Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M43YLQkYVbZvg4fC-WkokFs2Ggk.roa
File: M43YLQkYVbZvg4fC-WkokFs2Ggk.roa (raw, json)
Hash identifier: M27IFAtcFfW2r7eS/Uq4hANH6N+9BL6oQw33u+xjFEo=
Subject key identifier: 33:8D:D8:2D:09:18:55:B6:6F:83:87:C2:F9:69:28:90:5B:36:1A:09
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 13EF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M43YLQkYVbZvg4fC-WkokFs2Ggk.roa
Signing time: Sun 07 Feb 2021 11:56:42 +0000
ROA not before: Sun 07 Feb 2021 11:56:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5103 (0x13ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:56:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=338DD82D091855B66F8387C2F96928905B361A09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:94:83:1a:cf:8d:54:d6:4b:4e:36:86:92:
da:b2:52:df:6d:5a:e0:74:22:f6:39:20:ca:ea:83:
e1:b2:89:b5:f5:6c:a6:46:b8:ff:e1:53:dd:56:5f:
fd:5e:f7:e5:b5:fa:c5:46:cf:39:e6:85:d4:96:6b:
33:1a:4d:6a:45:fb:90:36:6e:21:50:4a:3a:1e:18:
22:0b:4b:14:95:08:be:70:36:87:81:84:d0:ac:35:
77:24:05:15:7c:28:97:22:93:b6:27:88:84:c5:e4:
0d:7d:68:7f:03:77:a7:a7:fc:2e:cd:f6:66:7e:72:
a8:c7:de:e4:77:da:32:04:73:98:55:98:8b:12:87:
dc:49:dd:53:80:fd:e7:ba:30:8f:3b:58:a2:79:ec:
b8:98:16:a3:1a:20:e9:fb:eb:09:2d:12:0c:85:cd:
cc:2a:64:ed:48:85:d1:fc:ae:4c:ec:ba:d1:55:d0:
f3:b1:4e:c0:bf:50:28:1c:5b:d9:97:36:ab:59:0f:
e5:a7:88:8d:d9:82:db:19:bf:9f:a7:58:b9:5f:64:
ac:43:f7:72:c4:26:be:7a:01:ae:09:f1:da:eb:1a:
4a:e1:63:a6:70:99:0b:d9:f5:7d:62:6b:66:67:7b:
f7:7e:55:a0:4d:34:2d:9a:65:e5:e9:6a:84:fb:c9:
03:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8D:D8:2D:09:18:55:B6:6F:83:87:C2:F9:69:28:90:5B:36:1A:09
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M43YLQkYVbZvg4fC-WkokFs2Ggk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.132.0/22
Signature Algorithm: sha256WithRSAEncryption
89:3a:e4:49:d8:9e:28:5d:07:d2:99:99:c5:04:25:ec:3a:b3:
ce:e4:50:25:80:7f:41:fb:71:88:91:9a:81:e0:dd:56:a7:15:
83:07:9c:ca:a4:16:e3:b8:1d:ae:bb:1e:5a:bc:6f:bb:2a:6b:
54:bf:5b:d8:8d:77:3f:0f:7f:66:cf:93:a9:90:23:10:79:57:
f5:bd:ee:7f:c0:a9:eb:d6:80:df:79:49:cc:3f:09:de:9d:a1:
13:6d:74:1d:7e:d3:4b:bb:7f:0d:19:25:be:ea:94:76:29:56:
f3:31:c0:7e:b3:a9:c2:cd:0b:a1:e3:5f:cf:47:06:68:77:16:
4e:08:8f:63:9c:ca:fc:de:59:05:8c:2e:cc:57:f1:83:54:e0:
a9:25:20:d0:94:05:a3:3c:c8:b5:f4:ee:9c:1c:d0:54:7d:68:
12:34:1b:7d:aa:2e:0d:e1:0f:56:1e:c5:9e:69:84:47:1a:65:
3c:3e:de:1e:f8:35:ce:3e:24:59:53:e2:a7:69:d1:26:f3:98:
a7:ef:e0:0d:74:96:cf:02:98:77:e7:bf:3a:65:ae:46:75:34:
cd:5f:0d:46:3d:71:11:24:5e:9d:c9:20:89:b8:fb:c6:13:c6:
11:ed:81:05:08:83:b4:40:f0:2f:83:4e:8d:96:16:7a:34:7f:
96:54:a6:f8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE+8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU2NDJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDMzOEREODJEMDkxODU1
QjY2RjgzODdDMkY5NjkyODkwNUIzNjFBMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJipSDGs+NVNZLTjaGktqyUt9tWuB0IvY5IMrqg+GyibX1bKZG
uP/hU91WX/1e9+W1+sVGzznmhdSWazMaTWpF+5A2biFQSjoeGCILSxSVCL5wNoeB
hNCsNXckBRV8KJcik7YniITF5A19aH8Dd6en/C7N9mZ+cqjH3uR32jIEc5hVmIsS
h9xJ3VOA/ee6MI87WKJ57LiYFqMaIOn76wktEgyFzcwqZO1IhdH8rkzsutFV0POx
TsC/UCgcW9mXNqtZD+WniI3ZgtsZv5+nWLlfZKxD93LEJr56Aa4J8drrGkrhY6Zw
mQvZ9X1ia2Zne/d+VaBNNC2aZeXpaoT7yQNVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUM43YLQkYVbZvg4fC+WkokFs2GgkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL000M1lMUWtZVmJadmc0ZkMt
V2tva0ZzMkdnay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wIQwDQYJKoZIhvcNAQELBQADggEBAIk65EnYnihdB9KZmcUEJew6s87kUCWAf0H7
cYiRmoHg3VanFYMHnMqkFuO4Ha67Hlq8b7sqa1S/W9iNdz8Pf2bPk6mQIxB5V/W9
7n/AqevWgN95Scw/Cd6doRNtdB1+00u7fw0ZJb7qlHYpVvMxwH6zqcLNC6HjX89H
Bmh3Fk4Ij2OcyvzeWQWMLsxX8YNU4KklINCUBaM8yLX07pwc0FR9aBI0G32qLg3h
D1YexZ5phEcaZTw+3h74Nc4+JFlT4qdp0SbzmKfv4A10ls8CmHfnvzplrkZ1NM1f
DUY9cREkXp3JIIm4+8YTxhHtgQUIg7RA8C+DTo2WFno0f5ZUpvg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org