Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OFZGi6ZeYf-86JHXq4byLz8uYmw.roa
File: OFZGi6ZeYf-86JHXq4byLz8uYmw.roa (raw, json)
Hash identifier: Ephhgdah8NtsJNXP5sjR+8VZyOZKKYpcvo3W9hrKXNw=
Subject key identifier: 38:56:46:8B:A6:5E:61:FF:BC:E8:91:D7:AB:86:F2:2F:3F:2E:62:6C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OFZGi6ZeYf-86JHXq4byLz8uYmw.roa
Signing time: Thu 15 Sep 2022 02:46:17 +0000
ROA not before: Thu 15 Sep 2022 02:46:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3856468BA65E61FFBCE891D7AB86F22F3F2E626C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:91:45:fb:04:42:88:6a:ec:b3:e1:fd:9d:
5a:8e:0c:83:19:dc:19:c7:86:aa:20:62:f6:a3:5d:
d1:db:06:af:75:3b:97:fb:c1:7b:8f:68:92:67:8d:
8f:b2:8d:1e:f6:77:e6:64:e3:aa:a3:b1:b4:b9:0f:
44:3c:a5:3b:53:c9:1a:63:48:e0:53:fd:97:c8:5b:
93:21:de:0e:44:c3:32:33:66:60:5e:6f:98:ba:62:
4d:6e:33:97:2c:35:6a:7d:56:f9:38:eb:78:4e:f1:
23:38:fc:18:86:bc:40:19:40:36:20:78:0f:f6:16:
d5:a6:af:54:34:c0:5a:d3:38:3f:71:f8:5a:17:8f:
38:50:cc:7c:25:10:ec:97:66:c8:8a:8e:c0:ac:fb:
41:e0:72:63:4d:08:85:0a:51:0c:ab:ad:6d:76:51:
af:c3:e2:b8:0c:ac:d5:ac:39:4d:52:43:2c:24:42:
a2:b0:f9:a0:60:cf:c8:f7:4a:73:f5:67:1c:a1:b1:
02:42:c7:78:17:52:b6:a3:1a:da:e4:c0:bc:f0:ff:
85:ba:0e:c0:fb:a7:3f:01:9f:f9:33:97:19:8e:78:
f9:1e:93:62:23:e5:e4:99:d4:08:1a:d4:30:53:33:
e2:6a:0c:bb:dd:01:17:af:fb:37:d9:00:df:ca:3a:
46:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:56:46:8B:A6:5E:61:FF:BC:E8:91:D7:AB:86:F2:2F:3F:2E:62:6C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OFZGi6ZeYf-86JHXq4byLz8uYmw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.106.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ef:5a:2d:aa:c3:b8:5d:0b:eb:f4:f7:68:b6:69:b3:13:38:
a6:88:9f:45:75:67:5f:df:20:6f:a3:d2:54:ac:78:be:3f:74:
56:a6:02:73:e5:79:59:7e:8e:28:a4:e6:ca:4f:eb:ab:19:3c:
d6:92:56:8e:80:c1:23:fc:da:01:d2:f1:8f:7b:07:02:25:27:
2d:ad:45:29:27:8b:78:4d:22:c9:5f:fc:f7:ce:4e:2c:8a:43:
bd:b9:83:b9:9d:e4:43:06:df:cd:0a:17:fe:4d:9b:58:c6:dd:
7c:36:90:a2:39:48:97:15:a1:5b:fa:0b:ff:e1:f5:92:34:7e:
8f:2c:0c:96:4d:1f:2f:96:b8:f8:0d:13:7c:60:41:77:56:6f:
1d:cd:5d:83:38:54:1d:b0:af:33:b0:52:e2:77:19:89:16:04:
aa:6e:af:24:9a:80:92:8d:29:d7:2b:17:9b:ad:d0:1d:a2:6e:
c1:4d:13:1c:e3:ee:9b:1b:eb:af:4a:0c:dc:b5:a5:e0:27:03:
a4:8f:74:03:35:92:72:2e:cd:03:3b:60:98:b1:f9:95:03:89:
5d:64:9a:bf:8f:56:6e:b0:8a:78:a9:0c:1d:c2:03:08:3d:1d:
71:51:59:46:ef:2e:f0:31:1f:89:fc:3f:49:f3:b2:90:96:fc:
16:67:49:b0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ2MTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDM4NTY0NjhCQTY1RTYx
RkZCQ0U4OTFEN0FCODZGMjJGM0YyRTYyNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCs4JFF+wRCiGrss+H9nVqODIMZ3BnHhqogYvajXdHbBq91O5f7
wXuPaJJnjY+yjR72d+Zk46qjsbS5D0Q8pTtTyRpjSOBT/ZfIW5Mh3g5EwzIzZmBe
b5i6Yk1uM5csNWp9Vvk463hO8SM4/BiGvEAZQDYgeA/2FtWmr1Q0wFrTOD9x+FoX
jzhQzHwlEOyXZsiKjsCs+0HgcmNNCIUKUQyrrW12Ua/D4rgMrNWsOU1SQywkQqKw
+aBgz8j3SnP1ZxyhsQJCx3gXUrajGtrkwLzw/4W6DsD7pz8Bn/kzlxmOePkek2Ij
5eSZ1Aga1DBTM+JqDLvdARev+zfZAN/KOkaxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUOFZGi6ZeYf+86JHXq4byLz8uYmwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09GWkdpNlplWWYtODZKSFhx
NGJ5THo4dVltdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wWowDQYJKoZIhvcNAQELBQADggEBAHrvWi2qw7hdC+v092i2abMTOKaIn0V1Z1/f
IG+j0lSseL4/dFamAnPleVl+jiik5spP66sZPNaSVo6AwSP82gHS8Y97BwIlJy2t
RSkni3hNIslf/PfOTiyKQ725g7md5EMG380KF/5Nm1jG3Xw2kKI5SJcVoVv6C//h
9ZI0fo8sDJZNHy+WuPgNE3xgQXdWbx3NXYM4VB2wrzOwUuJ3GYkWBKpurySagJKN
KdcrF5ut0B2ibsFNExzj7psb669KDNy1peAnA6SPdAM1knIuzQM7YJix+ZUDiV1k
mr+PVm6winipDB3CAwg9HXFRWUbvLvAxH4n8P0nzspCW/BZnSbA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org