Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LKYycBlQgRLrokMe89kASZTk9ko.roa
File: LKYycBlQgRLrokMe89kASZTk9ko.roa (raw, json)
Hash identifier: BpPu49eqqX19y/QPSGSMWmEJXMEKgnSQw2tRJAQZ9Pw=
Subject key identifier: 2C:A6:32:70:19:50:81:12:EB:A2:43:1E:F3:D9:00:49:94:E4:F6:4A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2090
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LKYycBlQgRLrokMe89kASZTk9ko.roa
Signing time: Fri 25 Nov 2022 04:38:52 +0000
ROA not before: Fri 25 Nov 2022 04:38:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8336 (0x2090)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2CA6327019508112EBA2431EF3D9004994E4F64A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:5d:e3:a4:b5:66:76:02:60:48:83:06:d3:
d4:a5:b9:5e:4c:ae:74:44:be:6b:38:32:b1:cd:7f:
33:32:a4:44:0b:5a:80:a7:b5:8c:14:93:c1:e6:ba:
de:6e:d8:c3:dc:d1:bb:c2:60:21:2f:24:34:a8:66:
da:25:a0:55:99:2f:f0:f3:9a:e1:4e:dd:ad:bc:71:
bb:f1:a0:e3:bd:fb:0a:d7:ea:ec:c7:61:3b:f8:93:
c8:11:b6:ce:98:8e:ac:03:5d:f4:a8:01:6a:e5:5e:
7e:e8:39:55:3d:16:d7:b6:82:94:8b:ce:5c:2d:8d:
af:40:8d:cb:b5:bc:59:64:84:3e:b4:19:11:bb:87:
1c:27:e9:33:86:3e:bf:a9:1f:b9:f5:6b:21:0a:1e:
d8:e2:5e:1f:3f:87:a6:d5:60:09:35:d9:0e:0b:ba:
86:2a:c4:5b:fc:c2:b9:0c:22:e8:46:d9:85:83:f6:
b9:f0:f5:77:ad:a8:17:eb:35:96:98:5c:d2:b9:17:
88:e4:f4:a0:e1:28:03:45:0e:f3:77:b7:32:05:03:
07:57:ea:52:fd:7e:77:36:fe:11:32:3d:63:83:e9:
c4:f2:f3:8e:e7:ab:89:77:d4:01:9e:a4:ba:7e:09:
d1:19:b7:37:83:0d:e0:d8:7e:a7:3f:15:e9:d2:47:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A6:32:70:19:50:81:12:EB:A2:43:1E:F3:D9:00:49:94:E4:F6:4A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LKYycBlQgRLrokMe89kASZTk9ko.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.48.0/21
Signature Algorithm: sha256WithRSAEncryption
11:c8:7a:16:3e:76:90:41:1b:8f:86:0a:d1:74:78:3d:99:8a:
d4:6d:ea:38:82:fe:46:54:12:dd:c7:e8:af:58:3d:73:0f:3d:
27:dd:ca:2c:2f:17:36:fd:0d:ed:e2:70:64:f5:09:f2:98:0a:
b0:e9:83:e4:ec:c5:09:cf:14:a0:2f:12:ca:8c:c6:3b:1d:22:
60:78:42:82:f8:cd:9d:fe:a4:a2:5d:91:0b:6a:be:f5:89:92:
9b:2f:ce:0e:dd:d9:a4:43:41:ff:3e:c1:04:9a:45:0b:f3:fa:
e3:8e:b2:a3:c4:ed:49:ea:45:81:c8:10:d1:98:63:9d:b9:3d:
a3:20:b2:e7:e4:cf:a5:0d:aa:fd:0b:40:b3:40:6d:31:e2:de:
34:77:d4:c4:a6:98:04:e6:6f:29:ea:ad:47:1d:59:6c:44:7c:
4e:c2:b9:95:a0:62:50:7b:a3:e9:61:96:f6:4f:da:87:23:1e:
5c:ff:63:34:78:49:fd:43:0b:42:f9:96:bc:96:cf:0e:72:b9:
93:03:9d:b5:99:0d:23:76:1b:8f:ae:b8:0b:7e:22:a2:53:01:
00:38:ad:90:8f:a3:f2:4f:22:e0:08:51:74:7e:da:92:af:6c:
ec:bc:f7:1f:09:4b:c8:81:23:ee:1c:98:f8:57:ba:fe:69:22:
a2:78:f4:9f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4NTJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJDQTYzMjcwMTk1MDgx
MTJFQkEyNDMxRUYzRDkwMDQ5OTRFNEY2NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCeOl3jpLVmdgJgSIMG09SluV5MrnREvms4MrHNfzMypEQLWoCn
tYwUk8Hmut5u2MPc0bvCYCEvJDSoZtoloFWZL/DzmuFO3a28cbvxoOO9+wrX6uzH
YTv4k8gRts6YjqwDXfSoAWrlXn7oOVU9Fte2gpSLzlwtja9Ajcu1vFlkhD60GRG7
hxwn6TOGPr+pH7n1ayEKHtjiXh8/h6bVYAk12Q4LuoYqxFv8wrkMIuhG2YWD9rnw
9XetqBfrNZaYXNK5F4jk9KDhKANFDvN3tzIFAwdX6lL9fnc2/hEyPWOD6cTy847n
q4l31AGepLp+CdEZtzeDDeDYfqc/FenSR7oLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULKYycBlQgRLrokMe89kASZTk9kowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0xLWXljQmxRZ1JMcm9rTWU4
OWtBU1pUazlrby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wTAwDQYJKoZIhvcNAQELBQADggEBABHIehY+dpBBG4+GCtF0eD2ZitRt6jiC/kZU
Et3H6K9YPXMPPSfdyiwvFzb9De3icGT1CfKYCrDpg+TsxQnPFKAvEsqMxjsdImB4
QoL4zZ3+pKJdkQtqvvWJkpsvzg7d2aRDQf8+wQSaRQvz+uOOsqPE7UnqRYHIENGY
Y525PaMgsufkz6UNqv0LQLNAbTHi3jR31MSmmATmbynqrUcdWWxEfE7CuZWgYlB7
o+lhlvZP2ocjHlz/YzR4Sf1DC0L5lryWzw5yuZMDnbWZDSN2G4+uuAt+IqJTAQA4
rZCPo/JPIuAIUXR+2pKvbOy89x8JS8iBI+4cmPhXuv5pIqJ49J8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org