Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pun7uCIWwK43HBG5qXWCncQ5b70.roa
File: Pun7uCIWwK43HBG5qXWCncQ5b70.roa (raw, json)
Hash identifier: Lq33VakqsTIEFtPl9+RM8L8p9PT8CtdYGLqmY2iuL2w=
Subject key identifier: 3E:E9:FB:B8:22:16:C0:AE:37:1C:11:B9:A9:75:82:9D:C4:39:6F:BD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 185F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pun7uCIWwK43HBG5qXWCncQ5b70.roa
Signing time: Sun 07 Feb 2021 12:28:45 +0000
ROA not before: Sun 07 Feb 2021 12:28:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6239 (0x185f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:28:45 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3EE9FBB82216C0AE371C11B9A975829DC4396FBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:ff:2a:a7:7d:c0:bc:43:bf:a5:d9:f0:fa:
e7:d9:d1:01:f6:62:73:ea:1a:e0:03:74:f7:70:f1:
3c:1a:e0:c9:eb:cc:24:b5:15:f2:c2:21:5d:a4:6e:
5e:19:08:31:9b:bd:5c:48:f5:22:d9:86:29:92:ce:
35:25:32:d1:42:5d:93:2e:69:3d:6d:5b:fd:0b:3a:
76:1e:72:fe:60:b8:78:b7:d2:7f:a3:3e:a0:26:1d:
0e:e8:ab:13:92:dc:ff:0a:68:ab:dc:a7:82:42:65:
ba:60:bb:43:6f:64:4a:5a:a9:db:51:92:74:e0:e7:
39:88:25:e4:7e:da:cc:d5:56:71:c8:e9:50:e8:cc:
fe:9f:be:2d:cc:b4:a8:f2:1e:32:21:70:5b:f6:8c:
65:52:d5:06:8a:26:01:40:1a:2d:95:05:d0:a6:b2:
25:e4:da:c7:24:26:0c:06:8f:b0:e9:e6:d2:a1:25:
e2:c8:fb:c7:84:36:8d:78:95:45:04:1a:cd:db:d4:
41:bf:b0:11:89:89:dd:d3:0b:02:28:7b:92:d9:69:
93:5b:dd:dc:58:ef:cb:84:1b:f5:31:a5:e2:76:3e:
e2:e1:b5:3d:08:ef:05:1d:28:77:c5:2a:57:25:17:
5d:e9:f5:32:5c:84:04:db:0a:fc:6a:1b:e2:dc:58:
df:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E9:FB:B8:22:16:C0:AE:37:1C:11:B9:A9:75:82:9D:C4:39:6F:BD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pun7uCIWwK43HBG5qXWCncQ5b70.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.248.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:bf:5a:8f:e0:03:a5:5d:f3:da:d4:3c:7c:3f:93:f8:7c:49:
4e:06:7f:d7:da:e4:01:d7:9e:98:4b:15:4a:89:b1:4d:02:91:
1b:c2:8c:8e:39:10:52:b3:8e:df:b4:a6:eb:f4:2d:03:5e:1b:
da:0d:9a:3e:eb:40:34:13:4a:4c:8b:e4:af:a5:b2:b7:c7:ee:
fc:16:ab:ee:30:fe:fc:78:02:3f:81:cd:9e:a4:bd:3e:a3:82:
40:b1:d4:cc:37:bd:a0:4d:f4:2e:d9:28:67:25:51:d5:e2:d5:
f3:63:4a:5c:04:16:41:b1:d6:ef:76:3c:20:c3:39:d7:a0:a8:
df:d6:3f:d3:97:1e:4b:38:c7:76:5e:83:ce:b2:4e:23:46:bc:
c1:58:ff:55:2b:b7:ef:b2:74:4c:97:9c:dd:2b:ac:11:ee:85:
29:88:27:7e:2c:71:78:46:26:81:c5:10:88:3b:eb:49:06:f3:
ba:51:37:ec:5f:fe:29:b8:97:48:c8:72:b2:84:92:11:65:1f:
2c:51:10:a1:55:ad:71:ce:cb:fe:65:35:f9:ed:33:f1:0e:d7:
a7:1e:b9:a5:3c:3e:34:a3:f1:24:d0:2f:6a:ca:fc:8b:44:17:
67:f8:fa:ab:69:3e:22:b4:9f:35:f9:f3:c7:6e:5a:da:d1:e1:
ab:35:ef:81
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjI4NDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNFRTlGQkI4MjIxNkMw
QUUzNzFDMTFCOUE5NzU4MjlEQzQzOTZGQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXlf8qp33AvEO/pdnw+ufZ0QH2YnPqGuADdPdw8Twa4MnrzCS1
FfLCIV2kbl4ZCDGbvVxI9SLZhimSzjUlMtFCXZMuaT1tW/0LOnYecv5guHi30n+j
PqAmHQ7oqxOS3P8KaKvcp4JCZbpgu0NvZEpaqdtRknTg5zmIJeR+2szVVnHI6VDo
zP6fvi3MtKjyHjIhcFv2jGVS1QaKJgFAGi2VBdCmsiXk2sckJgwGj7Dp5tKhJeLI
+8eENo14lUUEGs3b1EG/sBGJid3TCwIoe5LZaZNb3dxY78uEG/UxpeJ2PuLhtT0I
7wUdKHfFKlclF13p9TJchATbCvxqG+LcWN/DAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPun7uCIWwK43HBG5qXWCncQ5b70wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1B1bjd1Q0lXd0s0M0hCRzVx
WFdDbmNRNWI3MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wPgwDQYJKoZIhvcNAQELBQADggEBAF2/Wo/gA6Vd89rUPHw/k/h8SU4Gf9fa5AHX
nphLFUqJsU0CkRvCjI45EFKzjt+0puv0LQNeG9oNmj7rQDQTSkyL5K+lsrfH7vwW
q+4w/vx4Aj+BzZ6kvT6jgkCx1Mw3vaBN9C7ZKGclUdXi1fNjSlwEFkGx1u92PCDD
OdegqN/WP9OXHks4x3Zeg86yTiNGvMFY/1Urt++ydEyXnN0rrBHuhSmIJ34scXhG
JoHFEIg760kG87pRN+xf/im4l0jIcrKEkhFlHyxREKFVrXHOy/5lNfntM/EO16ce
uaU8PjSj8STQL2rK/ItEF2f4+qtpPiK0nzX588duWtrR4as174E=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:42 2025 by rpki-client