Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W8mNYggM2EyYbNU54hr_Gx5v-DM.roa
File: W8mNYggM2EyYbNU54hr_Gx5v-DM.roa (raw, json)
Hash identifier: D+qBGfAcfmkSgK7pTmAhjQplm0qZpdw5T6r3OBwdjTA=
Subject key identifier: 5B:C9:8D:62:08:0C:D8:4C:98:6C:D5:39:E2:1A:FF:1B:1E:6F:F8:33
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2111
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W8mNYggM2EyYbNU54hr_Gx5v-DM.roa
Signing time: Fri 25 Nov 2022 04:39:28 +0000
ROA not before: Fri 25 Nov 2022 04:39:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8465 (0x2111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5BC98D62080CD84C986CD539E21AFF1B1E6FF833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e8:cc:8d:73:4f:90:64:b0:df:92:1b:a3:57:
9f:7f:05:3e:db:b8:75:08:a0:3f:39:26:0c:01:95:
ec:7d:3d:79:59:16:0b:5e:c4:5b:ac:eb:83:fe:b9:
82:4f:53:e3:e6:bb:83:88:d8:ce:5e:a3:2c:68:ac:
94:c0:b9:d6:5c:d6:b8:ee:52:37:b7:aa:22:8c:da:
71:78:17:2c:e7:98:92:56:15:a9:0e:95:c4:ab:4e:
60:ea:31:8b:3d:41:bd:f3:b0:c1:4e:a3:b0:d2:f7:
e4:43:91:55:5f:50:87:19:53:d2:17:9a:3a:f7:54:
20:7a:c0:d6:33:40:91:cd:c6:5f:6b:27:24:e3:60:
11:75:39:b5:56:42:28:c1:36:c5:7d:7d:68:f2:81:
5d:47:e7:92:0d:4f:47:61:40:f3:a0:14:bd:d5:ec:
a1:a0:5d:cf:9e:0b:d0:26:3f:28:32:e6:a4:a9:2b:
b2:c1:1d:f0:d2:4d:ce:07:12:c5:5b:1b:a6:c5:c9:
b7:20:f4:52:9b:17:a6:aa:98:31:3a:da:e3:7e:7e:
cb:b6:cb:84:36:1b:70:29:b1:2a:49:1f:23:84:1d:
10:e2:7b:e8:ce:c0:27:ed:ff:98:45:2b:ea:09:ab:
ea:37:91:a2:42:5e:7c:d6:94:82:83:17:dd:d4:38:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C9:8D:62:08:0C:D8:4C:98:6C:D5:39:E2:1A:FF:1B:1E:6F:F8:33
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W8mNYggM2EyYbNU54hr_Gx5v-DM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.136.0/22
Signature Algorithm: sha256WithRSAEncryption
61:94:4a:be:9e:c7:dd:b1:03:e1:50:0d:d8:ef:47:ed:3a:9b:
05:80:4b:a9:15:e8:24:41:ef:1a:56:59:5a:1a:2e:d5:48:9a:
6b:2e:ed:20:9d:b7:c8:9b:40:ef:a6:72:75:bc:8b:64:83:fd:
95:14:25:4a:de:23:55:c9:f1:5d:cd:d2:6c:e0:75:53:b9:26:
e1:c4:2e:a4:79:7e:76:6e:30:c6:a8:5c:dd:e5:6c:fd:c2:ce:
5f:4f:26:ae:fb:27:29:fb:6e:96:0e:74:a8:c3:c3:a0:d0:ed:
46:03:9e:b0:bc:08:0f:47:2f:e3:1a:24:56:6d:3d:42:43:9c:
ff:b3:e7:ff:7c:c1:20:8b:39:95:ff:fd:1c:8f:61:23:df:43:
ee:2a:46:6f:c6:67:7e:31:f5:c1:09:e2:9b:77:3a:3f:a7:3c:
be:66:12:d3:cb:79:d9:6f:2c:af:ac:9c:05:a7:ab:d5:12:e7:
22:77:4a:a5:1f:ba:d9:e2:1d:2d:63:4c:0f:1b:45:d5:f2:3d:
94:06:6e:cc:d4:e6:62:ce:e0:0c:2e:a4:a6:e9:7c:95:ae:f1:
c9:67:b5:72:0e:e2:7a:32:40:53:60:64:e0:f0:95:5d:79:3b:
2d:28:57:ec:90:d7:10:00:c1:a1:55:50:63:04:6a:62:cd:33:
2a:f7:42:2a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MjhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVCQzk4RDYyMDgwQ0Q4
NEM5ODZDRDUzOUUyMUFGRjFCMUU2RkY4MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDj6MyNc0+QZLDfkhujV59/BT7buHUIoD85JgwBlex9PXlZFgte
xFus64P+uYJPU+Pmu4OI2M5eoyxorJTAudZc1rjuUje3qiKM2nF4FyznmJJWFakO
lcSrTmDqMYs9Qb3zsMFOo7DS9+RDkVVfUIcZU9IXmjr3VCB6wNYzQJHNxl9rJyTj
YBF1ObVWQijBNsV9fWjygV1H55INT0dhQPOgFL3V7KGgXc+eC9AmPygy5qSpK7LB
HfDSTc4HEsVbG6bFybcg9FKbF6aqmDE62uN+fsu2y4Q2G3ApsSpJHyOEHRDie+jO
wCft/5hFK+oJq+o3kaJCXnzWlIKDF93UOOu5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUW8mNYggM2EyYbNU54hr/Gx5v+DMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1c4bU5ZZ2dNMkV5WWJOVTU0
aHJfR3g1di1ETS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wYgwDQYJKoZIhvcNAQELBQADggEBAGGUSr6ex92xA+FQDdjvR+06mwWAS6kV6CRB
7xpWWVoaLtVImmsu7SCdt8ibQO+mcnW8i2SD/ZUUJUreI1XJ8V3N0mzgdVO5JuHE
LqR5fnZuMMaoXN3lbP3Czl9PJq77Jyn7bpYOdKjDw6DQ7UYDnrC8CA9HL+MaJFZt
PUJDnP+z5/98wSCLOZX//RyPYSPfQ+4qRm/GZ34x9cEJ4pt3Oj+nPL5mEtPLedlv
LK+snAWnq9US5yJ3SqUfutniHS1jTA8bRdXyPZQGbszU5mLO4AwupKbpfJWu8cln
tXIO4noyQFNgZODwlV15Oy0oV+yQ1xAAwaFVUGMEamLNMyr3Qio=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org