Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XJtUBEgUPtAHxYZeJ9BNwx0C_t0.roa
File: XJtUBEgUPtAHxYZeJ9BNwx0C_t0.roa (raw, json)
Hash identifier: mTFmFjCZQUsm2jsuRgoad68YP/ovcWnxL6thJRYr+IE=
Subject key identifier: 5C:9B:54:04:48:14:3E:D0:07:C5:86:5E:27:D0:4D:C3:1D:02:FE:DD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D0B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XJtUBEgUPtAHxYZeJ9BNwx0C_t0.roa
Signing time: Wed 29 Sep 2021 02:48:33 +0000
ROA not before: Wed 29 Sep 2021 02:48:33 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7435 (0x1d0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:33 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5C9B540448143ED007C5865E27D04DC31D02FEDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:93:14:b1:e6:45:a0:f3:44:f1:2b:a9:d5:
88:4b:be:f7:15:90:56:47:3c:7a:c8:8f:0f:7a:c7:
98:fc:7d:73:f9:cb:f4:9f:65:e0:7b:66:48:2d:d8:
93:fd:5a:3d:e9:cc:20:19:51:30:99:b6:a9:a3:6b:
cd:66:f6:37:b9:83:12:6d:39:65:3f:04:11:a4:f4:
76:88:61:ff:a4:81:bb:28:85:05:d1:84:6b:b1:18:
3e:f7:e8:8b:15:70:1c:ce:15:ff:2f:5c:ef:c2:fb:
1b:91:ad:bb:b4:4d:d9:a5:a7:64:94:ae:88:99:b4:
af:76:f9:b7:ff:f0:39:38:50:52:5c:e4:d9:6e:be:
c9:16:5c:e6:27:e5:30:7f:8e:ba:47:b6:e8:51:4e:
20:e4:dc:5a:75:13:f0:03:e3:4e:b5:ed:f0:22:c4:
cf:be:51:53:df:7c:72:de:6b:7b:2a:f9:3b:a9:eb:
b1:e6:e2:0c:2a:20:fa:df:49:5e:3e:d1:7d:fa:36:
46:60:81:d6:04:59:72:00:08:00:b6:7b:41:a2:05:
98:fa:6a:62:82:2a:2e:67:c1:0e:78:6b:5f:dd:94:
c0:c6:2b:ff:76:ef:dd:c5:01:bc:f5:df:a9:38:60:
0a:89:ae:c5:22:83:2d:51:f6:9f:06:0c:ab:72:1f:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9B:54:04:48:14:3E:D0:07:C5:86:5E:27:D0:4D:C3:1D:02:FE:DD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XJtUBEgUPtAHxYZeJ9BNwx0C_t0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.68.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:58:39:41:80:da:f7:a5:0c:9f:25:9c:43:df:32:ab:15:89:
b1:1a:1d:80:25:31:fd:a6:d3:38:27:7e:b1:b0:94:72:81:5d:
91:67:b0:41:11:d5:a3:0d:28:b5:1e:75:92:9e:91:e7:f6:ed:
e4:52:57:41:83:f7:c6:5a:e4:de:59:2c:67:8b:86:e9:4c:f2:
98:0b:73:f5:7e:0e:11:5e:83:45:aa:16:72:59:7e:b6:76:98:
10:55:ed:e6:61:c1:e1:1e:da:74:13:46:27:cd:df:a5:87:57:
e9:4d:03:94:05:ae:f0:04:da:c6:ff:96:e1:54:eb:64:d9:ae:
b0:9b:60:70:b9:46:8a:60:fd:cf:9b:f6:af:45:78:d5:71:e8:
31:74:fd:e9:54:da:89:cc:d8:04:73:18:57:99:d0:fe:c8:9b:
a0:33:3d:9d:d9:f9:f4:5e:ec:13:ce:9b:b7:a1:12:6a:f6:c4:
c1:8d:24:6c:0a:28:c3:04:00:b6:5f:c4:95:7a:15:9a:5e:33:
5c:d7:08:50:92:ff:80:0e:76:88:d0:04:bd:ab:cb:ca:66:08:
fa:99:bd:cc:06:9e:b3:d6:32:80:ca:39:10:b1:01:90:ba:e8:
11:42:de:16:a4:b6:7a:b3:e0:c5:16:69:39:6d:53:ca:0b:e9:
4e:6d:9d:a5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4MzNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDVDOUI1NDA0NDgxNDNF
RDAwN0M1ODY1RTI3RDA0REMzMUQwMkZFREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvlJMUseZFoPNE8Sup1YhLvvcVkFZHPHrIjw96x5j8fXP5y/Sf
ZeB7Zkgt2JP9Wj3pzCAZUTCZtqmja81m9je5gxJtOWU/BBGk9HaIYf+kgbsohQXR
hGuxGD736IsVcBzOFf8vXO/C+xuRrbu0Tdmlp2SUroiZtK92+bf/8Dk4UFJc5Nlu
vskWXOYn5TB/jrpHtuhRTiDk3Fp1E/AD40617fAixM++UVPffHLea3sq+Tup67Hm
4gwqIPrfSV4+0X36NkZggdYEWXIACAC2e0GiBZj6amKCKi5nwQ54a1/dlMDGK/92
793FAbz136k4YAqJrsUigy1R9p8GDKtyH2SRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUXJtUBEgUPtAHxYZeJ9BNwx0C/t0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hKdFVCRWdVUHRBSHhZWmVK
OUJOd3gwQ190MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
w0QwDQYJKoZIhvcNAQELBQADggEBAKBYOUGA2velDJ8lnEPfMqsVibEaHYAlMf2m
0zgnfrGwlHKBXZFnsEER1aMNKLUedZKekef27eRSV0GD98Za5N5ZLGeLhulM8pgL
c/V+DhFeg0WqFnJZfrZ2mBBV7eZhweEe2nQTRifN36WHV+lNA5QFrvAE2sb/luFU
62TZrrCbYHC5Ropg/c+b9q9FeNVx6DF0/elU2onM2ARzGFeZ0P7Im6AzPZ3Z+fRe
7BPOm7ehEmr2xMGNJGwKKMMEALZfxJV6FZpeM1zXCFCS/4AOdojQBL2ry8pmCPqZ
vcwGnrPWMoDKORCxAZC66BFC3haktnqz4MUWaTltU8oL6U5tnaU=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:21 2023 by rpki-client on console-ams.rpki-client.org