Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zh0ZaEUpkXHg5RW8FdnFzCY3qGs.roa
File: Zh0ZaEUpkXHg5RW8FdnFzCY3qGs.roa (raw, json)
Hash identifier: 5TJh3J9twvG5aBbebzzQvbQqcVOfrc/BLPFUH2KXFZA=
Subject key identifier: 66:1D:19:68:45:29:91:71:E0:E5:15:BC:15:D9:C5:CC:26:37:A8:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E3F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zh0ZaEUpkXHg5RW8FdnFzCY3qGs.roa
Signing time: Tue 29 Sep 2020 09:55:31 +0000
ROA not before: Tue 29 Sep 2020 09:55:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.193.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3647 (0xe3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:31 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=661D196845299171E0E515BC15D9C5CC2637A86B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:0c:81:9a:0e:29:ff:73:c4:bd:20:55:2c:
d4:07:96:5a:9d:06:0f:03:03:c6:dd:4a:fe:1a:87:
1a:4d:7c:30:32:ca:cb:99:42:af:2f:17:f9:aa:d0:
f7:f9:68:cb:00:66:68:ab:6f:6d:1c:95:91:35:da:
dd:ae:a4:59:cd:dc:a1:31:c3:9f:f4:74:04:24:74:
1e:a2:01:20:d1:c5:c7:bf:c4:9b:96:14:3f:a6:ff:
d2:96:3d:3b:4c:c8:ff:40:30:88:6d:e4:89:96:98:
97:40:0c:bb:1f:61:ec:b2:ae:63:0e:34:c9:bc:dc:
6a:5c:53:20:94:db:4d:9a:6e:d5:dd:44:60:77:d7:
43:4f:d5:bf:43:ce:9a:cb:93:87:70:44:64:4d:a4:
19:3b:7a:36:71:2b:47:5f:6c:41:b0:c6:3a:b1:da:
e5:f7:52:11:ba:0c:18:56:42:f8:94:ec:04:84:b7:
c5:57:59:35:1e:5b:00:0c:23:67:f6:5a:57:59:47:
cb:4a:08:a8:fb:ba:bf:f2:da:0f:12:23:6f:18:30:
58:32:1c:78:2f:58:28:57:8e:e0:7c:43:09:55:8c:
5e:b5:6f:18:d1:f1:f6:65:6c:13:46:3e:f3:3c:8b:
69:d8:4a:0c:e5:08:0a:ea:3b:8e:cc:82:88:97:fe:
61:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1D:19:68:45:29:91:71:E0:E5:15:BC:15:D9:C5:CC:26:37:A8:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zh0ZaEUpkXHg5RW8FdnFzCY3qGs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.223.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d9:da:23:3d:c2:6b:2a:42:ad:36:96:8d:48:bf:97:7f:91:
30:c9:a7:f9:e4:55:41:6b:57:6b:4f:a4:d5:1a:d8:96:62:a1:
68:88:49:4a:61:be:ee:20:11:0f:a6:38:35:3f:3b:55:05:5c:
61:f8:6c:a3:97:32:30:52:58:9e:28:59:2a:23:61:92:22:6a:
01:ea:53:5e:06:7f:3e:76:de:12:3e:d1:8b:32:ac:9b:d5:da:
46:97:dc:f6:29:3c:fd:73:a6:b3:8c:20:91:11:f0:eb:6a:fb:
5c:15:cf:1a:d6:9c:8e:ca:bc:be:63:87:91:30:51:65:6c:b6:
77:15:4f:c4:8a:95:9b:14:c4:f2:3d:71:f2:2b:46:6e:ef:dd:
c3:5e:b3:eb:d1:8b:18:8f:a6:68:ea:67:36:e3:2f:76:0c:c5:
32:1c:56:7c:4b:6e:0c:db:5d:4d:4e:06:fa:75:17:63:b2:75:
1d:6e:93:e2:c8:98:89:8b:0e:86:28:8d:51:81:ce:cf:59:6a:
0c:fa:b2:1b:1f:05:35:db:15:24:b4:d8:95:a5:24:92:53:2c:
7c:23:08:dd:8d:ab:9c:94:cd:98:b7:ac:7c:86:9f:ad:1e:42:
6b:7d:af:08:10:c9:a2:af:8d:b2:aa:68:ac:f5:70:75:cd:e6:
79:61:8d:ab
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDj8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MzFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDY2MUQxOTY4NDUyOTkx
NzFFMEU1MTVCQzE1RDlDNUNDMjYzN0E4NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCbAyBmg4p/3PEvSBVLNQHllqdBg8DA8bdSv4ahxpNfDAyysuZ
Qq8vF/mq0Pf5aMsAZmirb20clZE12t2upFnN3KExw5/0dAQkdB6iASDRxce/xJuW
FD+m/9KWPTtMyP9AMIht5ImWmJdADLsfYeyyrmMONMm83GpcUyCU202abtXdRGB3
10NP1b9DzprLk4dwRGRNpBk7ejZxK0dfbEGwxjqx2uX3UhG6DBhWQviU7ASEt8VX
WTUeWwAMI2f2WldZR8tKCKj7ur/y2g8SI28YMFgyHHgvWChXjuB8QwlVjF61bxjR
8fZlbBNGPvM8i2nYSgzlCArqO47MgoiX/mGdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZh0ZaEUpkXHg5RW8FdnFzCY3qGswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1poMFphRVVwa1hIZzVSVzhG
ZG5GekNZM3FHcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wd8wDQYJKoZIhvcNAQELBQADggEBAJHZ2iM9wmsqQq02lo1Iv5d/kTDJp/nkVUFr
V2tPpNUa2JZioWiISUphvu4gEQ+mODU/O1UFXGH4bKOXMjBSWJ4oWSojYZIiagHq
U14Gfz523hI+0YsyrJvV2kaX3PYpPP1zprOMIJER8Otq+1wVzxrWnI7KvL5jh5Ew
UWVstncVT8SKlZsUxPI9cfIrRm7v3cNes+vRixiPpmjqZzbjL3YMxTIcVnxLbgzb
XU1OBvp1F2OydR1uk+LImImLDoYojVGBzs9Zagz6shsfBTXbFSS02JWlJJJTLHwj
CN2Nq5yUzZi3rHyGn60eQmt9rwgQyaKvjbKqaKz1cHXN5nlhjas=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:44 2025 by rpki-client