Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YSAaVidySo6CWXsUGebO4MuGucs.roa
File: YSAaVidySo6CWXsUGebO4MuGucs.roa (raw, json)
Hash identifier: kdJwMIRL9jA46mx9n08uoV9MI6tMPIxiXchCHccSyQY=
Subject key identifier: 61:20:1A:56:27:72:4A:8E:82:59:7B:14:19:E6:CE:E0:CB:86:B9:CB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2098
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YSAaVidySo6CWXsUGebO4MuGucs.roa
Signing time: Fri 25 Nov 2022 04:38:54 +0000
ROA not before: Fri 25 Nov 2022 04:38:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8344 (0x2098)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=61201A5627724A8E82597B1419E6CEE0CB86B9CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:e2:ee:a9:56:a4:c7:a6:f9:0d:1d:f4:e4:
f6:03:34:72:f1:b0:0b:14:a5:aa:6a:a5:d9:45:3a:
12:63:9b:03:52:f1:d1:65:1f:d8:08:eb:c6:8a:07:
9a:54:b4:92:ae:17:10:99:45:db:42:39:d0:b6:9c:
03:15:ff:bd:54:23:e7:ac:87:0e:18:57:66:80:c9:
dc:c1:d6:6f:54:e7:22:42:73:2c:65:5c:54:aa:b2:
eb:40:e3:da:87:cf:3a:54:db:09:9e:1e:9c:e0:e8:
6a:1c:18:e4:71:3f:7e:4a:e6:90:89:49:49:7e:14:
73:f3:bf:4d:c7:1a:25:ca:f6:7f:e3:ce:82:3e:2a:
6e:ce:6f:fe:e9:79:e7:53:7a:4f:35:e8:0f:37:3a:
d7:ff:e2:88:78:36:8a:29:33:d2:45:a2:15:bd:b4:
07:ff:e4:11:25:8f:04:53:c6:10:b0:31:8a:64:f8:
63:41:1f:17:cf:14:5c:9e:91:91:8c:61:eb:47:3e:
83:ab:e6:3e:d2:88:ff:31:d9:6d:83:b1:42:d1:cf:
f6:39:a5:f8:66:9b:7c:b1:22:9c:96:15:62:7c:ce:
ea:ba:91:42:6c:ee:36:d5:05:c7:54:82:9b:23:75:
37:bd:c7:0c:c5:ef:8b:aa:70:63:0b:06:9f:30:82:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:20:1A:56:27:72:4A:8E:82:59:7B:14:19:E6:CE:E0:CB:86:B9:CB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YSAaVidySo6CWXsUGebO4MuGucs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.64.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:f1:30:50:d9:ad:f9:41:7c:be:7e:c8:6f:12:ab:a8:21:09:
bd:30:af:28:ec:00:83:6a:e6:73:a4:fe:5d:60:ec:38:5b:ec:
cf:07:1f:8c:ac:81:42:2c:13:06:85:83:f8:15:2a:3f:25:fd:
a1:08:77:c4:89:a6:2d:5b:87:5d:ea:a2:b1:35:53:4f:fe:47:
38:ca:05:ec:e3:a3:b7:23:20:49:0e:61:c1:25:6e:5d:20:7a:
61:ce:c9:16:59:5a:c9:5f:c1:fe:3a:d3:73:e5:89:1e:b1:db:
24:73:7d:eb:e3:09:f6:24:97:55:ef:95:da:ba:37:91:d2:b1:
8d:98:74:ac:fe:cd:52:af:97:66:16:fd:92:92:21:1d:39:57:
50:0f:ca:21:18:73:ff:56:b0:1a:30:90:8d:c5:17:b5:d2:85:
11:36:7a:45:5d:ff:ab:59:63:da:19:bf:d8:9e:df:8e:4e:13:
65:f4:76:b1:9c:17:97:ba:75:ab:44:42:97:fa:c4:f2:df:3f:
57:09:72:77:2e:0b:88:8d:f8:87:43:86:2d:73:14:2d:91:65:
a8:d4:58:34:50:43:37:e0:c4:6b:8a:02:d6:3d:f1:42:53:b5:
95:84:2b:8b:cb:92:75:b0:9d:41:e5:6f:bf:bf:ea:8a:49:a0:
e2:03:7b:e9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4NTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDYxMjAxQTU2Mjc3MjRB
OEU4MjU5N0IxNDE5RTZDRUUwQ0I4NkI5Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQO+LuqVakx6b5DR305PYDNHLxsAsUpapqpdlFOhJjmwNS8dFl
H9gI68aKB5pUtJKuFxCZRdtCOdC2nAMV/71UI+eshw4YV2aAydzB1m9U5yJCcyxl
XFSqsutA49qHzzpU2wmeHpzg6GocGORxP35K5pCJSUl+FHPzv03HGiXK9n/jzoI+
Km7Ob/7peedTek816A83Otf/4oh4NoopM9JFohW9tAf/5BEljwRTxhCwMYpk+GNB
HxfPFFyekZGMYetHPoOr5j7SiP8x2W2DsULRz/Y5pfhmm3yxIpyWFWJ8zuq6kUJs
7jbVBcdUgpsjdTe9xwzF74uqcGMLBp8wgtsVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYSAaVidySo6CWXsUGebO4MuGucswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lTQWFWaWR5U282Q1dYc1VH
ZWJPNE11R3Vjcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wEAwDQYJKoZIhvcNAQELBQADggEBAIvxMFDZrflBfL5+yG8Sq6ghCb0wryjsAINq
5nOk/l1g7Dhb7M8HH4ysgUIsEwaFg/gVKj8l/aEId8SJpi1bh13qorE1U0/+RzjK
Bezjo7cjIEkOYcElbl0gemHOyRZZWslfwf4603PliR6x2yRzfevjCfYkl1Xvldq6
N5HSsY2YdKz+zVKvl2YW/ZKSIR05V1APyiEYc/9WsBowkI3FF7XShRE2ekVd/6tZ
Y9oZv9ie345OE2X0drGcF5e6datEQpf6xPLfP1cJcncuC4iN+IdDhi1zFC2RZajU
WDRQQzfgxGuKAtY98UJTtZWEK4vLknWwnUHlb7+/6opJoOIDe+k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org