Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W3g4S7-p3PuvsQ8wVJSCZvdHIEY.roa
File: W3g4S7-p3PuvsQ8wVJSCZvdHIEY.roa (raw, json)
Hash identifier: KE77YePwQDg7oBVZ7/ZTXNWU3hm+ySS14oNBjsn+c78=
Subject key identifier: 5B:78:38:4B:BF:A9:DC:FB:AF:B1:0F:30:54:94:82:66:F7:47:20:46
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2310
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W3g4S7-p3PuvsQ8wVJSCZvdHIEY.roa
Signing time: Fri 25 Nov 2022 04:42:00 +0000
ROA not before: Fri 25 Nov 2022 04:42:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.219.192/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8976 (0x2310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5B78384BBFA9DCFBAFB10F3054948266F7472046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:fb:21:4d:1f:88:4a:d4:a3:b5:fd:c5:43:
cc:ab:19:b4:77:c4:03:9e:30:80:08:20:03:e9:9c:
b5:7d:28:95:01:09:a2:d9:cc:eb:fc:d3:80:f7:c2:
4c:53:09:a7:0e:11:b2:6a:be:d2:4c:b1:e2:86:92:
4a:5b:05:48:ab:a4:1f:d9:f6:6f:67:7a:c9:2a:fe:
9c:a1:dd:09:9c:42:00:3f:a4:9c:a6:0e:41:87:ba:
b9:86:fc:17:82:fd:41:8b:9c:f3:c5:34:7a:a0:ac:
a7:ce:3d:91:69:02:9f:2a:2c:14:e8:c3:4d:b9:b3:
0a:e3:3f:99:da:3e:d1:ee:12:9a:79:a2:f2:fb:5f:
8e:da:7f:d5:0f:4f:00:28:0d:5f:2c:3e:ba:b7:83:
e1:d1:f9:52:6c:9d:9b:54:95:bb:38:71:32:8a:28:
13:8a:3a:55:74:fc:9f:5e:67:74:1a:9c:f0:99:2a:
ce:84:de:25:7a:ab:a2:2e:6e:9f:05:1d:0f:77:eb:
fd:0c:30:50:4b:ec:d2:e1:20:79:06:ef:e8:c0:41:
f4:f7:cd:ea:8f:25:0d:33:f6:67:95:f4:a4:1d:d1:
9c:7f:a4:21:e7:20:58:54:8d:18:0b:03:bb:f1:d5:
35:06:e3:e9:0f:7f:8e:1e:7f:55:11:93:7b:49:74:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:78:38:4B:BF:A9:DC:FB:AF:B1:0F:30:54:94:82:66:F7:47:20:46
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W3g4S7-p3PuvsQ8wVJSCZvdHIEY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.219.192/26
Signature Algorithm: sha256WithRSAEncryption
91:fb:d7:5e:7b:e7:05:56:37:6e:d4:6f:2b:9b:1c:b7:c1:79:
b0:6e:a0:9c:e3:70:ce:20:0e:62:75:11:55:77:10:53:98:f9:
c4:e6:25:21:0d:39:61:51:4a:b0:99:61:d2:59:d7:cc:6e:00:
7a:0a:a9:83:7f:d1:29:eb:0d:47:a8:13:8b:5c:3b:61:60:93:
8c:99:99:2f:8a:5b:1b:81:f0:ec:be:fa:5f:8b:82:0b:4e:be:
84:e3:c1:f4:e2:4b:03:59:08:bc:3c:bc:34:aa:7c:5b:90:fd:
12:ac:0d:76:15:4d:08:ed:b1:0d:96:d5:87:f6:85:cf:bb:89:
b4:2d:92:99:c1:10:9b:a4:a2:68:81:5f:1f:c4:a7:e0:3d:4b:
48:36:14:37:fa:28:3e:33:0c:ec:81:fa:61:a7:95:d9:af:b9:
78:f6:2a:22:01:d0:ae:51:65:1b:da:12:a3:6b:3c:c7:d6:38:
7c:14:d4:93:90:50:43:de:a2:6b:03:99:4e:06:b6:9b:82:83:
a3:7f:f3:db:ca:83:04:49:b4:a3:88:eb:51:56:ee:aa:43:52:
29:ba:e8:19:0a:6c:0a:72:9e:c4:0a:88:f1:78:e8:4d:38:9c:
4b:32:79:dc:4a:53:b1:95:cb:f5:57:dd:75:c6:38:22:80:94:
d0:fc:23:4b
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICIxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQyMDBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVCNzgzODRCQkZBOURD
RkJBRkIxMEYzMDU0OTQ4MjY2Rjc0NzIwNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw+/shTR+IStSjtf3FQ8yrGbR3xAOeMIAIIAPpnLV9KJUBCaLZ
zOv804D3wkxTCacOEbJqvtJMseKGkkpbBUirpB/Z9m9neskq/pyh3QmcQgA/pJym
DkGHurmG/BeC/UGLnPPFNHqgrKfOPZFpAp8qLBTow025swrjP5naPtHuEpp5ovL7
X47af9UPTwAoDV8sPrq3g+HR+VJsnZtUlbs4cTKKKBOKOlV0/J9eZ3QanPCZKs6E
3iV6q6Iubp8FHQ936/0MMFBL7NLhIHkG7+jAQfT3zeqPJQ0z9meV9KQd0Zx/pCHn
IFhUjRgLA7vx1TUG4+kPf44ef1URk3tJdDj9AgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUW3g4S7+p3PuvsQ8wVJSCZvdHIEYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1czZzRTNy1wM1B1dnNROHdW
SlNDWnZkSElFWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7
wdvAMA0GCSqGSIb3DQEBCwUAA4IBAQCR+9dee+cFVjdu1G8rmxy3wXmwbqCc43DO
IA5idRFVdxBTmPnE5iUhDTlhUUqwmWHSWdfMbgB6CqmDf9Ep6w1HqBOLXDthYJOM
mZkvilsbgfDsvvpfi4ILTr6E48H04ksDWQi8PLw0qnxbkP0SrA12FU0I7bENltWH
9oXPu4m0LZKZwRCbpKJogV8fxKfgPUtINhQ3+ig+Mwzsgfphp5XZr7l49ioiAdCu
UWUb2hKjazzH1jh8FNSTkFBD3qJrA5lOBrabgoOjf/PbyoMESbSjiOtRVu6qQ1Ip
uugZCmwKcp7ECojxeOhNOJxLMnncSlOxlcv1V911xjgigJTQ/CNL
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org