Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PWM3MnQjr_XGWnfep6Mz5vaLI1M.roa
File: PWM3MnQjr_XGWnfep6Mz5vaLI1M.roa (raw, json)
Hash identifier: dMVbeAeaAE4yerFU30ZhI4ZX/7PX848XNjaJL9piI4A=
Subject key identifier: 3D:63:37:32:74:23:AF:F5:C6:5A:77:DE:A7:A3:33:E6:F6:8B:23:53
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20E6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PWM3MnQjr_XGWnfep6Mz5vaLI1M.roa
Signing time: Fri 25 Nov 2022 04:39:15 +0000
ROA not before: Fri 25 Nov 2022 04:39:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8422 (0x20e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3D6337327423AFF5C65A77DEA7A333E6F68B2353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:5e:34:50:89:3c:f4:32:75:1f:b8:1d:09:
50:0c:96:11:d1:03:74:c2:60:c4:c0:3b:40:7c:ae:
6a:a2:b4:55:c0:ac:0f:f4:0d:be:c7:3a:fd:8f:e0:
af:c7:36:54:85:5f:f2:26:dc:c8:a2:c6:74:d3:69:
71:be:97:a1:d7:28:c7:48:33:b4:f6:92:ea:2e:b2:
c3:5e:1a:a7:9b:3a:f4:1c:09:40:e4:4b:15:41:d5:
a3:d6:ad:14:b9:1c:fc:8d:91:89:28:78:ef:f9:27:
72:fc:0a:01:00:3a:94:0e:89:f5:2a:64:99:42:72:
ee:fa:c6:11:43:2f:2f:73:d6:64:b0:47:b2:67:85:
9c:c8:8b:84:3a:2e:7f:d1:3e:31:4c:19:3a:99:2f:
f6:b9:93:da:72:0a:56:6c:f5:4a:17:90:1c:e5:aa:
bd:c9:83:81:ad:9a:72:64:90:e9:46:0c:e6:7f:0d:
12:88:99:f4:63:83:1e:23:ae:c4:f1:0f:d6:82:3c:
a5:2a:d8:57:da:7c:b2:4d:28:18:98:87:42:e2:d8:
70:43:90:8a:36:9c:3e:94:75:9d:cb:06:7c:f8:da:
be:9d:7f:97:be:a4:84:43:c8:95:f5:7a:37:a7:f2:
48:f8:79:61:90:91:ab:ed:42:bc:f7:12:0b:97:7c:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:63:37:32:74:23:AF:F5:C6:5A:77:DE:A7:A3:33:E6:F6:8B:23:53
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PWM3MnQjr_XGWnfep6Mz5vaLI1M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.112.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:0a:13:e0:53:19:ea:8c:e4:46:e3:3e:7a:a8:a6:da:03:e7:
52:6d:7f:92:3e:61:c9:3c:ed:21:13:ce:83:9b:82:c2:60:41:
bb:cb:0d:b4:98:73:b0:d7:3b:ca:42:1b:63:d0:2f:54:3e:6c:
d0:1c:91:ba:88:02:01:1b:d9:70:3b:bd:be:98:4a:88:a8:5a:
a0:26:b0:ae:47:2a:3e:5f:09:b2:92:88:07:c5:f8:4c:9c:48:
c2:2a:25:93:11:a0:b2:19:0b:a6:3e:84:72:29:6f:b9:7f:12:
03:7b:a1:42:6f:c3:77:5b:ea:76:f1:81:56:dc:dc:31:d8:6f:
ce:a7:13:56:6d:e8:02:80:08:07:13:cd:b8:95:88:25:b3:49:
0d:1e:18:8f:bb:5f:f1:8f:ff:63:52:b9:ca:0b:c3:10:3d:1b:
14:5e:00:6d:b1:0f:ca:a4:e7:32:9e:c6:79:8b:c6:76:ee:39:
8c:63:5e:62:2d:ca:a7:d4:af:c5:0a:b8:96:88:bb:0e:5d:3f:
18:6b:42:c6:d3:65:28:9b:3f:b9:c3:3c:e3:cb:f2:ab:bb:81:
13:84:bc:b4:f6:b1:cd:96:d9:69:78:c6:f7:af:37:75:32:2b:
a1:6e:6b:b3:f7:e8:bf:c1:9d:6d:d5:e4:96:5e:a9:01:54:9c:
89:2c:6e:64
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MTVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDNENjMzNzMyNzQyM0FG
RjVDNjVBNzdERUE3QTMzM0U2RjY4QjIzNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2aF40UIk89DJ1H7gdCVAMlhHRA3TCYMTAO0B8rmqitFXArA/0
Db7HOv2P4K/HNlSFX/Im3MiixnTTaXG+l6HXKMdIM7T2kuoussNeGqebOvQcCUDk
SxVB1aPWrRS5HPyNkYkoeO/5J3L8CgEAOpQOifUqZJlCcu76xhFDLy9z1mSwR7Jn
hZzIi4Q6Ln/RPjFMGTqZL/a5k9pyClZs9UoXkBzlqr3Jg4GtmnJkkOlGDOZ/DRKI
mfRjgx4jrsTxD9aCPKUq2FfafLJNKBiYh0Li2HBDkIo2nD6UdZ3LBnz42r6df5e+
pIRDyJX1ejen8kj4eWGQkavtQrz3EguXfDUTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPWM3MnQjr/XGWnfep6Mz5vaLI1MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BXTTNNblFqcl9YR1duZmVw
Nk16NXZhTEkxTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wHAwDQYJKoZIhvcNAQELBQADggEBACsKE+BTGeqM5EbjPnqoptoD51Jtf5I+Yck8
7SETzoObgsJgQbvLDbSYc7DXO8pCG2PQL1Q+bNAckbqIAgEb2XA7vb6YSoioWqAm
sK5HKj5fCbKSiAfF+EycSMIqJZMRoLIZC6Y+hHIpb7l/EgN7oUJvw3db6nbxgVbc
3DHYb86nE1Zt6AKACAcTzbiViCWzSQ0eGI+7X/GP/2NSucoLwxA9GxReAG2xD8qk
5zKexnmLxnbuOYxjXmItyqfUr8UKuJaIuw5dPxhrQsbTZSibP7nDPOPL8qu7gROE
vLT2sc2W2Wl4xvevN3UyK6Fua7P36L/BnW3V5JZeqQFUnIksbmQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org