Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U463lzA7X3UllyJtxXh6NQ9DjSc.roa
File: U463lzA7X3UllyJtxXh6NQ9DjSc.roa (raw, json)
Hash identifier: gkFBvTxRiVAwYt+Ljg7fm8qlXK4qvY8a51LvXlqitmM=
Subject key identifier: 53:8E:B7:97:30:3B:5F:75:25:97:22:6D:C5:78:7A:35:0F:43:8D:27
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BAB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U463lzA7X3UllyJtxXh6NQ9DjSc.roa
Signing time: Wed 29 Sep 2021 02:46:52 +0000
ROA not before: Wed 29 Sep 2021 02:46:52 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.238.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7083 (0x1bab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:52 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=538EB797303B5F752597226DC5787A350F438D27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:50:7a:84:0c:4f:e5:7c:5a:cb:eb:4f:ea:
21:39:92:cf:17:94:c3:1b:0c:92:33:e1:9d:01:a6:
d7:04:7b:5e:16:3c:90:62:43:e4:03:6d:d0:21:5c:
f5:53:4e:71:86:27:a4:f7:dc:5a:16:5f:85:73:26:
0d:90:20:5a:8f:64:27:dd:20:fd:cb:e5:12:cf:9a:
de:c6:bb:40:50:11:d6:99:58:03:6e:48:ae:75:6b:
07:d9:c7:29:ec:4d:3d:b1:15:aa:51:dd:6c:bd:da:
51:b5:95:37:fd:56:b8:e5:57:87:5f:47:02:ac:26:
75:50:3e:bd:eb:63:61:52:d0:ff:8d:1f:c0:76:65:
b6:b8:58:39:06:e3:9c:a7:31:c1:c7:6e:62:10:0d:
f5:fb:fb:d2:ef:5a:31:eb:91:bf:24:dc:fd:04:c4:
4e:7f:b1:f0:a2:13:88:fc:0e:3a:3d:09:83:83:46:
c2:df:81:e6:53:12:b5:22:ee:c8:ed:d5:01:b8:98:
f4:fb:43:ee:1f:eb:cf:b6:bd:e3:b7:af:ec:69:1a:
7c:ad:c6:0e:29:78:83:f5:e6:fd:b8:b1:80:8d:0d:
8e:6b:6e:6f:2e:74:58:ba:6c:91:4b:f9:ad:2a:10:
71:ca:a5:2f:05:1f:73:21:68:f2:ef:61:97:70:0d:
24:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8E:B7:97:30:3B:5F:75:25:97:22:6D:C5:78:7A:35:0F:43:8D:27
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U463lzA7X3UllyJtxXh6NQ9DjSc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.238.0/25
Signature Algorithm: sha256WithRSAEncryption
92:37:60:2e:1e:d5:26:6e:d4:4b:55:67:96:c0:2d:8e:f7:ee:
77:81:d3:b0:ee:70:bd:b1:8e:cc:8b:83:04:45:ec:cf:50:68:
fe:52:01:e3:80:dd:25:cc:bc:4e:f2:9e:da:c9:46:8b:0f:33:
94:9c:a4:ee:7a:c8:27:04:b3:d4:0a:ea:00:e9:08:29:0d:7f:
94:ca:8f:77:ad:a5:04:44:87:0e:a9:7d:f3:87:ed:6a:4d:e4:
b6:40:1c:e1:c1:0b:bd:ca:48:4d:95:3d:1a:b7:ed:ed:76:f7:
a8:36:dc:0f:ca:fb:e4:1f:d8:de:ef:ca:23:91:e1:e5:7c:0d:
7b:75:f2:65:41:22:13:87:06:4c:34:27:0b:8d:9a:32:a6:8a:
7e:a4:e5:06:a8:53:ae:a8:64:11:72:b5:f6:64:a0:21:eb:04:
5d:05:45:0f:fc:ee:83:df:1a:43:b6:c2:db:ea:94:fc:61:86:
28:6b:86:e2:62:11:0b:a9:9e:bc:34:ff:c9:a7:e7:db:05:bd:
b5:cf:5c:44:44:cd:97:93:ef:58:3d:68:2f:c4:4d:54:fa:d7:
48:81:c3:80:fc:7d:7d:62:76:1f:69:2b:d9:bb:3e:31:70:4e:
a5:46:ee:72:b5:28:1d:7b:76:f9:88:3f:fa:02:4b:83:03:16:
b7:05:b7:22
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICG6swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2NTJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDUzOEVCNzk3MzAzQjVG
NzUyNTk3MjI2REM1Nzg3QTM1MEY0MzhEMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEIFB6hAxP5Xxay+tP6iE5ks8XlMMbDJIz4Z0BptcEe14WPJBi
Q+QDbdAhXPVTTnGGJ6T33FoWX4VzJg2QIFqPZCfdIP3L5RLPmt7Gu0BQEdaZWANu
SK51awfZxynsTT2xFapR3Wy92lG1lTf9VrjlV4dfRwKsJnVQPr3rY2FS0P+NH8B2
Zba4WDkG45ynMcHHbmIQDfX7+9LvWjHrkb8k3P0ExE5/sfCiE4j8Djo9CYODRsLf
geZTErUi7sjt1QG4mPT7Q+4f68+2veO3r+xpGnytxg4peIP15v24sYCNDY5rbm8u
dFi6bJFL+a0qEHHKpS8FH3MhaPLvYZdwDSSBAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUU463lzA7X3UllyJtxXh6NQ9DjScwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1U0NjNsekE3WDNVbGx5SnR4
WGg2TlE5RGpTYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7
w+4AMA0GCSqGSIb3DQEBCwUAA4IBAQCSN2AuHtUmbtRLVWeWwC2O9+53gdOw7nC9
sY7Mi4MERezPUGj+UgHjgN0lzLxO8p7ayUaLDzOUnKTuesgnBLPUCuoA6QgpDX+U
yo93raUERIcOqX3zh+1qTeS2QBzhwQu9ykhNlT0at+3tdveoNtwPyvvkH9je78oj
keHlfA17dfJlQSIThwZMNCcLjZoypop+pOUGqFOuqGQRcrX2ZKAh6wRdBUUP/O6D
3xpDtsLb6pT8YYYoa4biYhELqZ68NP/Jp+fbBb21z1xERM2Xk+9YPWgvxE1U+tdI
gcOA/H19YnYfaSvZuz4xcE6lRu5ytSgde3b5iD/6AkuDAxa3Bbci
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org