Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IPSEnw3heTeMGlDfzeRHZkdFEM8.roa
File: IPSEnw3heTeMGlDfzeRHZkdFEM8.roa (raw, json)
Hash identifier: zi7rG/Xj6L2f2vSTq247ysf0YOgirhe5xz+fXnV48oY=
Subject key identifier: 20:F4:84:9F:0D:E1:79:37:8C:1A:50:DF:CD:E4:47:66:47:45:10:CF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IPSEnw3heTeMGlDfzeRHZkdFEM8.roa
Signing time: Thu 15 Sep 2022 02:46:08 +0000
ROA not before: Thu 15 Sep 2022 02:46:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=20F4849F0DE179378C1A50DFCDE44766474510CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a5:4d:dc:48:2c:cc:25:f2:22:dd:f0:fb:02:
b9:0b:09:7a:cc:a6:c0:39:00:98:e4:27:8e:06:5d:
a3:a9:90:8d:d7:55:cf:b0:da:be:13:96:84:2d:9f:
9a:24:3f:5f:69:d3:0e:83:d2:f8:2b:50:a2:32:f4:
55:cd:5e:70:78:14:5a:d8:bb:5c:cc:98:1f:43:e2:
69:60:d0:5a:9b:cf:ad:e6:19:ba:3d:5d:9f:e1:ea:
c3:7d:66:52:f8:3e:60:ee:93:9e:0e:30:3c:a9:ef:
4e:14:42:3d:ca:3d:26:c9:f5:3d:4f:be:fe:09:04:
1d:a3:0b:a2:0d:ed:69:fd:78:a4:7b:6c:e6:99:1a:
01:16:5d:27:01:e3:a6:f5:5b:8a:ef:2d:45:8e:cb:
ce:86:34:12:47:c0:b3:59:01:58:fe:c5:f0:d9:7f:
b0:06:75:01:c6:de:f2:82:c4:ea:52:74:89:a7:c2:
31:cb:30:d2:9d:06:70:21:69:23:37:66:ce:3d:c2:
21:33:e0:83:47:f3:7f:53:15:be:b2:62:b7:50:e4:
48:e3:96:35:3b:2b:a3:f5:04:1f:1f:7d:9f:bb:36:
fe:c1:83:df:07:88:28:e8:fa:a6:aa:fd:b1:03:28:
1a:85:0c:c5:a2:05:61:64:3d:b6:e1:e2:2d:28:17:
e8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F4:84:9F:0D:E1:79:37:8C:1A:50:DF:CD:E4:47:66:47:45:10:CF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IPSEnw3heTeMGlDfzeRHZkdFEM8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.128.0/18
Signature Algorithm: sha256WithRSAEncryption
50:d4:19:7b:bc:19:24:af:3f:e3:af:53:25:5b:17:f8:25:20:
58:7a:c3:13:89:cf:25:81:84:a4:d5:19:1c:06:8b:b9:38:3b:
d5:2a:89:f6:6c:07:b1:10:cd:56:6c:dd:b6:f7:bf:0c:21:19:
8f:ca:b0:aa:12:2f:72:c5:6b:70:64:20:18:ad:10:9b:55:b5:
71:53:c3:08:cb:21:bb:12:55:ca:ac:76:69:24:18:1d:61:63:
bd:0b:d8:9f:c8:82:ce:9d:24:c9:66:6f:ac:d3:87:6e:a9:27:
f9:66:de:93:9a:f6:d1:2c:39:08:c2:8e:80:f6:80:17:45:7d:
b0:9e:35:95:44:46:be:70:63:e2:73:04:70:9b:55:4e:b6:56:
2c:6e:ae:fd:f9:2a:17:d8:3f:e9:84:57:37:ad:ba:92:07:2c:
ad:be:d1:47:d3:c1:27:ae:f7:96:60:5c:cf:82:d2:3a:19:3e:
b1:cd:7d:fc:84:de:57:5d:75:ab:54:c0:47:37:0d:fe:b1:76:
8c:bf:5a:75:1c:02:e2:8a:12:1d:7d:93:7f:e8:18:0b:3a:1b:
d4:ad:11:d4:90:30:94:f8:68:b2:5e:76:71:d7:d4:45:74:42:
6e:83:e3:2f:91:70:f1:81:df:8f:77:67:a0:62:90:34:d5:63:
56:1d:e2:a9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ2MDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDIwRjQ4NDlGMERFMTc5
Mzc4QzFBNTBERkNERTQ0NzY2NDc0NTEwQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDypU3cSCzMJfIi3fD7ArkLCXrMpsA5AJjkJ44GXaOpkI3XVc+w
2r4TloQtn5okP19p0w6D0vgrUKIy9FXNXnB4FFrYu1zMmB9D4mlg0Fqbz63mGbo9
XZ/h6sN9ZlL4PmDuk54OMDyp704UQj3KPSbJ9T1Pvv4JBB2jC6IN7Wn9eKR7bOaZ
GgEWXScB46b1W4rvLUWOy86GNBJHwLNZAVj+xfDZf7AGdQHG3vKCxOpSdImnwjHL
MNKdBnAhaSM3Zs49wiEz4INH839TFb6yYrdQ5EjjljU7K6P1BB8ffZ+7Nv7Bg98H
iCjo+qaq/bEDKBqFDMWiBWFkPbbh4i0oF+gNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUIPSEnw3heTeMGlDfzeRHZkdFEM8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lQU0VudzNoZVRlTUdsRGZ6
ZVJIWmtkRkVNOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ7
w4AwDQYJKoZIhvcNAQELBQADggEBAFDUGXu8GSSvP+OvUyVbF/glIFh6wxOJzyWB
hKTVGRwGi7k4O9UqifZsB7EQzVZs3bb3vwwhGY/KsKoSL3LFa3BkIBitEJtVtXFT
wwjLIbsSVcqsdmkkGB1hY70L2J/Igs6dJMlmb6zTh26pJ/lm3pOa9tEsOQjCjoD2
gBdFfbCeNZVERr5wY+JzBHCbVU62Vixurv35KhfYP+mEVzetupIHLK2+0UfTwSeu
95ZgXM+C0joZPrHNffyE3ldddatUwEc3Df6xdoy/WnUcAuKKEh19k3/oGAs6G9St
EdSQMJT4aLJednHX1EV0Qm6D4y+RcPGB3493Z6BikDTVY1Yd4qk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org