Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N1U7dUFzJ4c66u9PGyY_zEN7J-U.roa
File: N1U7dUFzJ4c66u9PGyY_zEN7J-U.roa (raw, json)
Hash identifier: dCPr3UxW1H8WAcFCpvKj9Xh/qwMx3ncN4Uyv7iuZ1Rg=
Subject key identifier: 37:55:3B:75:41:73:27:87:3A:EA:EF:4F:1B:26:3F:CC:43:7B:27:E5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N1U7dUFzJ4c66u9PGyY_zEN7J-U.roa
Signing time: Thu 15 Sep 2022 02:54:04 +0000
ROA not before: Thu 15 Sep 2022 02:54:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:54:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=37553B75417327873AEAEF4F1B263FCC437B27E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:cc:90:00:5b:b3:51:1d:4f:8f:60:7b:cc:
08:a7:d1:50:f4:d5:86:ee:7e:0b:ae:fa:c6:52:55:
3a:3b:c9:a8:f2:7e:47:9b:9e:0b:cd:ab:ad:3b:73:
ed:75:22:3c:0d:2b:74:1e:db:b5:c9:74:46:3d:68:
d3:11:38:8a:97:07:b3:87:bb:3a:ff:ca:41:81:04:
42:5c:c6:cc:93:e1:2f:49:a5:46:d9:b8:2c:d1:cd:
41:ca:e2:d1:52:a7:b3:84:33:42:38:da:ac:2b:73:
4f:3a:53:6b:95:0c:4b:d0:0b:04:99:12:4f:72:19:
be:68:71:92:c5:12:08:b7:00:7a:4b:c0:8e:64:02:
b9:ab:49:52:4a:5e:5a:b8:8f:e0:7b:9f:fe:e1:87:
fe:f9:7e:a6:57:57:73:cf:13:45:13:46:41:cb:d6:
f6:8a:f6:99:c8:63:c5:e3:7a:a1:4d:0e:46:74:26:
de:14:3b:78:e3:4d:0e:3e:01:f0:5c:8c:05:46:3f:
31:06:bb:11:fc:49:a6:b8:3d:62:d8:a7:c9:7a:fe:
06:10:30:1d:98:f8:73:bf:ba:43:56:8f:09:e8:a9:
31:14:8d:0f:7b:f8:09:a2:9b:38:32:3d:e4:3f:dd:
5c:92:e1:83:2c:fb:f3:82:3a:de:33:44:91:c9:c1:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:55:3B:75:41:73:27:87:3A:EA:EF:4F:1B:26:3F:CC:43:7B:27:E5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N1U7dUFzJ4c66u9PGyY_zEN7J-U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.244.0/22
Signature Algorithm: sha256WithRSAEncryption
34:87:58:05:9f:ca:1e:9e:5a:d0:a7:6b:18:14:2d:15:3d:84:
7a:a8:04:76:87:45:4e:54:f1:f3:1b:87:e2:ef:2c:2b:47:ce:
71:93:68:6e:93:ad:ad:cb:5e:ed:a6:60:8c:0f:29:83:2d:6e:
bd:e4:96:17:10:3a:b6:78:6f:29:22:90:b4:af:05:34:5e:48:
1a:31:ed:62:23:cd:b0:d5:3b:d5:f2:35:3a:57:41:cc:de:48:
c0:87:32:9f:8e:f2:04:c1:b0:f2:64:f5:da:22:c3:f2:04:b5:
8b:b9:09:68:28:ca:11:02:d1:bc:69:72:b7:97:9c:44:b7:73:
15:6f:d7:80:bf:7b:0f:12:63:2d:b3:c1:1f:d1:43:c1:88:90:
03:a7:b9:fd:1c:85:df:f0:ce:d7:d3:5d:d1:66:f7:f9:78:9c:
e7:17:dc:38:73:b3:19:c9:af:e2:bd:82:5a:26:17:f0:c4:04:
e5:0a:37:a1:d5:62:e4:45:bf:c7:e2:ad:f7:a0:b6:d5:29:1f:
e7:50:c8:ae:00:9d:1e:94:7c:f6:b2:69:83:dc:7a:d3:76:4d:
44:8c:25:5a:d1:93:ed:00:06:5f:e0:90:5a:12:43:fc:ed:81:
6a:2b:a8:17:b6:b1:90:0a:32:36:dc:49:9c:d9:4e:8d:3c:7c:
29:27:a2:1b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjU0MDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDM3NTUzQjc1NDE3MzI3
ODczQUVBRUY0RjFCMjYzRkNDNDM3QjI3RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1r8yQAFuzUR1Pj2B7zAin0VD01Ybufguu+sZSVTo7yajyfkeb
ngvNq607c+11IjwNK3Qe27XJdEY9aNMROIqXB7OHuzr/ykGBBEJcxsyT4S9JpUbZ
uCzRzUHK4tFSp7OEM0I42qwrc086U2uVDEvQCwSZEk9yGb5ocZLFEgi3AHpLwI5k
ArmrSVJKXlq4j+B7n/7hh/75fqZXV3PPE0UTRkHL1vaK9pnIY8XjeqFNDkZ0Jt4U
O3jjTQ4+AfBcjAVGPzEGuxH8Saa4PWLYp8l6/gYQMB2Y+HO/ukNWjwnoqTEUjQ97
+AmimzgyPeQ/3VyS4YMs+/OCOt4zRJHJwe/bAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUN1U7dUFzJ4c66u9PGyY/zEN7J+UwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL04xVTdkVUZ6SjRjNjZ1OVBH
eVlfekVON0otVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
w/QwDQYJKoZIhvcNAQELBQADggEBADSHWAWfyh6eWtCnaxgULRU9hHqoBHaHRU5U
8fMbh+LvLCtHznGTaG6Tra3LXu2mYIwPKYMtbr3klhcQOrZ4bykikLSvBTReSBox
7WIjzbDVO9XyNTpXQczeSMCHMp+O8gTBsPJk9doiw/IEtYu5CWgoyhEC0bxpcreX
nES3cxVv14C/ew8SYy2zwR/RQ8GIkAOnuf0chd/wztfTXdFm9/l4nOcX3DhzsxnJ
r+K9glomF/DEBOUKN6HVYuRFv8firfegttUpH+dQyK4AnR6UfPayaYPcetN2TUSM
JVrRk+0ABl/gkFoSQ/ztgWorqBe2sZAKMjbcSZzZTo08fCknohs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org