Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X5uddjzo9TDfT33d-fDJyrzWdcc.roa
File: X5uddjzo9TDfT33d-fDJyrzWdcc.roa (raw, json)
Hash identifier: h4VkLf51uh0Cpc02soYLzaSjoCzYg/iuBDQdnFzEmx0=
Subject key identifier: 5F:9B:9D:76:3C:E8:F5:30:DF:4F:7D:DD:F9:F0:C9:CA:BC:D6:75:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2305
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X5uddjzo9TDfT33d-fDJyrzWdcc.roa
Signing time: Fri 25 Nov 2022 04:41:56 +0000
ROA not before: Fri 25 Nov 2022 04:41:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8965 (0x2305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5F9B9D763CE8F530DF4F7DDDF9F0C9CABCD675C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:da:8d:d1:7e:47:9d:8f:f3:8e:65:6e:ff:bc:
05:63:a1:39:d5:08:08:38:6c:c2:2e:8e:11:d4:b7:
56:a2:51:03:97:f8:b0:c8:78:c3:ea:77:15:34:e8:
ab:fd:12:63:05:30:64:cf:97:74:9c:3f:0f:ba:df:
8d:e8:98:56:93:9c:46:77:9f:c1:74:ef:f0:71:c7:
5d:96:a2:9a:1f:37:7a:fb:ea:6a:2a:b4:53:41:81:
c1:00:a8:03:0d:c6:90:3f:51:57:22:f3:4f:ab:91:
7f:53:92:d1:fb:37:b1:0b:1e:f8:53:07:91:dd:fc:
86:df:42:29:61:83:54:73:e4:f6:5e:ad:54:9e:65:
96:8f:be:29:eb:3c:e2:5c:03:e1:47:e6:3e:c4:f7:
3e:5c:7e:fc:3f:b6:2f:24:9a:4c:f5:70:b4:19:25:
4e:b7:26:50:d0:51:ab:27:27:68:88:8c:63:b6:68:
08:0f:ec:8c:29:69:24:1c:6a:ea:90:a0:9f:9a:ad:
9c:6a:12:99:c9:55:5e:27:d1:bb:ce:f9:8d:59:c8:
c8:8e:fe:dc:2c:40:23:18:a1:ef:fd:80:bf:49:be:
d5:b3:f6:a6:22:70:ae:15:a4:a5:06:ab:a0:00:52:
ae:bb:6a:1c:fa:82:51:2d:3e:bb:15:52:a9:fd:41:
99:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9B:9D:76:3C:E8:F5:30:DF:4F:7D:DD:F9:F0:C9:CA:BC:D6:75:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X5uddjzo9TDfT33d-fDJyrzWdcc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.152.0/22
Signature Algorithm: sha256WithRSAEncryption
99:3d:c2:5b:e6:92:6c:a4:56:59:39:ec:8b:8a:9b:0e:08:3d:
8b:3e:25:d1:83:9a:82:69:41:41:ea:81:8b:46:e6:4a:ac:85:
6a:95:00:00:89:4a:30:f4:3f:d3:57:d0:1d:40:aa:c6:32:2d:
1b:59:26:f7:5a:4d:d5:52:d1:0d:53:92:1e:7a:c2:9d:2f:cb:
c3:58:c7:42:61:6e:76:c5:da:c8:3a:3d:91:bc:26:79:e3:04:
20:a7:1f:40:80:46:93:4c:21:b6:49:a6:54:f7:e4:0c:39:c7:
41:5c:e5:90:b1:8d:3d:f8:64:9f:b4:ca:db:da:5d:0c:ea:db:
b1:84:2f:fb:42:44:50:6e:e2:e4:f0:da:80:60:f5:45:8d:04:
39:33:76:1a:21:9c:b3:cd:a4:dc:c4:36:02:2b:52:66:e7:42:
d7:92:41:f4:4b:a9:df:f1:89:95:bb:3a:aa:a7:6e:1f:6d:f0:
9a:67:44:fa:24:e1:31:04:6f:13:49:b4:90:bf:dd:42:3f:9f:
73:31:27:0d:71:58:a6:41:e2:71:81:ac:57:0a:03:2a:e8:91:
da:b9:9a:4c:37:b8:66:a4:44:da:0e:10:e8:a6:9f:37:4c:e9:
7c:b8:7e:dd:5a:ef:7f:f3:0b:43:08:15:0b:a1:ba:64:08:94:
8c:b8:30:7f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIwUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxNTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVGOUI5RDc2M0NFOEY1
MzBERjRGN0REREY5RjBDOUNBQkNENjc1QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDd2o3Rfkedj/OOZW7/vAVjoTnVCAg4bMIujhHUt1aiUQOX+LDI
eMPqdxU06Kv9EmMFMGTPl3ScPw+6343omFaTnEZ3n8F07/Bxx12WopofN3r76moq
tFNBgcEAqAMNxpA/UVci80+rkX9TktH7N7ELHvhTB5Hd/IbfQilhg1Rz5PZerVSe
ZZaPvinrPOJcA+FH5j7E9z5cfvw/ti8kmkz1cLQZJU63JlDQUasnJ2iIjGO2aAgP
7IwpaSQcauqQoJ+arZxqEpnJVV4n0bvO+Y1ZyMiO/twsQCMYoe/9gL9JvtWz9qYi
cK4VpKUGq6AAUq67ahz6glEtPrsVUqn9QZn1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUX5uddjzo9TDfT33d+fDJyrzWdccwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1g1dWRkanpvOVREZlQzM2Qt
ZkRKeXJ6V2RjYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wpgwDQYJKoZIhvcNAQELBQADggEBAJk9wlvmkmykVlk57IuKmw4IPYs+JdGDmoJp
QUHqgYtG5kqshWqVAACJSjD0P9NX0B1AqsYyLRtZJvdaTdVS0Q1Tkh56wp0vy8NY
x0JhbnbF2sg6PZG8JnnjBCCnH0CARpNMIbZJplT35Aw5x0Fc5ZCxjT34ZJ+0ytva
XQzq27GEL/tCRFBu4uTw2oBg9UWNBDkzdhohnLPNpNzENgIrUmbnQteSQfRLqd/x
iZW7Oqqnbh9t8JpnRPok4TEEbxNJtJC/3UI/n3MxJw1xWKZB4nGBrFcKAyrokdq5
mkw3uGakRNoOEOimnzdM6Xy4ft1a73/zC0MIFQuhumQIlIy4MH8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org