Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HILu_DGWjd7imrQQRH25WfWYKj0.roa
File: HILu_DGWjd7imrQQRH25WfWYKj0.roa (raw, json)
Hash identifier: VbPx6c1avlV7ztITkyj69FfssvlECxnbGFYfGIyCIz4=
Subject key identifier: 1C:82:EE:FC:31:96:8D:DE:E2:9A:B4:10:44:7D:B9:59:F5:98:2A:3D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HILu_DGWjd7imrQQRH25WfWYKj0.roa
Signing time: Thu 15 Sep 2022 02:46:15 +0000
ROA not before: Thu 15 Sep 2022 02:46:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.193.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1C82EEFC31968DDEE29AB410447DB959F5982A3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:c2:0a:08:6f:a3:fc:cf:57:52:99:90:3f:
39:31:df:be:1d:96:99:77:63:a0:22:f1:ed:53:c4:
dd:ef:82:91:f4:be:dd:c7:b7:33:36:a4:6a:51:66:
d9:41:46:ea:b4:70:7d:af:20:a0:b2:ee:10:1f:10:
53:13:15:b6:83:68:1b:e8:28:c3:68:af:b0:dd:3e:
22:40:6f:e3:e5:1a:f4:a9:fc:94:87:b1:5f:7c:1c:
e9:69:3a:58:dc:31:f5:46:f1:dd:8f:4e:44:50:7e:
5a:38:b9:93:a4:fc:37:09:52:6f:31:db:e2:10:16:
35:25:1a:c8:6f:1d:00:36:6b:f1:f9:e8:f5:41:f3:
d4:8c:46:e1:db:0d:a8:0c:c0:9d:01:af:03:5f:d8:
32:49:bc:4a:0d:ec:3f:bc:f0:4b:9f:c6:a7:27:a1:
df:bc:27:03:67:91:19:75:17:46:4a:6d:06:97:6f:
9a:ca:5c:67:6d:5e:18:67:e1:34:1a:ab:b9:7d:20:
19:b8:27:f5:a4:cf:93:8e:c0:da:ff:cf:4f:fa:a6:
46:6c:30:32:f9:6e:c1:d2:85:10:82:06:c8:13:1b:
36:43:9a:67:b3:44:88:79:f6:b3:80:ea:83:c4:0a:
4b:c6:7c:f0:c0:55:7c:fc:5d:ec:8a:b3:6d:e7:b4:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:82:EE:FC:31:96:8D:DE:E2:9A:B4:10:44:7D:B9:59:F5:98:2A:3D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HILu_DGWjd7imrQQRH25WfWYKj0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.96.0/21
Signature Algorithm: sha256WithRSAEncryption
98:b7:db:87:b6:68:f4:db:9b:66:87:44:0e:58:94:a2:6f:bb:
ac:34:05:83:10:49:06:5d:2c:ab:ce:32:0e:11:48:c9:18:bf:
19:41:1e:87:09:70:e5:46:70:37:f8:af:bd:09:d8:5c:e2:50:
d1:df:80:65:e2:58:2b:06:c2:10:81:22:72:69:53:81:09:65:
3c:e0:bc:14:eb:34:ef:cd:f6:f1:00:85:b6:8d:4b:fb:44:1b:
48:ea:a6:37:e2:0c:4d:25:7e:73:66:9d:e9:16:b8:64:17:89:
29:3c:6a:b4:34:aa:8f:e1:a6:9a:48:85:93:c9:09:11:f9:b1:
2e:77:e5:cf:05:b1:22:76:22:cd:e7:4a:46:2c:b7:ff:78:84:
c5:a2:7a:66:ca:cd:3b:ca:a4:b3:b7:e3:3b:eb:2f:53:ad:8c:
78:41:10:29:05:90:c9:59:ac:1f:aa:2e:54:1d:54:81:57:a9:
73:9e:db:5b:38:70:d0:90:57:b0:24:4a:2e:28:a7:d6:01:ef:
d8:63:2e:23:6a:80:38:12:d4:29:9d:6e:49:1d:07:2f:0b:c5:
4c:48:8b:69:b5:3c:2f:0e:df:7b:65:df:03:ca:a3:f7:c9:af:
51:19:f7:90:74:bd:33:4e:30:29:d7:7b:c9:85:cb:30:99:3c:
0b:30:ab:fd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ2MTVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDFDODJFRUZDMzE5NjhE
REVFMjlBQjQxMDQ0N0RCOTU5RjU5ODJBM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzEMIKCG+j/M9XUpmQPzkx374dlpl3Y6Ai8e1TxN3vgpH0vt3H
tzM2pGpRZtlBRuq0cH2vIKCy7hAfEFMTFbaDaBvoKMNor7DdPiJAb+PlGvSp/JSH
sV98HOlpOljcMfVG8d2PTkRQflo4uZOk/DcJUm8x2+IQFjUlGshvHQA2a/H56PVB
89SMRuHbDagMwJ0BrwNf2DJJvEoN7D+88Eufxqcnod+8JwNnkRl1F0ZKbQaXb5rK
XGdtXhhn4TQaq7l9IBm4J/Wkz5OOwNr/z0/6pkZsMDL5bsHShRCCBsgTGzZDmmez
RIh59rOA6oPECkvGfPDAVXz8XeyKs23ntIODAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUHILu/DGWjd7imrQQRH25WfWYKj0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0hJTHVfREdXamQ3aW1yUVFS
SDI1V2ZXWUtqMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wWAwDQYJKoZIhvcNAQELBQADggEBAJi324e2aPTbm2aHRA5YlKJvu6w0BYMQSQZd
LKvOMg4RSMkYvxlBHocJcOVGcDf4r70J2FziUNHfgGXiWCsGwhCBInJpU4EJZTzg
vBTrNO/N9vEAhbaNS/tEG0jqpjfiDE0lfnNmnekWuGQXiSk8arQ0qo/hpppIhZPJ
CRH5sS535c8FsSJ2Is3nSkYst/94hMWiembKzTvKpLO34zvrL1OtjHhBECkFkMlZ
rB+qLlQdVIFXqXOe21s4cNCQV7AkSi4op9YB79hjLiNqgDgS1CmdbkkdBy8LxUxI
i2m1PC8O33tl3wPKo/fJr1EZ95B0vTNOMCnXe8mFyzCZPAswq/0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org