Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QdX7jRN6IdEvxVh3QVUgFuDdfzY.roa
File: QdX7jRN6IdEvxVh3QVUgFuDdfzY.roa (raw, json)
Hash identifier: kCLkm07Ih9+lawR41yEtzqlT7gS4+qT8lZLs0qlCex4=
Subject key identifier: 41:D5:FB:8D:13:7A:21:D1:2F:C5:58:77:41:55:20:16:E0:DD:7F:36
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QdX7jRN6IdEvxVh3QVUgFuDdfzY.roa
Signing time: Thu 15 Sep 2022 02:53:42 +0000
ROA not before: Thu 15 Sep 2022 02:53:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=41D5FB8D137A21D12FC5587741552016E0DD7F36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:b3:b9:a5:ca:8b:2b:bf:7f:aa:f8:32:3c:
3c:f6:ce:3c:51:7f:17:42:a1:2c:e6:d6:93:5e:f9:
d6:88:04:64:37:e8:1b:1b:1f:68:6b:f0:d5:7e:b0:
98:c0:8a:4f:4f:c1:28:33:1a:6e:89:bd:ea:cc:74:
cf:de:98:20:81:1b:c9:55:8d:e3:4e:b9:4b:f4:5c:
7e:86:ce:8e:8c:82:1a:9f:8a:c4:33:aa:49:fd:ec:
e9:98:ce:d8:d1:29:4e:3b:57:3f:9b:cf:28:45:bd:
67:94:b5:eb:68:7b:64:85:46:ac:ae:00:96:9b:58:
b5:c5:92:e8:3d:ac:71:7c:00:eb:52:26:a9:bc:b7:
4b:27:46:52:e3:28:b8:f5:b2:d0:f1:78:9c:e0:a7:
52:14:9f:81:10:93:38:1a:e2:29:c4:c8:74:78:12:
b4:7c:a7:80:ca:5c:02:78:d0:5f:06:5b:50:91:7d:
1c:6e:58:ed:0c:f1:7f:ea:8e:97:62:74:62:f9:89:
ca:da:b7:aa:98:0b:7c:d2:92:56:8a:82:59:aa:eb:
2b:e0:8d:da:6f:59:9c:3b:20:82:63:ab:9c:0c:9b:
9c:1f:9e:4e:cf:8c:e8:b3:60:51:de:dd:f6:be:8e:
6f:f9:bf:3c:4d:d8:4a:4f:d9:05:10:95:7b:e2:23:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D5:FB:8D:13:7A:21:D1:2F:C5:58:77:41:55:20:16:E0:DD:7F:36
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QdX7jRN6IdEvxVh3QVUgFuDdfzY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.247.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:27:f6:5e:c3:ab:3f:34:f5:14:f8:85:f9:64:9a:f0:e1:e8:
77:06:51:a3:6a:26:14:6c:0e:e0:69:6b:a7:ac:84:db:0a:c0:
1f:0f:49:1a:0c:3b:60:4b:6a:d8:f5:54:91:cf:4b:7c:c8:29:
83:f6:a0:48:96:91:47:8e:5e:11:63:12:42:c2:12:17:5e:64:
b3:91:b4:05:94:26:87:ac:01:96:85:6f:d3:aa:52:73:6b:b4:
f6:99:73:9c:74:fe:62:b9:af:78:13:02:2b:eb:46:e3:ae:d1:
85:46:0f:52:4d:c7:49:d3:a1:32:f3:51:ca:bb:bc:e8:2b:4b:
b9:3f:bd:ed:64:b6:83:3f:79:0d:a2:22:4e:0b:d3:56:5d:07:
fc:fa:8e:e9:6c:0c:8e:15:16:bf:b9:ea:96:e2:80:fb:d5:09:
39:18:6b:28:f9:8e:25:bc:27:bf:34:33:9a:b4:94:3a:f9:7b:
fe:94:7d:c7:a5:de:15:f0:a6:8d:e2:2d:80:bf:20:c5:bc:b0:
ee:14:ec:e2:67:86:11:5c:1f:a4:16:a8:5f:99:93:fd:9b:90:
36:93:40:cb:4a:15:10:67:68:e1:3a:43:6e:18:5f:48:c9:9e:
d2:a8:af:de:41:b5:27:41:96:8b:f0:be:1f:5a:17:c0:bb:db:
9f:99:4a:41
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzNDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQxRDVGQjhEMTM3QTIx
RDEyRkM1NTg3NzQxNTUyMDE2RTBERDdGMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0mbO5pcqLK79/qvgyPDz2zjxRfxdCoSzm1pNe+daIBGQ36Bsb
H2hr8NV+sJjAik9PwSgzGm6JverMdM/emCCBG8lVjeNOuUv0XH6Gzo6MghqfisQz
qkn97OmYztjRKU47Vz+bzyhFvWeUtetoe2SFRqyuAJabWLXFkug9rHF8AOtSJqm8
t0snRlLjKLj1stDxeJzgp1IUn4EQkzga4inEyHR4ErR8p4DKXAJ40F8GW1CRfRxu
WO0M8X/qjpdidGL5icrat6qYC3zSklaKglmq6yvgjdpvWZw7IIJjq5wMm5wfnk7P
jOizYFHe3fa+jm/5vzxN2EpP2QUQlXviIxphAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUQdX7jRN6IdEvxVh3QVUgFuDdfzYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FkWDdqUk42SWRFdnhWaDNR
VlVnRnVEZGZ6WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wfcwDQYJKoZIhvcNAQELBQADggEBALkn9l7Dqz809RT4hflkmvDh6HcGUaNqJhRs
DuBpa6eshNsKwB8PSRoMO2BLatj1VJHPS3zIKYP2oEiWkUeOXhFjEkLCEhdeZLOR
tAWUJoesAZaFb9OqUnNrtPaZc5x0/mK5r3gTAivrRuOu0YVGD1JNx0nToTLzUcq7
vOgrS7k/ve1ktoM/eQ2iIk4L01ZdB/z6julsDI4VFr+56pbigPvVCTkYayj5jiW8
J780M5q0lDr5e/6Ufcel3hXwpo3iLYC/IMW8sO4U7OJnhhFcH6QWqF+Zk/2bkDaT
QMtKFRBnaOE6Q24YX0jJntKor95BtSdBlovwvh9aF8C725+ZSkE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org