Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WrrUYy4Ao2lxy3EQPU-YQWhPbf8.roa
File: WrrUYy4Ao2lxy3EQPU-YQWhPbf8.roa (raw, json)
Hash identifier: wpZT1W9Ag3s5/BA/B3u9/7VdSjpHYbRIAfOHInzNnX8=
Subject key identifier: 5A:BA:D4:63:2E:00:A3:69:71:CB:71:10:3D:4F:98:41:68:4F:6D:FF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WrrUYy4Ao2lxy3EQPU-YQWhPbf8.roa
Signing time: Thu 15 Sep 2022 02:56:07 +0000
ROA not before: Thu 15 Sep 2022 02:56:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.238.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8100 (0x1fa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:56:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5ABAD4632E00A36971CB71103D4F9841684F6DFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:eb:9b:f5:7e:51:7b:19:96:d2:14:15:65:
3b:db:f0:d5:d5:58:56:44:7f:60:44:f4:ac:45:03:
13:fc:07:89:91:83:3f:30:d8:fc:9b:dc:d8:87:88:
c7:e1:e2:86:6d:1f:1b:4b:fe:74:ef:36:6a:0c:22:
68:4e:f8:a5:a7:d6:da:e5:de:62:1d:31:84:1e:90:
db:3f:af:e0:65:82:28:b9:7b:e9:9e:2e:01:d1:26:
5c:af:0b:04:75:f5:29:c3:72:dc:40:8b:87:1e:0e:
d7:e3:80:a5:bd:d3:40:0c:3a:df:2c:1b:29:f5:7e:
2b:cd:d1:1e:5a:ad:e6:4e:b1:6c:d9:82:34:f0:e9:
b3:0e:c3:21:2b:24:83:15:32:82:d7:ea:8a:76:c8:
d9:99:4f:4e:c2:89:16:51:18:e0:60:8f:1f:91:5d:
3b:74:ad:29:b0:bd:59:fb:ec:94:b5:45:8e:e8:bb:
a9:35:a8:a9:b0:f2:f4:bc:b4:0b:98:f8:f2:6c:93:
74:f5:ee:30:0b:53:ec:e4:c7:b2:19:04:89:b1:06:
1b:53:02:72:01:81:ac:55:ca:1d:c1:22:27:27:fe:
2d:cf:7e:a5:c2:3b:23:ad:40:9d:68:c8:fe:30:31:
da:cb:98:54:91:4a:56:3e:ed:77:49:25:70:9f:de:
b7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BA:D4:63:2E:00:A3:69:71:CB:71:10:3D:4F:98:41:68:4F:6D:FF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WrrUYy4Ao2lxy3EQPU-YQWhPbf8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.238.128/25
Signature Algorithm: sha256WithRSAEncryption
66:30:ce:b6:9c:46:6a:20:87:a0:e7:8e:c3:28:76:e7:91:a3:
61:59:67:aa:67:b5:94:bb:b3:42:30:cd:66:9e:9a:71:73:b4:
18:91:3e:c6:fc:1e:e0:00:07:b1:a8:cb:60:8d:5c:92:d5:6e:
2e:3f:cf:8a:08:28:d1:f2:27:46:cd:c4:95:57:78:f5:3d:13:
55:3b:8a:58:84:29:47:c6:9b:15:07:31:23:3c:1b:dc:68:e4:
20:4c:82:c2:0c:49:ae:1d:6b:f3:53:07:cd:46:1f:5d:9a:eb:
cd:11:f6:75:8c:f8:36:5c:52:52:ac:61:03:a8:13:10:35:2b:
b5:9e:a6:0a:92:84:49:cd:ac:55:bd:a5:7f:9f:c3:af:2d:fe:
a0:b3:8a:55:1d:d1:86:3c:3a:89:e4:e2:23:33:84:77:e0:fb:
f7:b8:3b:dc:0e:72:9d:ab:94:5e:ce:aa:f8:f4:23:9c:10:41:
f5:54:bc:c3:cd:a3:a9:98:00:10:d5:19:ba:a6:a3:42:61:c7:
11:bc:cf:26:d9:28:9e:19:81:9c:41:7b:f6:1e:7c:54:f2:be:
0a:ea:ff:d4:8d:fb:1f:f5:cd:0a:c2:96:19:c9:b6:b9:ec:72:
fe:fa:12:78:68:c3:3b:5c:4d:28:2d:2c:cb:24:a9:0f:af:63:
4f:59:1a:f1
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICH6QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjU2MDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVBQkFENDYzMkUwMEEz
Njk3MUNCNzExMDNENEY5ODQxNjg0RjZERkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCeTuub9X5RexmW0hQVZTvb8NXVWFZEf2BE9KxFAxP8B4mRgz8w
2Pyb3NiHiMfh4oZtHxtL/nTvNmoMImhO+KWn1trl3mIdMYQekNs/r+Blgii5e+me
LgHRJlyvCwR19SnDctxAi4ceDtfjgKW900AMOt8sGyn1fivN0R5areZOsWzZgjTw
6bMOwyErJIMVMoLX6op2yNmZT07CiRZRGOBgjx+RXTt0rSmwvVn77JS1RY7ou6k1
qKmw8vS8tAuY+PJsk3T17jALU+zkx7IZBImxBhtTAnIBgaxVyh3BIicn/i3PfqXC
OyOtQJ1oyP4wMdrLmFSRSlY+7XdJJXCf3rd/AgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUWrrUYy4Ao2lxy3EQPU+YQWhPbf8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dyclVZeTRBbzJseHkzRVFQ
VS1ZUVdoUGJmOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7
w+6AMA0GCSqGSIb3DQEBCwUAA4IBAQBmMM62nEZqIIeg547DKHbnkaNhWWeqZ7WU
u7NCMM1mnppxc7QYkT7G/B7gAAexqMtgjVyS1W4uP8+KCCjR8idGzcSVV3j1PRNV
O4pYhClHxpsVBzEjPBvcaOQgTILCDEmuHWvzUwfNRh9dmuvNEfZ1jPg2XFJSrGED
qBMQNSu1nqYKkoRJzaxVvaV/n8OvLf6gs4pVHdGGPDqJ5OIjM4R34Pv3uDvcDnKd
q5Rezqr49COcEEH1VLzDzaOpmAAQ1Rm6pqNCYccRvM8m2SieGYGcQXv2HnxU8r4K
6v/Ujfsf9c0KwpYZyba57HL++hJ4aMM7XE0oLSzLJKkPr2NPWRrx
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org