Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GEVg-kItto8jIPApNycZOeF4XD0.roa
File: GEVg-kItto8jIPApNycZOeF4XD0.roa (raw, json)
Hash identifier: W+Q1apsAhDCC8JX0dEIdNDTxc0gX0Wjog8neoLeLDZw=
Subject key identifier: 18:45:60:FA:42:2D:B6:8F:23:20:F0:29:37:27:19:39:E1:78:5C:3D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20A1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GEVg-kItto8jIPApNycZOeF4XD0.roa
Signing time: Fri 25 Nov 2022 04:38:56 +0000
ROA not before: Fri 25 Nov 2022 04:38:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8353 (0x20a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=184560FA422DB68F2320F02937271939E1785C3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:74:2b:64:49:69:c4:95:e5:99:0e:05:f7:97:
52:f0:33:29:e3:a0:85:22:da:ab:32:a0:e4:8a:39:
48:42:d6:a0:cc:67:9a:5e:23:08:3a:13:93:90:49:
5b:1b:dc:7d:9a:41:35:6a:97:68:28:a2:cb:39:b6:
04:ed:25:38:e9:60:c0:88:df:7c:e9:31:42:45:1d:
c3:ec:41:db:67:a9:5e:87:b7:7c:3a:52:20:58:7f:
7a:9d:d5:54:23:b3:04:b5:be:1f:83:70:a8:e5:9d:
fe:52:01:8b:17:1a:de:65:51:f4:0e:af:6b:8f:38:
23:c3:a6:5a:95:c7:00:06:db:19:8f:88:7a:e0:8b:
6d:bd:25:93:21:85:62:9d:99:81:5c:6a:53:c0:b7:
27:29:86:92:fa:fd:f4:40:f7:19:0d:0e:1d:e1:b0:
35:1a:6b:c2:71:15:d4:20:47:36:60:6a:c9:2b:9a:
4b:60:9d:b5:52:a3:4d:32:09:da:28:60:46:d6:8c:
25:84:6c:4d:3c:81:ec:99:4e:d5:42:db:77:39:d8:
41:c7:4e:e0:0b:f9:01:48:fd:0e:17:55:0d:85:1b:
f5:62:55:4c:23:f7:f3:16:94:36:44:ae:4f:03:02:
f9:ae:00:7a:8c:90:a5:ca:0b:33:22:4f:7b:e0:b4:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:45:60:FA:42:2D:B6:8F:23:20:F0:29:37:27:19:39:E1:78:5C:3D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GEVg-kItto8jIPApNycZOeF4XD0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.178.0/24
Signature Algorithm: sha256WithRSAEncryption
40:a0:25:e1:0b:fa:95:6f:3c:09:1a:ba:01:28:8b:ae:40:58:
96:34:9f:fe:8e:e3:fe:ab:84:eb:9a:1b:1e:f8:c1:f7:74:82:
5c:ba:f1:34:20:4d:31:09:5f:43:68:ed:32:b3:aa:5f:db:72:
a9:82:59:ea:9c:94:fb:6a:de:2d:94:03:3b:ca:15:19:5b:db:
7a:96:be:a8:b0:73:b3:66:30:b2:69:58:dd:08:de:9d:8a:24:
c7:32:f6:99:5d:17:ea:f9:70:96:aa:be:59:54:4e:1a:6f:a4:
a9:96:e2:d8:9f:e9:10:10:a5:43:b7:2f:db:62:83:f1:68:0d:
ea:66:2d:46:a8:ce:14:df:eb:52:f1:9d:2d:48:f6:2b:3f:b4:
44:38:04:50:64:a4:0d:17:11:00:f0:ee:08:db:b9:ca:3e:73:
c3:2d:3d:c2:76:66:31:b2:f2:7c:41:59:ae:b1:5b:33:9c:51:
eb:66:eb:80:f8:12:39:62:4c:41:91:3a:3a:24:8b:b3:3e:bd:
46:35:df:ae:73:40:82:d0:01:b1:13:3d:46:65:c8:19:80:92:
de:0d:8d:a2:3b:94:ce:cb:a0:2a:03:df:48:f2:cc:c1:43:dc:
81:12:51:2d:8c:f3:67:07:fa:13:75:ed:67:e8:f7:61:f7:70:
59:a5:5d:e3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIKEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4NTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE4NDU2MEZBNDIyREI2
OEYyMzIwRjAyOTM3MjcxOTM5RTE3ODVDM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD2dCtkSWnEleWZDgX3l1LwMynjoIUi2qsyoOSKOUhC1qDMZ5pe
Iwg6E5OQSVsb3H2aQTVql2gooss5tgTtJTjpYMCI33zpMUJFHcPsQdtnqV6Ht3w6
UiBYf3qd1VQjswS1vh+DcKjlnf5SAYsXGt5lUfQOr2uPOCPDplqVxwAG2xmPiHrg
i229JZMhhWKdmYFcalPAtycphpL6/fRA9xkNDh3hsDUaa8JxFdQgRzZgaskrmktg
nbVSo00yCdooYEbWjCWEbE08geyZTtVC23c52EHHTuAL+QFI/Q4XVQ2FG/ViVUwj
9/MWlDZErk8DAvmuAHqMkKXKCzMiT3vgtDRpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGEVg+kItto8jIPApNycZOeF4XD0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dFVmcta0l0dG84aklQQXBO
eWNaT2VGNFhEMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
w7IwDQYJKoZIhvcNAQELBQADggEBAECgJeEL+pVvPAkaugEoi65AWJY0n/6O4/6r
hOuaGx74wfd0gly68TQgTTEJX0No7TKzql/bcqmCWeqclPtq3i2UAzvKFRlb23qW
vqiwc7NmMLJpWN0I3p2KJMcy9pldF+r5cJaqvllUThpvpKmW4tif6RAQpUO3L9ti
g/FoDepmLUaozhTf61LxnS1I9is/tEQ4BFBkpA0XEQDw7gjbuco+c8MtPcJ2ZjGy
8nxBWa6xWzOcUetm64D4EjliTEGROjoki7M+vUY1365zQILQAbETPUZlyBmAkt4N
jaI7lM7LoCoD30jyzMFD3IESUS2M82cH+hN17Wfo92H3cFmlXeM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:48 2025 by rpki-client