Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LyISjYly_MXUvpnFeN2U-3PJoQQ.roa
File: LyISjYly_MXUvpnFeN2U-3PJoQQ.roa (raw, json)
Hash identifier: oEB3rp/Da3DTxaS1Lc7Fh6whkPWByF++TfGmNIuUfTc=
Subject key identifier: 2F:22:12:8D:89:72:FC:C5:D4:BE:99:C5:78:DD:94:FB:73:C9:A1:04
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LyISjYly_MXUvpnFeN2U-3PJoQQ.roa
Signing time: Thu 15 Sep 2022 02:52:20 +0000
ROA not before: Thu 15 Sep 2022 02:52:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2F22128D8972FCC5D4BE99C578DD94FB73C9A104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:39:93:8d:84:87:1b:24:2f:f2:bb:76:26:
a0:87:c2:86:d7:41:a7:a7:03:b7:8e:6a:ec:b9:c7:
cd:e2:aa:71:57:73:9f:a9:b7:a3:18:21:36:dc:54:
bd:b1:8a:4b:23:fb:7d:6c:3f:9e:90:f2:d0:f5:dc:
72:5f:cb:b6:fa:fb:1d:07:4f:6e:02:d3:21:e7:b7:
1d:5d:1f:81:db:11:49:ac:33:8f:a3:20:80:c0:ed:
e9:df:49:e5:b9:ca:8d:77:9e:cf:46:e2:f7:24:43:
bd:23:d2:2c:c8:0f:69:ff:2e:46:db:17:5d:2e:89:
2c:a7:a0:bb:1e:88:31:c6:77:57:4d:dd:37:af:1e:
6b:4e:fd:af:3d:34:4e:9b:69:5d:56:7d:fe:35:4d:
b3:cc:98:be:f7:04:cc:20:50:95:96:20:a9:e2:bd:
28:42:ba:2c:07:f4:99:38:7b:cb:93:36:29:ff:a2:
60:16:86:5b:6b:44:7d:35:7f:83:19:d7:29:79:3c:
29:61:fb:a7:82:f6:29:f9:b4:06:7c:3a:67:fc:c4:
21:f9:37:36:68:58:ef:18:93:6d:fe:1b:4c:b8:c0:
18:08:06:c7:ea:b2:b9:5f:e6:d2:fd:0d:85:06:4a:
b9:3c:b7:f2:86:c4:51:f6:4e:22:24:a3:01:b9:21:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:22:12:8D:89:72:FC:C5:D4:BE:99:C5:78:DD:94:FB:73:C9:A1:04
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LyISjYly_MXUvpnFeN2U-3PJoQQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:f4:f4:4b:a0:64:2c:8b:b3:f6:ce:62:4d:7b:cd:1d:49:00:
29:dd:e4:47:f7:bd:73:fb:9e:ff:ff:39:33:54:38:bd:09:28:
e9:7c:09:b7:22:f6:5a:54:f2:00:4d:4c:48:6f:99:6a:38:eb:
67:cf:a6:38:1c:01:39:7c:44:08:44:bd:5e:36:f2:66:6f:85:
16:38:84:e9:a8:ee:1d:38:ec:e6:a6:4b:84:82:be:34:b9:3b:
d6:23:21:c0:e5:28:c9:d6:dd:6f:6b:fd:27:4a:9d:27:c2:63:
5b:f8:33:02:f8:f6:ef:93:87:38:ca:cf:c8:20:88:b9:4d:0d:
ef:c6:32:66:ca:dd:5f:fb:14:d1:ef:83:c9:48:ef:96:94:f4:
2b:74:6a:4e:39:3c:34:e8:39:b4:ca:3c:d2:33:d7:5e:a0:bc:
02:a7:7e:6f:ce:71:c4:30:55:21:09:63:c2:f3:c0:9c:91:4e:
d5:3b:10:c2:ea:e3:b2:ba:ea:e0:c6:d1:06:de:9a:eb:0b:b4:
07:38:c2:e9:49:bf:0f:40:52:3d:09:ba:4b:9b:0a:6c:29:e6:
27:16:7d:03:08:d1:e0:4e:5b:3f:c2:7e:3a:09:7c:79:d9:71:
4e:6d:f8:81:02:5b:b1:c1:fc:dc:51:66:bc:08:60:fa:6f:1c:
9f:f1:10:da
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUyMjBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJGMjIxMjhEODk3MkZD
QzVENEJFOTlDNTc4REQ5NEZCNzNDOUExMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9eDmTjYSHGyQv8rt2JqCHwobXQaenA7eOauy5x83iqnFXc5+p
t6MYITbcVL2xiksj+31sP56Q8tD13HJfy7b6+x0HT24C0yHntx1dH4HbEUmsM4+j
IIDA7enfSeW5yo13ns9G4vckQ70j0izID2n/LkbbF10uiSynoLseiDHGd1dN3Tev
HmtO/a89NE6baV1Wff41TbPMmL73BMwgUJWWIKnivShCuiwH9Jk4e8uTNin/omAW
hltrRH01f4MZ1yl5PClh+6eC9in5tAZ8Omf8xCH5NzZoWO8Yk23+G0y4wBgIBsfq
srlf5tL9DYUGSrk8t/KGxFH2TiIkowG5ITGRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULyISjYly/MXUvpnFeN2U+3PJoQQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0x5SVNqWWx5X01YVXZwbkZl
TjJVLTNQSm9RUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wugwDQYJKoZIhvcNAQELBQADggEBAIr09EugZCyLs/bOYk17zR1JACnd5Ef3vXP7
nv//OTNUOL0JKOl8Cbci9lpU8gBNTEhvmWo462fPpjgcATl8RAhEvV428mZvhRY4
hOmo7h047OamS4SCvjS5O9YjIcDlKMnW3W9r/SdKnSfCY1v4MwL49u+ThzjKz8gg
iLlNDe/GMmbK3V/7FNHvg8lI75aU9Ct0ak45PDToObTKPNIz116gvAKnfm/OccQw
VSEJY8LzwJyRTtU7EMLq47K66uDG0QbemusLtAc4wulJvw9AUj0JukubCmwp5icW
fQMI0eBOWz/CfjoJfHnZcU5t+IECW7HB/NxRZrwIYPpvHJ/xENo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org