Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XDkRxtLo0omHClhj1B9QUr_5TXQ.roa
File: XDkRxtLo0omHClhj1B9QUr_5TXQ.roa (raw, json)
Hash identifier: Cq1rSTbiGyhITk2qvOanmiF8uVVp9hNwHRvP/ngKs7Y=
Subject key identifier: 5C:39:11:C6:D2:E8:D2:89:87:0A:58:63:D4:1F:50:52:BF:F9:4D:74
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20CF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XDkRxtLo0omHClhj1B9QUr_5TXQ.roa
Signing time: Fri 25 Nov 2022 04:39:08 +0000
ROA not before: Fri 25 Nov 2022 04:39:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8399 (0x20cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5C3911C6D2E8D289870A5863D41F5052BFF94D74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:48:17:40:53:ba:5b:c8:01:ac:ef:5a:02:
3c:96:5f:30:21:dc:4b:59:ad:2f:6a:9b:97:8a:8d:
dd:fa:03:80:38:ca:ff:7f:73:cf:14:e5:4a:66:5c:
e9:80:ff:20:bd:b9:b3:dc:e3:1f:2a:45:2d:4e:4c:
dc:13:0f:ea:3b:84:c6:83:5a:39:75:46:93:31:47:
7a:f3:43:75:0d:6a:e3:76:8e:50:de:b9:bb:6e:03:
bd:81:67:0b:f1:8f:14:89:28:f9:01:c8:b3:d4:10:
c4:6d:2a:75:f7:4b:fc:45:2f:ec:11:2a:ad:0f:eb:
da:60:87:7a:de:1c:ab:1b:e3:40:38:b1:59:7a:41:
20:cf:2b:be:00:88:1e:c6:74:f9:db:bc:99:7a:25:
62:ca:b0:9a:3e:8e:89:7b:00:4e:dc:e9:2b:a0:4a:
c1:00:9d:22:7d:f1:26:90:af:84:3e:8b:58:6b:a1:
70:07:f6:25:73:23:f1:e7:aa:70:9c:86:76:57:87:
aa:94:78:f8:74:4f:90:90:f4:00:3f:3f:65:3c:aa:
60:e6:03:b7:ca:26:c1:9e:e0:81:e7:70:8a:76:9f:
42:12:6b:79:e0:2e:6c:e2:c5:08:4b:bd:90:07:e8:
ec:1c:f1:93:49:b1:ed:8e:b8:6c:59:a3:14:1d:38:
e6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:39:11:C6:D2:E8:D2:89:87:0A:58:63:D4:1F:50:52:BF:F9:4D:74
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XDkRxtLo0omHClhj1B9QUr_5TXQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.9.0/24
Signature Algorithm: sha256WithRSAEncryption
24:61:35:97:82:25:a9:c1:53:62:cc:df:1a:c0:1f:9a:9e:9f:
44:76:de:e8:20:a7:39:fa:d8:6a:d3:6b:7f:1a:9a:16:33:d8:
fb:d0:04:f0:76:01:73:71:ce:55:c4:7c:40:29:0f:cb:0f:f4:
87:a9:0b:a0:4d:d6:87:c6:5d:cd:7c:3d:87:48:3c:7e:83:67:
c4:e7:0a:d4:e5:b0:16:41:4c:89:f1:ba:55:74:9c:5a:5b:c2:
14:a9:a4:17:bb:e1:04:c6:02:36:37:57:4d:a4:3a:03:12:72:
1a:87:33:bc:b0:a1:04:3f:e9:99:c8:ab:6b:0d:9a:53:ba:29:
33:e9:38:57:63:b9:9a:60:12:9b:17:95:31:c5:cc:2d:6f:86:
df:b7:90:92:86:7f:5c:b5:ac:1f:3c:9c:0e:36:e1:e5:57:93:
98:26:0b:ca:ed:cb:86:27:37:a6:fc:d4:5f:4f:c6:c6:01:af:
c3:15:a4:69:27:ce:8f:46:37:17:35:67:68:e0:c0:16:2d:b8:
ab:a7:47:5a:94:dc:7d:3f:61:da:0d:b8:ec:f6:71:da:3f:c7:
ac:47:2d:6d:61:10:f8:68:6d:3f:96:83:c5:e1:48:94:44:c0:
70:36:c1:9a:ef:bc:2b:cf:da:7a:38:00:59:8e:f1:4c:66:1f:
16:f5:1f:e5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIM8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVDMzkxMUM2RDJFOEQy
ODk4NzBBNTg2M0Q0MUY1MDUyQkZGOTRENzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKBUgXQFO6W8gBrO9aAjyWXzAh3EtZrS9qm5eKjd36A4A4yv9/
c88U5UpmXOmA/yC9ubPc4x8qRS1OTNwTD+o7hMaDWjl1RpMxR3rzQ3UNauN2jlDe
ubtuA72BZwvxjxSJKPkByLPUEMRtKnX3S/xFL+wRKq0P69pgh3reHKsb40A4sVl6
QSDPK74AiB7GdPnbvJl6JWLKsJo+jol7AE7c6SugSsEAnSJ98SaQr4Q+i1hroXAH
9iVzI/HnqnCchnZXh6qUePh0T5CQ9AA/P2U8qmDmA7fKJsGe4IHncIp2n0ISa3ng
LmzixQhLvZAH6Owc8ZNJse2OuGxZoxQdOOY7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUXDkRxtLo0omHClhj1B9QUr/5TXQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hEa1J4dExvMG9tSENsaGox
QjlRVXJfNVRYUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wQkwDQYJKoZIhvcNAQELBQADggEBACRhNZeCJanBU2LM3xrAH5qen0R23uggpzn6
2GrTa38amhYz2PvQBPB2AXNxzlXEfEApD8sP9IepC6BN1ofGXc18PYdIPH6DZ8Tn
CtTlsBZBTInxulV0nFpbwhSppBe74QTGAjY3V02kOgMSchqHM7ywoQQ/6ZnIq2sN
mlO6KTPpOFdjuZpgEpsXlTHFzC1vht+3kJKGf1y1rB88nA424eVXk5gmC8rty4Yn
N6b81F9PxsYBr8MVpGknzo9GNxc1Z2jgwBYtuKunR1qU3H0/YdoNuOz2cdo/x6xH
LW1hEPhobT+Wg8XhSJREwHA2wZrvvCvP2no4AFmO8UxmHxb1H+U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org