pnohQnpr+Ve+5VinC1WvfUL3TPh4GGOdBzdpg66J0wQOQo
7FHy9FcX6VAuN7JTCnT2Ux5huVQGzoH5h4cJ812PGVt2lXicMjc3EavomvHhUKRh
EndNlJneaSVErA0o62wY7l3nDf4yIrJYKSaTPc8wOyfRl6zQ5iir/6L1LA4HOv4c
TyJVNrjcebjXbfE7UF7trbgmElypv9uwOqCFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFenOkemY+LGb1vLKj9oVT8jP44EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0Zlbk9rZW1ZLUxHYjF2TEtq
OW9WVDhqUDQ0RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wHgwDQYJKoZIhvcNAQELBQADggEBABJTfLrWbam5+HmBdcq+c34GkljHOveqMM1m
IEPwxdz1vzHhNPYCupBl9xya55JNEnDT8rRDu4RcJbL3UOLHbi5KlPGQjMEMVU9S
WwscvqhHxz/h4yedlKYZlTAIZT0VeB7BXBbRDtJCV5ZqLHz6RzIfmM0emAazOVG1
gmKhO/VuuSbm3ihc4w8agKkUNTjbT+Vg3ooKrNJVculvS48CO0NHb8p6Lt8z35bo
WAWq6YhP1GzpPztcK9TxoX6lB9U8f8kPWWi6YajiZCxecHrZtDyu6M0Su9/A8AST
aF44LboY2DRqgRza8oL9Cv7iWWrm//jgWLOfv+ZxVc72aiq5Wz4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org