Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WXaQtl-zZHWSbqmsRpu4mJ6FqCE.roa
File: WXaQtl-zZHWSbqmsRpu4mJ6FqCE.roa (raw, json)
Hash identifier: x+tO2Rmaqd09CGyUixxu1UdpXcRj1idsTMiszUht9RE=
Subject key identifier: 59:76:90:B6:5F:B3:64:75:92:6E:A9:AC:46:9B:B8:98:9E:85:A8:21
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 200E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WXaQtl-zZHWSbqmsRpu4mJ6FqCE.roa
Signing time: Fri 25 Nov 2022 04:38:16 +0000
ROA not before: Fri 25 Nov 2022 04:38:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8206 (0x200e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=597690B65FB36475926EA9AC469BB8989E85A821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:bd:ca:c4:88:0f:81:7f:9e:47:ad:50:54:a1:
5a:f5:39:64:71:97:9f:f2:5b:9a:dd:71:08:56:1c:
3f:3b:b6:4c:ad:8b:66:fa:19:02:0d:01:15:7c:5b:
b0:2f:bf:b6:ca:46:3e:6f:9f:22:a3:f2:37:71:80:
8c:57:97:60:e6:2a:44:47:09:fb:ad:d7:47:ed:11:
a0:4c:b5:58:6a:22:01:9b:a2:5c:2b:f3:4a:6c:55:
6c:f9:d5:6a:05:18:0a:7c:8b:44:db:ec:3c:d1:76:
eb:28:11:8d:87:d0:90:ee:67:84:5d:8a:de:76:47:
ba:ae:bc:5f:4f:df:c3:4a:5f:05:8d:8d:a3:43:8b:
32:bb:9d:11:e8:59:62:ae:17:1e:9a:a3:52:b3:22:
b8:91:95:56:5a:90:85:13:f5:36:45:5a:7e:c3:66:
89:45:44:da:87:93:04:4d:8e:73:55:f9:09:29:1b:
0e:97:36:87:ca:ab:66:44:1c:7d:69:47:69:15:80:
a3:41:e0:ba:a4:7a:91:69:26:67:6c:6f:49:ff:6a:
f3:5f:e7:38:82:50:11:95:f9:a7:88:e8:5e:e5:df:
8e:c6:1e:06:91:67:3a:48:a6:9a:d0:c3:d6:b5:f1:
1e:57:df:dd:5d:85:76:2e:1b:cd:db:b9:ff:ba:64:
04:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:76:90:B6:5F:B3:64:75:92:6E:A9:AC:46:9B:B8:98:9E:85:A8:21
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WXaQtl-zZHWSbqmsRpu4mJ6FqCE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.144.0/20
Signature Algorithm: sha256WithRSAEncryption
92:16:3d:e2:24:2b:cd:76:72:0d:fd:0a:1f:ed:25:51:f1:bb:
59:16:8b:5a:d4:2f:4b:69:b5:8a:1f:bc:5b:be:80:9a:63:f4:
ee:98:9b:83:9d:3b:2a:68:e4:35:fe:43:c7:82:91:42:4c:f4:
5b:42:51:5c:82:94:d8:1b:0b:eb:09:c8:b7:96:91:c6:00:02:
54:ca:39:59:56:8c:93:5e:5f:fa:ba:6f:a3:1b:7c:c6:73:15:
e1:fe:94:2f:2e:f2:69:19:fb:21:93:bf:ac:91:1b:85:d6:f3:
c1:16:df:bf:0a:39:3a:c4:5b:97:7f:9e:eb:54:cb:90:ae:ac:
95:6c:46:47:10:83:c9:78:43:b3:42:e4:2e:dd:8c:06:b3:53:
0a:c3:d1:96:6d:f8:29:c8:b6:30:de:6a:75:56:48:f1:8b:34:
cc:35:0e:ce:b2:65:4d:35:3e:5e:f4:b7:1d:b9:c5:de:4f:a9:
7b:d9:b8:82:7e:db:9b:5f:0e:4f:cd:54:2a:9d:66:42:ef:61:
44:9f:02:5f:df:cf:5a:01:8d:e4:06:27:b9:0d:b2:f6:95:eb:
29:9f:72:3b:70:2e:7c:9d:7c:d6:7e:dd:dd:63:a5:27:db:c7:
69:7f:70:7a:64:bc:eb:fc:0c:0b:53:bb:37:0c:cc:12:b0:81:
54:97:e9:42
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIA4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4MTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU5NzY5MEI2NUZCMzY0
NzU5MjZFQTlBQzQ2OUJCODk4OUU4NUE4MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD8vcrEiA+Bf55HrVBUoVr1OWRxl5/yW5rdcQhWHD87tkyti2b6
GQINARV8W7Avv7bKRj5vnyKj8jdxgIxXl2DmKkRHCfut10ftEaBMtVhqIgGbolwr
80psVWz51WoFGAp8i0Tb7DzRdusoEY2H0JDuZ4Rdit52R7quvF9P38NKXwWNjaND
izK7nRHoWWKuFx6ao1KzIriRlVZakIUT9TZFWn7DZolFRNqHkwRNjnNV+QkpGw6X
NofKq2ZEHH1pR2kVgKNB4LqkepFpJmdsb0n/avNf5ziCUBGV+aeI6F7l347GHgaR
ZzpIpprQw9a18R5X391dhXYuG83buf+6ZATfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWXaQtl+zZHWSbqmsRpu4mJ6FqCEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dYYVF0bC16WkhXU2JxbXNS
cHU0bUo2RnFDRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
w5AwDQYJKoZIhvcNAQELBQADggEBAJIWPeIkK812cg39Ch/tJVHxu1kWi1rUL0tp
tYofvFu+gJpj9O6Ym4OdOypo5DX+Q8eCkUJM9FtCUVyClNgbC+sJyLeWkcYAAlTK
OVlWjJNeX/q6b6MbfMZzFeH+lC8u8mkZ+yGTv6yRG4XW88EW378KOTrEW5d/nutU
y5CurJVsRkcQg8l4Q7NC5C7djAazUwrD0ZZt+CnItjDeanVWSPGLNMw1Ds6yZU01
Pl70tx25xd5PqXvZuIJ+25tfDk/NVCqdZkLvYUSfAl/fz1oBjeQGJ7kNsvaV6ymf
cjtwLnydfNZ+3d1jpSfbx2l/cHpkvOv8DAtTuzcMzBKwgVSX6UI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org