Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XARI-Vz9zUPvYWeCji6Dw3eS7FA.roa
File: XARI-Vz9zUPvYWeCji6Dw3eS7FA.roa (raw, json)
Hash identifier: lM38fgaJ96dllwsfRRWE4rugqDbmG14TengFW6kX1Q0=
Subject key identifier: 5C:04:48:F9:5C:FD:CD:43:EF:61:67:82:8E:2E:83:C3:77:92:EC:50
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XARI-Vz9zUPvYWeCji6Dw3eS7FA.roa
Signing time: Thu 15 Sep 2022 02:45:01 +0000
ROA not before: Thu 15 Sep 2022 02:45:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5C0448F95CFDCD43EF6167828E2E83C37792EC50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:e6:2e:f4:ae:c9:b7:52:42:3d:4a:da:8a:
11:42:73:03:9f:7e:2c:64:17:23:92:93:55:f9:e4:
b5:15:9e:32:47:50:d9:3a:ab:63:2c:6a:83:cb:cc:
fc:ca:b8:73:a8:56:94:dc:49:a1:a2:6b:74:08:7b:
66:7e:23:81:f7:9f:56:13:c3:7b:38:97:bf:60:6a:
37:da:6e:6d:68:88:c6:11:8d:e6:18:c7:2d:04:59:
51:3d:8a:18:56:99:17:e1:c7:c5:47:a8:c9:d0:76:
23:9c:82:d2:aa:6d:86:6c:9a:c2:2f:35:57:35:99:
e9:1f:b4:3e:bf:6e:5b:b2:04:81:b7:d5:94:ee:6e:
bb:ac:3f:a9:66:44:0f:57:b2:70:d6:25:6b:2d:c7:
4d:87:59:9f:1b:0c:91:78:5b:77:81:15:d6:d3:99:
0a:4f:0a:25:2f:c6:5c:8a:a0:a9:7f:8e:22:0b:61:
3a:ca:00:4c:b1:28:c9:4b:d1:c4:24:08:96:3f:fb:
7a:6a:49:6f:20:e0:5c:6d:a3:3f:e3:9b:63:08:5c:
e4:1e:84:df:ea:70:3d:ee:f2:b6:b6:30:ba:7d:75:
95:15:3a:e5:2d:9e:33:00:d4:51:9e:29:2b:bb:48:
0b:29:b7:c0:8b:b4:09:a6:0a:d9:2b:cd:5a:a4:aa:
42:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:04:48:F9:5C:FD:CD:43:EF:61:67:82:8E:2E:83:C3:77:92:EC:50
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XARI-Vz9zUPvYWeCji6Dw3eS7FA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.8.0/21
Signature Algorithm: sha256WithRSAEncryption
05:e6:f2:88:30:22:52:bb:1b:78:5b:fc:c0:b5:da:3f:e5:21:
42:13:6f:39:e2:92:a2:68:d2:16:81:18:17:b8:36:01:8f:63:
c9:2e:3d:62:79:26:6b:9e:7d:21:51:ad:f9:25:7f:7c:72:1c:
a3:43:e1:fc:8f:60:e8:c9:4f:69:e0:f3:ef:63:17:2e:c8:46:
c0:74:37:ea:ba:77:dd:34:65:71:14:df:4f:5c:49:5c:9b:c3:
1f:4b:51:bd:37:c4:50:8e:ee:1d:21:09:25:d4:98:5f:02:5b:
b1:bd:85:d8:1c:46:d0:6f:12:7e:3e:02:fe:97:18:92:70:ea:
56:59:f3:23:26:28:39:22:7c:72:2f:c9:83:ea:32:89:21:16:
3a:27:35:7f:65:d0:21:7d:70:4f:2f:21:b8:39:6b:de:af:95:
60:34:e0:c1:55:68:87:1f:f2:e9:ce:03:8b:ee:64:b0:58:d3:
9f:03:1e:46:d3:a9:9c:50:c1:6c:54:4e:54:23:42:5b:6e:9d:
60:da:6a:ae:f0:b3:17:12:96:f7:0d:f9:6d:11:2f:59:7d:00:
82:f2:1d:5c:93:39:7b:30:9f:0e:4a:7b:d5:98:d4:7d:f5:25:
45:e9:ee:53:ab:80:1f:1b:1e:e8:41:0d:f9:60:0f:0e:23:c6:
a2:b7:b7:fc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MDFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVDMDQ0OEY5NUNGRENE
NDNFRjYxNjc4MjhFMkU4M0MzNzc5MkVDNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEuOYu9K7Jt1JCPUraihFCcwOffixkFyOSk1X55LUVnjJHUNk6
q2MsaoPLzPzKuHOoVpTcSaGia3QIe2Z+I4H3n1YTw3s4l79gajfabm1oiMYRjeYY
xy0EWVE9ihhWmRfhx8VHqMnQdiOcgtKqbYZsmsIvNVc1mekftD6/bluyBIG31ZTu
brusP6lmRA9XsnDWJWstx02HWZ8bDJF4W3eBFdbTmQpPCiUvxlyKoKl/jiILYTrK
AEyxKMlL0cQkCJY/+3pqSW8g4Fxtoz/jm2MIXOQehN/qcD3u8ra2MLp9dZUVOuUt
njMA1FGeKSu7SAspt8CLtAmmCtkrzVqkqkJ9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUXARI+Vz9zUPvYWeCji6Dw3eS7FAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hBUkktVno5elVQdllXZUNq
aTZEdzNlUzdGQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wQgwDQYJKoZIhvcNAQELBQADggEBAAXm8ogwIlK7G3hb/MC12j/lIUITbznikqJo
0haBGBe4NgGPY8kuPWJ5JmuefSFRrfklf3xyHKND4fyPYOjJT2ng8+9jFy7IRsB0
N+q6d900ZXEU309cSVybwx9LUb03xFCO7h0hCSXUmF8CW7G9hdgcRtBvEn4+Av6X
GJJw6lZZ8yMmKDkifHIvyYPqMokhFjonNX9l0CF9cE8vIbg5a96vlWA04MFVaIcf
8unOA4vuZLBY058DHkbTqZxQwWxUTlQjQltunWDaaq7wsxcSlvcN+W0RL1l9AILy
HVyTOXswnw5Ke9WY1H31JUXp7lOrgB8bHuhBDflgDw4jxqK3t/w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org