Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O3bos46S11aSw25sta2WdsQwWEU.roa
File: O3bos46S11aSw25sta2WdsQwWEU.roa (raw, json)
Hash identifier: jG0r7PG5iPjM7+yhkDqqMoc65dndv2vadOYri0bMol8=
Subject key identifier: 3B:76:E8:B3:8E:92:D7:56:92:C3:6E:6C:B5:AD:96:76:C4:30:58:45
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2024
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O3bos46S11aSw25sta2WdsQwWEU.roa
Signing time: Fri 25 Nov 2022 04:38:22 +0000
ROA not before: Fri 25 Nov 2022 04:38:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8228 (0x2024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3B76E8B38E92D75692C36E6CB5AD9676C4305845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:b6:a0:af:b1:33:d7:c5:4e:32:ed:f7:6d:
52:10:5e:6d:be:c7:55:2b:d7:05:ab:ef:6f:91:a9:
6a:89:3a:a8:24:15:a5:9a:0c:d7:02:00:df:08:9e:
95:dc:c3:55:fd:24:5e:a6:01:a2:50:27:60:4f:55:
fb:7f:8a:a0:af:0d:03:7c:7f:b3:61:d1:ae:ba:73:
80:25:45:08:6a:d5:31:bb:55:c7:ab:55:73:25:c6:
f3:53:47:81:5e:2d:90:da:d1:49:03:9e:10:85:85:
20:ea:33:04:13:08:14:ac:27:3e:c3:d1:6e:7d:78:
18:2b:f8:f0:25:8d:5c:e9:ae:b8:9c:d2:fb:25:af:
49:a3:27:6f:93:5c:21:3c:8a:dd:21:8f:0e:a7:7a:
14:1c:b6:ff:72:d1:54:a6:33:22:8a:69:ac:23:ec:
f2:d1:07:ec:5e:d3:ae:6f:c9:a0:08:d2:23:22:04:
b5:7e:1d:3f:d5:15:7b:bb:eb:a0:c3:da:e0:3d:4f:
21:2b:7a:6f:31:54:cb:a5:85:da:47:db:27:12:1b:
3a:8d:16:1c:7e:bf:1c:d5:b2:37:68:99:94:69:1e:
0c:79:35:0e:48:b7:92:f0:2f:ee:17:27:b7:41:41:
23:78:e6:c6:c0:81:91:dd:e1:3a:58:20:29:78:48:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:76:E8:B3:8E:92:D7:56:92:C3:6E:6C:B5:AD:96:76:C4:30:58:45
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O3bos46S11aSw25sta2WdsQwWEU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.240.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:dc:70:56:f7:de:84:1d:15:fa:ee:5e:6d:5c:b5:13:e0:90:
c1:76:c8:52:a4:95:82:42:1f:68:d0:07:c3:eb:2c:3d:fe:03:
54:df:93:eb:c4:da:f1:59:92:6f:10:8e:38:40:29:69:be:ba:
aa:65:fa:91:b7:26:d8:be:94:f7:42:1c:9a:01:54:ad:b8:85:
1f:f5:ed:09:4c:ba:01:b2:de:3f:d8:d3:70:f9:d0:27:0e:fb:
5c:6e:22:66:ba:86:4e:cd:9a:f4:0b:04:45:d9:ea:33:ac:1a:
8b:67:ad:d8:e5:18:a9:42:23:dd:6f:be:09:ca:d8:d9:35:50:
d0:13:01:36:a0:8a:60:a1:d9:4e:d8:85:fd:ae:c2:bc:26:90:
3a:c1:f0:cc:77:ab:71:a9:d4:3c:42:21:79:2d:ed:6c:9d:9c:
c6:eb:41:52:02:c6:8f:24:af:7c:29:16:15:b7:f6:2d:cf:c7:
d2:3f:ce:15:fe:05:e7:ff:81:2c:07:6a:54:1c:c4:cd:4e:ae:
96:07:12:25:07:87:0f:f4:92:2e:b2:c0:af:90:b0:31:1a:dc:
87:c5:4a:b7:8c:f8:72:e5:b0:b0:ab:fe:ed:24:af:82:e1:74:
3b:e9:0d:62:ac:1e:28:65:a0:5f:3b:0e:a8:5f:ed:7e:8d:f1:
c4:4d:52:6e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICICQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4MjJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDNCNzZFOEIzOEU5MkQ3
NTY5MkMzNkU2Q0I1QUQ5Njc2QzQzMDU4NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK/7agr7Ez18VOMu33bVIQXm2+x1Ur1wWr72+RqWqJOqgkFaWa
DNcCAN8InpXcw1X9JF6mAaJQJ2BPVft/iqCvDQN8f7Nh0a66c4AlRQhq1TG7Vcer
VXMlxvNTR4FeLZDa0UkDnhCFhSDqMwQTCBSsJz7D0W59eBgr+PAljVzprric0vsl
r0mjJ2+TXCE8it0hjw6nehQctv9y0VSmMyKKaawj7PLRB+xe065vyaAI0iMiBLV+
HT/VFXu766DD2uA9TyErem8xVMulhdpH2ycSGzqNFhx+vxzVsjdomZRpHgx5NQ5I
t5LwL+4XJ7dBQSN45sbAgZHd4TpYICl4SHnhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUO3bos46S11aSw25sta2WdsQwWEUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL08zYm9zNDZTMTFhU3cyNXN0
YTJXZHNRd1dFVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wfAwDQYJKoZIhvcNAQELBQADggEBAA7ccFb33oQdFfruXm1ctRPgkMF2yFKklYJC
H2jQB8PrLD3+A1Tfk+vE2vFZkm8QjjhAKWm+uqpl+pG3Jti+lPdCHJoBVK24hR/1
7QlMugGy3j/Y03D50CcO+1xuIma6hk7NmvQLBEXZ6jOsGotnrdjlGKlCI91vvgnK
2Nk1UNATATagimCh2U7Yhf2uwrwmkDrB8Mx3q3Gp1DxCIXkt7WydnMbrQVICxo8k
r3wpFhW39i3Px9I/zhX+Bef/gSwHalQcxM1OrpYHEiUHhw/0ki6ywK+QsDEa3IfF
SreM+HLlsLCr/u0kr4LhdDvpDWKsHihloF87Dqhf7X6N8cRNUm4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:30 2025 by rpki-client