Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NDKB9lkKEMv-T58IzEGAWXWFM-w.roa
File: NDKB9lkKEMv-T58IzEGAWXWFM-w.roa (raw, json)
Hash identifier: bYZH+gU1orTK5QxQQL1lnmSSj0PhLodYznPwCLbNZpw=
Subject key identifier: 34:32:81:F6:59:0A:10:CB:FE:4F:9F:08:CC:41:80:59:75:85:33:EC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 289B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NDKB9lkKEMv-T58IzEGAWXWFM-w.roa
Signing time: Fri 01 Sep 2023 10:05:34 +0000
ROA not before: Fri 01 Sep 2023 10:05:34 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10395 (0x289b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:34 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=343281F6590A10CBFE4F9F08CC418059758533EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2c:f9:67:b0:52:e0:fa:28:7c:17:2d:73:e4:
1b:01:80:d3:0e:18:88:21:96:cb:57:8f:e3:0f:41:
1b:d3:8f:4a:f9:59:10:15:c5:f4:4b:1b:7e:36:cb:
ba:b7:f9:b7:b2:f1:a7:7d:15:b7:54:a4:7c:10:07:
7a:83:56:56:33:29:ce:ee:6f:1f:65:cc:e1:0b:b2:
98:39:25:8e:d7:fd:34:a9:0a:18:c3:30:1f:a5:60:
1d:3a:1b:85:16:45:27:f8:4e:10:90:fa:7f:f2:40:
b2:5d:57:4f:a0:f2:d4:a9:a5:50:f8:e0:a9:fb:ff:
0a:55:44:41:cd:83:4d:f7:3f:41:d7:2d:c1:3c:03:
19:43:22:15:ff:1e:d3:b0:97:2d:8c:01:b0:f9:c3:
a7:26:ee:b6:94:1c:f6:cb:bd:7f:f3:c9:ff:95:a7:
1e:b1:1a:8b:d1:9c:06:a5:e7:c7:2a:bb:a1:70:af:
52:a6:4e:9c:29:32:2a:4c:31:c3:5c:61:6b:0f:6a:
28:4f:57:1a:6f:34:ed:e4:e7:4c:a0:aa:b3:f1:83:
52:ed:0f:90:50:48:e8:4f:b1:8d:b3:98:4f:e0:07:
f0:b6:9b:e4:c9:c9:62:31:0c:1d:63:56:f0:3a:3a:
f3:9c:76:07:66:fb:8d:6b:be:3d:e4:e2:36:b5:a4:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:32:81:F6:59:0A:10:CB:FE:4F:9F:08:CC:41:80:59:75:85:33:EC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NDKB9lkKEMv-T58IzEGAWXWFM-w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.104.0/21
Signature Algorithm: sha256WithRSAEncryption
41:81:fb:89:d0:4b:14:20:02:9a:79:b0:45:39:d9:ff:0e:54:
5d:ef:3c:41:47:a8:0e:f1:ad:a8:0a:63:e0:c9:cc:d7:1b:ed:
55:f9:a8:e9:bb:41:76:d2:0a:a0:df:76:ab:e0:de:bc:21:8c:
e9:5f:a6:77:bd:8c:96:9e:9d:3a:1c:7e:8f:33:9c:e8:83:c7:
85:16:5a:12:65:44:5c:d6:cb:b1:b6:c3:d3:3b:2c:f3:3d:d5:
39:61:3f:8e:61:87:d3:79:57:c6:8c:9b:41:7a:0d:bc:f5:a8:
02:c5:7f:40:e4:02:75:a3:7c:d2:05:2c:95:2a:76:1f:7a:ad:
01:6a:52:27:72:cd:d7:74:a3:ed:49:fe:bf:36:1b:73:6a:fd:
b1:be:22:57:80:83:91:83:b0:9e:46:31:93:cd:54:49:22:86:
cc:e1:b2:47:cb:7b:7d:4f:6b:7c:1d:79:04:f8:c3:fe:bd:db:
c3:ea:b4:91:90:ab:9f:cd:fb:32:8f:6c:ba:ec:50:dc:bc:d8:
03:90:de:c7:be:36:81:3a:5d:10:49:0a:e7:9a:44:a8:84:d5:
1c:89:15:16:6e:99:5b:19:9f:78:d5:d9:0c:5e:bf:d3:ef:b4:
45:9f:d2:1a:85:cf:da:a3:74:c9:1b:2f:3e:1d:bb:ea:f8:6d:
81:17:5c:70
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKJswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM0MzI4MUY2NTkwQTEw
Q0JGRTRGOUYwOENDNDE4MDU5NzU4NTMzRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlLPlnsFLg+ih8Fy1z5BsBgNMOGIghlstXj+MPQRvTj0r5WRAV
xfRLG342y7q3+bey8ad9FbdUpHwQB3qDVlYzKc7ubx9lzOELspg5JY7X/TSpChjD
MB+lYB06G4UWRSf4ThCQ+n/yQLJdV0+g8tSppVD44Kn7/wpVREHNg033P0HXLcE8
AxlDIhX/HtOwly2MAbD5w6cm7raUHPbLvX/zyf+Vpx6xGovRnAal58cqu6Fwr1Km
TpwpMipMMcNcYWsPaihPVxpvNO3k50ygqrPxg1LtD5BQSOhPsY2zmE/gB/C2m+TJ
yWIxDB1jVvA6OvOcdgdm+41rvj3k4ja1pFcvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUNDKB9lkKEMv+T58IzEGAWXWFM+wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05ES0I5bGtLRU12LVQ1OEl6
RUdBV1hXRk0tdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wmgwDQYJKoZIhvcNAQELBQADggEBAEGB+4nQSxQgApp5sEU52f8OVF3vPEFHqA7x
ragKY+DJzNcb7VX5qOm7QXbSCqDfdqvg3rwhjOlfpne9jJaenTocfo8znOiDx4UW
WhJlRFzWy7G2w9M7LPM91TlhP45hh9N5V8aMm0F6Dbz1qALFf0DkAnWjfNIFLJUq
dh96rQFqUidyzdd0o+1J/r82G3Nq/bG+IleAg5GDsJ5GMZPNVEkihszhskfLe31P
a3wdeQT4w/6928PqtJGQq5/N+zKPbLrsUNy82AOQ3se+NoE6XRBJCueaRKiE1RyJ
FRZumVsZn3jV2Qxev9PvtEWf0hqFz9qjdMkbLz4du+r4bYEXXHA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:00 2025 by rpki-client