Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YkwazBMX7oWVUQcAQjg9mixTO5E.roa
File: YkwazBMX7oWVUQcAQjg9mixTO5E.roa (raw, json)
Hash identifier: ed4BWJHTLiaCH18Ulv/PgkrkQlnVu5na2egB0+4r2dI=
Subject key identifier: 62:4C:1A:CC:13:17:EE:85:95:51:07:00:42:38:3D:9A:2C:53:3B:91
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F37
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YkwazBMX7oWVUQcAQjg9mixTO5E.roa
Signing time: Tue 29 Sep 2020 09:56:39 +0000
ROA not before: Tue 29 Sep 2020 09:56:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3895 (0xf37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:39 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=624C1ACC1317EE859551070042383D9A2C533B91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:16:b9:2f:66:67:b7:c9:75:f1:f7:7e:df:
bd:ab:bf:21:5b:52:59:e1:15:64:32:b2:7a:db:33:
43:e6:81:5a:06:99:4d:20:d3:f8:75:5f:9d:e2:93:
2f:a1:58:b9:0f:35:68:53:3b:7e:93:41:a2:7c:60:
14:f2:9e:91:70:07:6e:44:52:c8:58:a2:1f:ee:cb:
e4:76:c2:2d:91:c1:14:a3:b7:3f:83:45:ee:cd:1c:
f7:a7:f4:cc:06:1e:b7:70:e4:59:ee:eb:2e:0b:86:
19:a4:9d:4a:c6:74:c0:78:99:7c:15:55:03:ff:6a:
b9:1f:f1:57:0a:e2:30:a4:3f:95:e6:f9:a1:d6:37:
99:7b:cd:b5:55:9a:dd:08:fc:b0:b9:6c:c5:53:b9:
1d:1b:ca:11:6f:85:d9:dd:2d:6c:a2:98:0e:94:a9:
a2:c2:d5:95:d2:e4:07:11:e8:da:c1:0e:bf:dc:0e:
51:67:c6:9a:14:16:77:49:57:8a:cb:8b:37:1c:ac:
ca:32:4f:84:2d:72:a7:f1:5c:46:e9:c0:9e:09:18:
0d:e0:b3:4a:c9:02:01:22:0c:2c:1f:5d:fb:75:e0:
37:b1:9c:60:e4:f0:17:ba:8e:96:d8:59:54:b3:8c:
ef:9f:9c:cb:6a:bd:7e:10:e0:7d:df:a0:b1:1c:bc:
c2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4C:1A:CC:13:17:EE:85:95:51:07:00:42:38:3D:9A:2C:53:3B:91
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YkwazBMX7oWVUQcAQjg9mixTO5E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.184.0/22
Signature Algorithm: sha256WithRSAEncryption
59:7e:01:9a:0e:42:34:8d:99:1a:b6:db:dc:b0:9e:bd:ed:e6:
a6:84:79:8d:f3:e8:5b:90:21:42:1d:19:30:c9:fe:0d:89:dd:
00:87:5c:64:f0:4c:31:a3:cb:3c:31:82:01:c1:bb:fd:6c:b6:
b6:b5:f0:f3:c4:0c:91:27:fa:5d:a9:75:a9:c7:8e:7b:ea:06:
ff:75:91:9d:c1:fb:8a:db:4b:88:58:c5:83:3b:99:82:fd:dd:
5c:4e:69:c8:77:04:fc:8d:81:c0:9b:21:0a:b7:f7:e0:dd:f6:
35:7f:d4:ee:d9:06:71:0c:b7:3c:05:6d:f7:42:c4:cb:c2:4c:
67:66:f5:7c:8e:78:9a:9f:93:87:f3:9e:0e:e0:e5:04:43:0c:
5b:e7:12:3b:6b:50:6f:06:d2:48:e0:0a:d0:69:4f:01:48:be:
a6:2d:e6:70:26:48:4a:53:92:81:80:05:fe:93:8b:5d:5d:14:
69:29:4a:f6:0e:36:c7:8c:b0:ab:f1:64:38:97:30:06:2d:90:
b5:53:d9:c8:d8:7c:93:4e:49:24:db:53:c1:0e:52:04:c8:82:
c5:b6:fc:8e:0b:a7:43:6e:e2:5d:d8:19:33:db:2d:ef:97:b6:
b0:16:06:01:7e:c8:79:42:f7:6d:0e:b3:a9:5d:e1:cc:66:03:
2d:2f:87:bc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MzlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDYyNEMxQUNDMTMxN0VF
ODU5NTUxMDcwMDQyMzgzRDlBMkM1MzNCOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+aRa5L2Znt8l18fd+372rvyFbUlnhFWQysnrbM0PmgVoGmU0g
0/h1X53iky+hWLkPNWhTO36TQaJ8YBTynpFwB25EUshYoh/uy+R2wi2RwRSjtz+D
Re7NHPen9MwGHrdw5Fnu6y4LhhmknUrGdMB4mXwVVQP/arkf8VcK4jCkP5Xm+aHW
N5l7zbVVmt0I/LC5bMVTuR0byhFvhdndLWyimA6UqaLC1ZXS5AcR6NrBDr/cDlFn
xpoUFndJV4rLizccrMoyT4QtcqfxXEbpwJ4JGA3gs0rJAgEiDCwfXft14DexnGDk
8Be6jpbYWVSzjO+fnMtqvX4Q4H3foLEcvMIhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYkwazBMX7oWVUQcAQjg9mixTO5EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lrd2F6Qk1YN29XVlVRY0FR
amc5bWl4VE81RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wrgwDQYJKoZIhvcNAQELBQADggEBAFl+AZoOQjSNmRq229ywnr3t5qaEeY3z6FuQ
IUIdGTDJ/g2J3QCHXGTwTDGjyzwxggHBu/1stra18PPEDJEn+l2pdanHjnvqBv91
kZ3B+4rbS4hYxYM7mYL93VxOach3BPyNgcCbIQq39+Dd9jV/1O7ZBnEMtzwFbfdC
xMvCTGdm9XyOeJqfk4fzng7g5QRDDFvnEjtrUG8G0kjgCtBpTwFIvqYt5nAmSEpT
koGABf6Ti11dFGkpSvYONseMsKvxZDiXMAYtkLVT2cjYfJNOSSTbU8EOUgTIgsW2
/I4Lp0Nu4l3YGTPbLe+XtrAWBgF+yHlC920Os6ld4cxmAy0vh7w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org