Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YEe_v2R3n1GMVz3mAMSFKpn-Qmg.roa
File: YEe_v2R3n1GMVz3mAMSFKpn-Qmg.roa (raw, json)
Hash identifier: B0h8bVsAA3l6pQgoWS/Km4Gg053rgyDq26JLzwzEs3Q=
Subject key identifier: 60:47:BF:BF:64:77:9F:51:8C:57:3D:E6:00:C4:85:2A:99:FE:42:68
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YEe_v2R3n1GMVz3mAMSFKpn-Qmg.roa
Signing time: Thu 15 Sep 2022 02:45:22 +0000
ROA not before: Thu 15 Sep 2022 02:45:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6047BFBF64779F518C573DE600C4852A99FE4268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7e:65:ba:78:85:e2:87:8f:65:ef:40:38:78:
a0:bf:73:dc:c9:81:c6:8b:65:7c:93:2e:eb:c9:60:
dd:80:5b:a9:8a:a3:01:f5:e8:90:b7:3b:f6:37:bd:
5a:08:53:c1:7c:b4:05:46:90:14:a6:42:0c:7d:21:
c8:60:d6:e3:f9:10:ed:fb:26:b3:4e:bb:a0:c9:bc:
66:76:b9:a9:8b:23:fa:47:38:4b:71:ad:6c:03:db:
ee:de:cf:31:27:79:bf:30:b7:e8:2d:20:bf:24:bc:
d5:bb:e6:32:c6:18:14:e9:2e:78:1a:f4:af:a2:6d:
4c:28:8e:ca:dc:99:81:26:ae:09:00:2c:f0:a2:40:
e9:7b:7c:e9:ef:a5:83:21:59:85:84:16:d2:b1:0b:
8e:cd:21:05:74:42:a5:13:3f:71:77:4a:89:a5:b8:
0c:6a:26:91:59:34:53:a3:24:d7:9b:47:03:18:95:
44:3a:59:31:e6:43:91:66:ae:f0:3c:3b:14:57:7b:
a1:3a:35:ca:f5:6a:3d:26:93:22:22:17:0e:f4:54:
07:0a:1f:55:1c:3e:34:c1:49:96:2f:d5:10:86:08:
e8:80:c4:ab:36:29:36:73:93:14:80:cb:97:8b:ff:
68:24:ff:9a:e6:e3:f3:e5:64:68:72:30:ce:f0:fa:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:47:BF:BF:64:77:9F:51:8C:57:3D:E6:00:C4:85:2A:99:FE:42:68
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YEe_v2R3n1GMVz3mAMSFKpn-Qmg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.44.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:b7:23:dc:b6:80:d7:e0:9a:bd:ac:e1:34:91:43:c3:6b:c0:
21:29:c6:05:dc:23:53:18:0c:b9:40:26:05:94:50:77:21:c6:
ac:cc:83:db:85:4f:b4:14:53:bf:ed:53:ad:78:b0:70:81:b2:
c7:dc:fc:2a:4d:ad:17:22:2a:c3:da:4f:af:7e:af:60:1d:f5:
03:30:ce:59:39:27:84:12:f5:8b:05:d5:7b:38:95:60:db:db:
57:df:be:51:79:15:89:35:2c:50:6f:62:b2:4c:1b:90:79:db:
90:97:21:a1:ee:09:c7:ad:d0:b1:8f:0c:30:61:2d:c2:18:93:
67:86:08:11:4e:66:07:b5:c1:b2:fd:74:73:94:5b:b8:ef:34:
98:14:ac:e5:78:e4:3f:a8:a8:2e:4f:00:2c:0e:10:77:2e:d2:
da:4a:66:87:45:3e:fa:87:4d:de:82:44:58:96:cd:30:dd:d4:
cc:c0:46:d8:a3:91:be:fb:b0:df:f7:17:b1:24:bb:c0:fb:ff:
02:6b:76:94:9b:f5:67:95:82:62:ac:c4:b1:4f:f3:59:e0:c3:
8a:df:ca:cb:87:e6:3d:d8:2d:48:39:e9:39:fe:0d:17:2c:68:
ad:45:09:8a:ee:7f:a7:ec:6f:ea:52:f1:c8:fe:e6:e6:04:89:
74:06:50:62
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MjJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDYwNDdCRkJGNjQ3NzlG
NTE4QzU3M0RFNjAwQzQ4NTJBOTlGRTQyNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDufmW6eIXih49l70A4eKC/c9zJgcaLZXyTLuvJYN2AW6mKowH1
6JC3O/Y3vVoIU8F8tAVGkBSmQgx9Ichg1uP5EO37JrNOu6DJvGZ2uamLI/pHOEtx
rWwD2+7ezzEneb8wt+gtIL8kvNW75jLGGBTpLnga9K+ibUwojsrcmYEmrgkALPCi
QOl7fOnvpYMhWYWEFtKxC47NIQV0QqUTP3F3SomluAxqJpFZNFOjJNebRwMYlUQ6
WTHmQ5FmrvA8OxRXe6E6Ncr1aj0mkyIiFw70VAcKH1UcPjTBSZYv1RCGCOiAxKs2
KTZzkxSAy5eL/2gk/5rm4/PlZGhyMM7w+mc1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYEe/v2R3n1GMVz3mAMSFKpn+QmgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lFZV92MlIzbjFHTVZ6M21B
TVNGS3BuLVFtZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wSwwDQYJKoZIhvcNAQELBQADggEBAKm3I9y2gNfgmr2s4TSRQ8NrwCEpxgXcI1MY
DLlAJgWUUHchxqzMg9uFT7QUU7/tU614sHCBssfc/CpNrRciKsPaT69+r2Ad9QMw
zlk5J4QS9YsF1Xs4lWDb21ffvlF5FYk1LFBvYrJMG5B525CXIaHuCcet0LGPDDBh
LcIYk2eGCBFOZge1wbL9dHOUW7jvNJgUrOV45D+oqC5PACwOEHcu0tpKZodFPvqH
Td6CRFiWzTDd1MzARtijkb77sN/3F7Eku8D7/wJrdpSb9WeVgmKsxLFP81ngw4rf
ysuH5j3YLUg56Tn+DRcsaK1FCYruf6fsb+pS8cj+5uYEiXQGUGI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org