Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K-dGm1fA8iu3ZBJPTL3nMEn8eoo.roa
File: K-dGm1fA8iu3ZBJPTL3nMEn8eoo.roa (raw, json)
Hash identifier: 2RHC5voTnRAeyPSA5nnHHyDGCH7rblCmQ4/BEnVoEeg=
Subject key identifier: 2B:E7:46:9B:57:C0:F2:2B:B7:64:12:4F:4C:BD:E7:30:49:FC:7A:8A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2124
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K-dGm1fA8iu3ZBJPTL3nMEn8eoo.roa
Signing time: Fri 25 Nov 2022 04:39:33 +0000
ROA not before: Fri 25 Nov 2022 04:39:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8484 (0x2124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2BE7469B57C0F22BB764124F4CBDE73049FC7A8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0b:1f:e8:05:2e:dc:24:75:2e:fa:4d:65:95:
c1:bf:ed:c0:06:4c:94:9b:44:98:1b:cf:6c:68:77:
34:0c:29:12:e9:c0:a1:2f:96:bf:52:94:e1:e2:61:
37:c2:c2:04:6a:6e:75:21:58:92:34:59:87:6d:c5:
4b:3a:0c:30:a3:55:45:0b:f1:f7:18:0c:9b:9a:ed:
5b:89:04:06:a0:a2:23:1b:d5:fa:4f:b2:61:0d:35:
5a:2b:ed:76:30:c2:b3:98:26:e9:6d:7c:df:a8:42:
b2:40:ec:46:0e:bd:bb:43:8f:48:f9:64:f5:35:20:
1e:9d:70:f7:88:dd:5a:23:b8:64:bf:3f:2d:af:3a:
78:35:37:0a:9b:45:76:e6:96:76:61:d5:86:08:2d:
5d:29:e2:50:fa:95:91:9d:da:83:e6:a7:29:72:e2:
55:90:4d:4a:b7:4f:25:f6:a7:73:ec:79:87:6f:10:
d9:ce:21:fd:68:e1:61:f2:7d:cb:c3:45:7b:73:7b:
3c:ad:5f:cc:88:1d:60:9d:b6:3f:b7:d2:70:07:e7:
57:6b:44:e8:cb:54:10:17:08:84:5c:27:e2:ba:5e:
a7:8b:ae:18:b7:76:0e:1e:92:c0:db:26:ae:cc:25:
b5:f9:09:0d:ba:f8:87:6d:1c:93:bb:a7:b2:5f:6d:
f2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E7:46:9B:57:C0:F2:2B:B7:64:12:4F:4C:BD:E7:30:49:FC:7A:8A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K-dGm1fA8iu3ZBJPTL3nMEn8eoo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.224.0/22
Signature Algorithm: sha256WithRSAEncryption
47:ec:d6:2a:52:10:03:de:95:d3:66:a2:a4:21:c9:c8:39:2d:
ae:85:85:34:a6:5d:5e:ae:e4:d7:a7:0a:29:38:d1:93:20:7b:
18:8a:00:c9:cc:79:7e:81:67:97:09:de:d5:3b:94:33:f7:83:
48:45:43:18:47:07:18:9d:84:7e:4f:c2:79:35:bf:f6:01:96:
81:8c:0b:82:33:f1:5e:64:f8:b4:0a:4e:35:8e:1f:6b:0d:09:
47:c0:94:61:05:07:9d:d2:dc:17:58:99:5a:c2:05:a6:22:00:
c3:f3:ce:0b:02:94:e0:bb:2d:ab:2f:cc:cb:c4:31:d4:9c:36:
01:26:1f:b0:46:44:15:a7:95:f4:06:cd:77:eb:e7:e3:ed:80:
28:25:4e:d0:7d:bc:ad:2d:6a:30:0f:16:4d:66:a4:54:d6:1e:
87:e9:63:14:3e:88:0b:9a:d6:b0:b3:d9:72:0b:32:14:65:f8:
cf:31:22:ed:2b:b7:10:d7:83:5e:71:87:10:cd:1e:9d:30:9e:
0c:24:91:ac:b4:7d:60:88:4c:65:38:c4:61:2b:74:a7:ef:d0:
c6:27:14:fa:23:d8:cb:3d:20:4f:33:2e:2c:fe:c2:01:c4:32:
66:3b:c1:1b:9c:3d:90:86:ab:4c:45:99:59:63:2c:09:0f:2a:
cb:7e:2c:61
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICISQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MzNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJCRTc0NjlCNTdDMEYy
MkJCNzY0MTI0RjRDQkRFNzMwNDlGQzdBOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpCx/oBS7cJHUu+k1llcG/7cAGTJSbRJgbz2xodzQMKRLpwKEv
lr9SlOHiYTfCwgRqbnUhWJI0WYdtxUs6DDCjVUUL8fcYDJua7VuJBAagoiMb1fpP
smENNVor7XYwwrOYJultfN+oQrJA7EYOvbtDj0j5ZPU1IB6dcPeI3VojuGS/Py2v
Ong1NwqbRXbmlnZh1YYILV0p4lD6lZGd2oPmpyly4lWQTUq3TyX2p3PseYdvENnO
If1o4WHyfcvDRXtzezytX8yIHWCdtj+30nAH51drROjLVBAXCIRcJ+K6XqeLrhi3
dg4eksDbJq7MJbX5CQ26+IdtHJO7p7JfbfINAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUK+dGm1fA8iu3ZBJPTL3nMEn8eoowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0stZEdtMWZBOGl1M1pCSlBU
TDNuTUVuOGVvby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wOAwDQYJKoZIhvcNAQELBQADggEBAEfs1ipSEAPeldNmoqQhycg5La6FhTSmXV6u
5NenCik40ZMgexiKAMnMeX6BZ5cJ3tU7lDP3g0hFQxhHBxidhH5Pwnk1v/YBloGM
C4Iz8V5k+LQKTjWOH2sNCUfAlGEFB53S3BdYmVrCBaYiAMPzzgsClOC7LasvzMvE
MdScNgEmH7BGRBWnlfQGzXfr5+PtgCglTtB9vK0tajAPFk1mpFTWHofpYxQ+iAua
1rCz2XILMhRl+M8xIu0rtxDXg15xhxDNHp0wngwkkay0fWCITGU4xGErdKfv0MYn
FPoj2Ms9IE8zLiz+wgHEMmY7wRucPZCGq0xFmVljLAkPKst+LGE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:07 2025 by rpki-client