Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NvxDGn1Ujd9OttPbg3lRIkTBg6M.roa
File: NvxDGn1Ujd9OttPbg3lRIkTBg6M.roa (raw, json)
Hash identifier: g0LHr9UhHO0Dq07KxL66haMX1LEov68nLX8x3VaXqdk=
Subject key identifier: 36:FC:43:1A:7D:54:8D:DF:4E:B6:D3:DB:83:79:51:22:44:C1:83:A3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2115
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NvxDGn1Ujd9OttPbg3lRIkTBg6M.roa
Signing time: Fri 25 Nov 2022 04:39:29 +0000
ROA not before: Fri 25 Nov 2022 04:39:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8469 (0x2115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=36FC431A7D548DDF4EB6D3DB8379512244C183A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:a8:70:3f:57:a3:1f:64:c1:80:88:57:b1:
7a:c7:92:fd:18:a0:4a:30:71:d3:56:e8:ac:4d:88:
9a:ee:72:e9:d8:99:3f:df:70:77:0d:3f:dc:39:9d:
01:f9:df:66:2d:2c:34:23:92:0a:c2:38:12:78:c8:
f3:c7:bf:02:30:54:99:89:ff:00:fe:0a:d9:fe:ac:
36:bb:20:05:f9:b4:d9:44:7c:d9:72:27:e1:b7:c0:
c2:21:9a:70:95:b0:8c:be:ff:06:03:ae:82:ec:11:
0d:50:de:28:fd:63:f0:80:86:37:12:60:19:5a:d5:
bb:56:58:c7:bb:3e:16:87:2c:16:b1:b4:bf:e0:e3:
0e:57:2b:a5:5a:72:8e:3c:0a:eb:f5:fd:46:68:42:
73:8d:34:20:2e:24:d7:6e:00:60:53:cc:b2:09:68:
54:c0:1e:e7:58:d5:52:1e:d1:17:2e:6d:99:a1:8e:
c7:75:4e:60:1b:91:e2:c7:a9:04:96:08:cb:0d:85:
39:e7:fe:c9:b1:31:d3:ae:0c:20:bc:02:3c:0a:9c:
ca:48:03:54:72:22:65:70:9d:26:e3:2d:56:ff:64:
b6:43:76:38:43:4e:6c:c7:81:ce:4f:7f:e1:81:bf:
02:c9:ee:e9:a6:2c:54:06:4e:bf:cf:c3:e7:e3:57:
0f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FC:43:1A:7D:54:8D:DF:4E:B6:D3:DB:83:79:51:22:44:C1:83:A3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NvxDGn1Ujd9OttPbg3lRIkTBg6M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.160.0/22
Signature Algorithm: sha256WithRSAEncryption
15:39:6c:53:32:e7:13:48:29:8f:48:d5:34:fd:5d:16:3f:61:
5c:77:35:45:f9:3e:e8:42:7b:4a:0c:12:b9:5b:6e:76:5d:5a:
83:f1:b2:df:79:b6:fb:68:d3:67:20:b0:e0:7a:1d:e3:89:07:
69:2c:28:74:8c:43:a5:52:c1:89:34:30:cb:dd:48:aa:dc:a6:
30:46:94:56:53:6d:e1:3f:f1:dc:84:f9:dc:89:8c:4f:e7:db:
72:9f:59:35:a6:8d:62:e7:dc:c9:2d:02:e7:dd:00:ac:d5:39:
9c:a1:ab:a1:f9:8c:3f:8c:ad:21:19:03:6b:9d:f4:ac:79:68:
76:93:a6:95:b1:d8:a9:9f:5f:f4:d3:73:d8:10:2e:a3:21:6a:
e1:e6:3c:52:82:56:95:c3:d3:df:1a:f0:6c:48:9a:73:38:17:
5f:7d:4f:0a:6e:3d:94:b3:51:5f:b1:c9:cc:61:c8:61:d0:1d:
a6:25:35:ef:92:9d:20:1c:3f:e4:c9:1d:07:a3:9c:28:9a:cc:
9d:88:b7:cc:9d:e3:38:fc:3d:88:b8:f7:51:c0:27:84:59:22:
a3:c8:6e:45:56:5c:bc:5d:94:d2:f9:ad:1d:59:73:69:36:8c:
2e:18:87:4f:51:5c:4f:e8:23:74:20:35:c8:40:fa:fd:fc:3c:
f9:9a:e8:82
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIRUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MjlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDM2RkM0MzFBN0Q1NDhE
REY0RUI2RDNEQjgzNzk1MTIyNDRDMTgzQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDL5ahwP1ejH2TBgIhXsXrHkv0YoEowcdNW6KxNiJrucunYmT/f
cHcNP9w5nQH532YtLDQjkgrCOBJ4yPPHvwIwVJmJ/wD+Ctn+rDa7IAX5tNlEfNly
J+G3wMIhmnCVsIy+/wYDroLsEQ1Q3ij9Y/CAhjcSYBla1btWWMe7PhaHLBaxtL/g
4w5XK6Vaco48Cuv1/UZoQnONNCAuJNduAGBTzLIJaFTAHudY1VIe0RcubZmhjsd1
TmAbkeLHqQSWCMsNhTnn/smxMdOuDCC8AjwKnMpIA1RyImVwnSbjLVb/ZLZDdjhD
TmzHgc5Pf+GBvwLJ7ummLFQGTr/Pw+fjVw9/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUNvxDGn1Ujd9OttPbg3lRIkTBg6MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL052eERHbjFVamQ5T3R0UGJn
M2xSSWtUQmc2TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wqAwDQYJKoZIhvcNAQELBQADggEBABU5bFMy5xNIKY9I1TT9XRY/YVx3NUX5PuhC
e0oMErlbbnZdWoPxst95tvto02cgsOB6HeOJB2ksKHSMQ6VSwYk0MMvdSKrcpjBG
lFZTbeE/8dyE+dyJjE/n23KfWTWmjWLn3MktAufdAKzVOZyhq6H5jD+MrSEZA2ud
9Kx5aHaTppWx2KmfX/TTc9gQLqMhauHmPFKCVpXD098a8GxImnM4F199TwpuPZSz
UV+xycxhyGHQHaYlNe+SnSAcP+TJHQejnCiazJ2It8yd4zj8PYi491HAJ4RZIqPI
bkVWXLxdlNL5rR1Zc2k2jC4Yh09RXE/oI3QgNchA+v38PPma6II=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org