Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HWGED8CHO4LFbDfco1MiQxuUK0I.roa
File: HWGED8CHO4LFbDfco1MiQxuUK0I.roa (raw, json)
Hash identifier: KDm0zrbarXhuwgynrfue7/XODPLCV1ArsXcKR6xDt6k=
Subject key identifier: 1D:61:84:0F:C0:87:3B:82:C5:6C:37:DC:A3:53:22:43:1B:94:2B:42
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B8D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HWGED8CHO4LFbDfco1MiQxuUK0I.roa
Signing time: Wed 29 Sep 2021 02:46:44 +0000
ROA not before: Wed 29 Sep 2021 02:46:44 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7053 (0x1b8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:44 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1D61840FC0873B82C56C37DCA35322431B942B42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:04:1f:36:51:f9:f4:5e:f5:9d:8e:44:b1:
be:28:a9:f4:46:3f:16:a4:e3:34:b8:30:cf:c6:8a:
11:40:da:56:7d:7e:e2:31:cf:35:60:84:22:1a:d7:
fd:02:e3:ef:5b:ce:5d:2f:48:29:8c:8c:b6:3b:87:
73:5f:98:df:ec:2e:45:e3:bc:81:88:b4:7a:5f:1e:
18:3d:83:f1:06:b0:66:92:fd:3b:ad:35:71:f1:13:
0a:e7:07:de:a7:29:1c:9c:e9:39:32:0a:08:71:ea:
24:95:a8:59:97:39:5e:47:e2:27:e8:c5:aa:ac:d8:
31:ab:61:59:fe:64:77:32:ff:d1:b7:7f:15:b5:41:
47:b3:bf:66:10:9a:f1:2b:51:b0:01:cf:cb:1c:50:
2b:73:8e:8e:d4:e8:67:26:fb:dc:b7:44:72:38:a6:
02:86:02:cc:04:a6:4f:83:6c:97:7c:88:96:f9:5c:
1f:11:b3:09:a0:80:d7:f1:e4:98:d5:a3:1d:aa:6c:
62:8f:bf:bd:71:d0:e2:f9:ec:59:22:b3:d9:52:f9:
c7:b6:eb:86:be:d3:67:24:30:97:74:40:c6:8e:f7:
65:23:a3:d5:82:4e:df:e5:58:11:15:de:33:b6:3f:
77:2a:eb:1a:f3:80:2c:05:2c:90:3b:9d:7a:af:54:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:61:84:0F:C0:87:3B:82:C5:6C:37:DC:A3:53:22:43:1B:94:2B:42
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HWGED8CHO4LFbDfco1MiQxuUK0I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.84.0/22
Signature Algorithm: sha256WithRSAEncryption
55:17:10:89:17:c6:8b:0e:43:6a:e0:ba:13:7e:e8:af:54:4e:
99:dc:62:ac:7b:8f:48:fe:9a:fc:6d:19:29:9f:fe:c1:aa:8e:
c4:76:5e:c5:0d:a7:6c:c7:c2:ba:ee:be:72:d5:98:ea:19:d8:
c8:6f:b3:a5:21:04:2e:e3:cc:ed:6a:a3:5e:4e:93:87:94:b6:
c0:04:b3:46:f4:8c:4e:23:1f:da:f9:05:0c:88:2f:34:d3:21:
40:e7:b2:8c:0f:46:4a:f5:7f:34:3a:0b:6f:80:23:4a:86:b2:
08:f4:a3:35:c7:c0:cf:29:18:1d:3a:5c:4f:62:a0:03:3a:a2:
2d:c4:48:1c:c7:97:28:45:0a:d0:1b:a6:29:54:02:90:2d:10:
0b:8b:aa:95:5b:ef:94:46:b3:82:48:4c:b5:cb:c7:cf:dc:fc:
be:c8:c9:c9:a0:65:97:e9:80:9d:93:1c:f3:e3:14:7a:c1:7e:
1a:94:0d:47:26:b3:af:f5:23:ad:7e:19:e0:28:05:85:68:3e:
f5:6f:85:bf:92:25:27:3b:27:06:4d:ed:1b:fb:04:e4:c4:01:
30:2d:1a:ac:3d:cd:39:fa:e1:f5:eb:09:e1:ac:1e:ac:d3:78:
b3:b2:4a:1b:09:0e:ac:0c:55:4a:ef:b6:fd:9f:71:30:f2:42:
41:a3:98:c0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG40wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2NDRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDFENjE4NDBGQzA4NzNC
ODJDNTZDMzdEQ0EzNTMyMjQzMUI5NDJCNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJKAQfNlH59F71nY5Esb4oqfRGPxak4zS4MM/GihFA2lZ9fuIx
zzVghCIa1/0C4+9bzl0vSCmMjLY7h3NfmN/sLkXjvIGItHpfHhg9g/EGsGaS/Tut
NXHxEwrnB96nKRyc6TkyCghx6iSVqFmXOV5H4ifoxaqs2DGrYVn+ZHcy/9G3fxW1
QUezv2YQmvErUbABz8scUCtzjo7U6Gcm+9y3RHI4pgKGAswEpk+DbJd8iJb5XB8R
swmggNfx5JjVox2qbGKPv71x0OL57Fkis9lS+ce264a+02ckMJd0QMaO92Ujo9WC
Tt/lWBEV3jO2P3cq6xrzgCwFLJA7nXqvVOvBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUHWGED8CHO4LFbDfco1MiQxuUK0IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0hXR0VEOENITzRMRmJEZmNv
MU1pUXh1VUswSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wlQwDQYJKoZIhvcNAQELBQADggEBAFUXEIkXxosOQ2rguhN+6K9UTpncYqx7j0j+
mvxtGSmf/sGqjsR2XsUNp2zHwrruvnLVmOoZ2Mhvs6UhBC7jzO1qo15Ok4eUtsAE
s0b0jE4jH9r5BQyILzTTIUDnsowPRkr1fzQ6C2+AI0qGsgj0ozXHwM8pGB06XE9i
oAM6oi3ESBzHlyhFCtAbpilUApAtEAuLqpVb75RGs4JITLXLx8/c/L7IycmgZZfp
gJ2THPPjFHrBfhqUDUcms6/1I61+GeAoBYVoPvVvhb+SJSc7JwZN7Rv7BOTEATAt
Gqw9zTn64fXrCeGsHqzTeLOyShsJDqwMVUrvtv2fcTDyQkGjmMA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:53 2025 by rpki-client