Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MH8TtR1ivV6DMrroEDUPp9JMr9U.roa
File: MH8TtR1ivV6DMrroEDUPp9JMr9U.roa (raw, json)
Hash identifier: M9Ys0EerXplgXd6BbifpItWrPdRAtqAckAU/1mfAGOA=
Subject key identifier: 30:7F:13:B5:1D:62:BD:5E:83:32:BA:E8:10:35:0F:A7:D2:4C:AF:D5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MH8TtR1ivV6DMrroEDUPp9JMr9U.roa
Signing time: Thu 15 Sep 2022 02:44:47 +0000
ROA not before: Thu 15 Sep 2022 02:44:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=307F13B51D62BD5E8332BAE810350FA7D24CAFD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:b8:a8:ff:9b:48:9a:01:e3:31:c9:79:8f:
85:39:2a:4c:f2:ea:b6:10:b5:56:95:39:5e:c6:aa:
a5:7d:66:56:93:bd:e6:9d:b7:db:1f:b0:2a:42:77:
62:3c:5b:e4:c3:56:46:3b:f8:b8:04:db:aa:57:25:
43:bb:b6:0d:b1:bc:b5:85:62:3a:20:cf:8a:53:17:
0e:1d:20:3d:d4:fd:cd:08:d9:88:49:c8:9f:4b:04:
f7:26:3a:fd:e9:a3:0f:ce:9b:00:ff:e5:af:db:5d:
3d:6b:4f:f4:b3:c2:ff:e1:2b:2d:67:dd:9b:b4:54:
41:ca:e4:e9:b1:d0:7b:55:79:18:c9:4e:27:f1:d5:
b4:3c:2f:3a:15:99:02:45:1b:d1:38:41:3b:85:1c:
6a:d2:38:13:fc:f5:65:c2:f7:57:57:64:41:4c:8c:
be:30:ff:ea:f3:b1:09:3a:41:ed:08:c9:04:67:43:
8b:7b:65:b2:b8:8b:0f:63:1b:6e:86:95:4e:7b:0e:
80:fc:70:8b:c5:b2:60:8c:0d:29:e0:0f:6c:22:71:
e0:68:27:d8:6d:23:11:da:fb:f1:20:84:39:30:eb:
89:0c:bd:27:72:88:af:99:e5:5f:f3:50:2c:c0:d7:
1d:3e:71:11:b2:c9:0a:54:a1:98:8f:67:35:5e:9d:
c8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7F:13:B5:1D:62:BD:5E:83:32:BA:E8:10:35:0F:A7:D2:4C:AF:D5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MH8TtR1ivV6DMrroEDUPp9JMr9U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.40.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:86:74:e3:1b:62:ef:4d:64:da:99:bd:c1:cd:a4:2f:58:cf:
93:42:6d:72:9a:34:fb:48:21:25:ae:a6:7c:3f:31:56:b7:b4:
63:6a:3a:e4:7b:fd:b9:7d:0c:5f:97:99:69:e2:32:3e:f8:f9:
59:87:37:2a:a6:5a:dd:9c:7f:99:04:0d:04:3d:d2:06:1c:23:
89:8a:7b:7e:59:66:41:b2:97:03:a9:28:4c:e1:d6:68:9a:a3:
23:15:99:68:1d:8b:c5:3a:5f:e6:80:94:ca:18:2e:4c:b3:1a:
49:ca:4c:36:53:11:2f:89:70:4e:74:f1:47:32:ff:ad:88:5e:
b7:e8:b8:37:2d:54:e6:e6:65:2d:39:01:24:c6:21:59:9b:41:
9d:86:e9:c1:7d:52:1e:25:c4:c3:c1:8b:99:a2:ce:bc:d4:e4:
73:d7:79:e4:1d:84:13:0e:f9:94:54:fd:99:2c:b3:6e:4c:cb:
51:08:56:da:ca:30:38:f3:98:d2:3e:ae:75:7e:85:bc:20:85:
15:51:fa:22:22:c9:ef:90:86:0c:28:99:08:5a:64:7f:5c:ff:
32:22:1c:35:99:1f:69:69:95:a0:aa:e9:c5:d0:10:9c:61:52:
9e:0b:d0:16:fb:6b:79:c3:f4:a7:9e:31:36:7e:18:51:84:bd:
c7:cb:ad:e2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ0NDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDMwN0YxM0I1MUQ2MkJE
NUU4MzMyQkFFODEwMzUwRkE3RDI0Q0FGRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9Crio/5tImgHjMcl5j4U5Kkzy6rYQtVaVOV7GqqV9ZlaTvead
t9sfsCpCd2I8W+TDVkY7+LgE26pXJUO7tg2xvLWFYjogz4pTFw4dID3U/c0I2YhJ
yJ9LBPcmOv3pow/OmwD/5a/bXT1rT/Szwv/hKy1n3Zu0VEHK5Omx0HtVeRjJTifx
1bQ8LzoVmQJFG9E4QTuFHGrSOBP89WXC91dXZEFMjL4w/+rzsQk6Qe0IyQRnQ4t7
ZbK4iw9jG26GlU57DoD8cIvFsmCMDSngD2wiceBoJ9htIxHa+/EghDkw64kMvSdy
iK+Z5V/zUCzA1x0+cRGyyQpUoZiPZzVencjvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUMH8TtR1ivV6DMrroEDUPp9JMr9UwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL01IOFR0UjFpdlY2RE1ycm9F
RFVQcDlKTXI5VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wSgwDQYJKoZIhvcNAQELBQADggEBAJuGdOMbYu9NZNqZvcHNpC9Yz5NCbXKaNPtI
ISWupnw/MVa3tGNqOuR7/bl9DF+XmWniMj74+VmHNyqmWt2cf5kEDQQ90gYcI4mK
e35ZZkGylwOpKEzh1miaoyMVmWgdi8U6X+aAlMoYLkyzGknKTDZTES+JcE508Ucy
/62IXrfouDctVObmZS05ASTGIVmbQZ2G6cF9Uh4lxMPBi5mizrzU5HPXeeQdhBMO
+ZRU/Zkss25My1EIVtrKMDjzmNI+rnV+hbwghRVR+iIiye+QhgwomQhaZH9c/zIi
HDWZH2lplaCq6cXQEJxhUp4L0Bb7a3nD9KeeMTZ+GFGEvcfLreI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org