Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_L2e1vDmiinJylIcdr9oEB5ExY8.roa
File: _L2e1vDmiinJylIcdr9oEB5ExY8.roa (raw, json)
Hash identifier: UfYOXQrP4l89N8iYdq3U6G1AEfx3qSxFzeeBhWiqUyw=
Subject key identifier: FC:BD:9E:D6:F0:E6:8A:29:C9:CA:52:1C:76:BF:68:10:1E:44:C5:8F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2109
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_L2e1vDmiinJylIcdr9oEB5ExY8.roa
Signing time: Fri 25 Nov 2022 04:39:25 +0000
ROA not before: Fri 25 Nov 2022 04:39:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8457 (0x2109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FCBD9ED6F0E68A29C9CA521C76BF68101E44C58F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:f0:a5:aa:bd:c9:57:9b:99:b1:a9:9c:d2:
3f:cb:c0:79:bb:6d:01:98:d8:a8:78:53:c8:fb:d7:
e0:79:d3:53:1f:ff:b5:cd:62:ea:e1:1d:02:0b:21:
2b:1d:24:94:cb:8f:64:8d:f7:48:34:2a:18:9c:d2:
9c:04:78:3a:25:16:80:dc:40:6c:82:fa:47:91:5d:
f8:f5:db:da:29:76:28:51:34:0c:47:1c:2f:ce:c4:
f3:09:0b:18:35:80:2f:88:9d:89:55:e0:79:08:f4:
42:5f:88:96:d6:ee:2f:e2:37:6e:56:52:c4:83:d9:
fa:eb:0f:d0:03:c0:11:2b:99:c1:4a:03:4f:14:13:
31:61:4b:3e:10:4a:dc:1d:bc:59:8a:9f:0b:43:bd:
1c:e2:d5:a6:07:26:96:8d:61:95:dd:04:01:51:86:
15:4f:4c:78:63:18:02:30:0b:ef:ef:c4:69:db:de:
8a:5b:a6:b1:c4:e0:5f:eb:e5:e1:e8:e5:4f:c9:a1:
e6:31:77:c3:60:81:1d:a4:df:cf:c6:cb:39:fb:d0:
2d:3a:57:c5:96:a4:ce:fa:21:f5:6b:f3:2f:34:1c:
6e:01:81:06:eb:56:65:84:47:e4:46:8d:25:4c:97:
bf:18:ef:0b:99:24:ef:be:17:cd:72:5a:8f:4e:4f:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BD:9E:D6:F0:E6:8A:29:C9:CA:52:1C:76:BF:68:10:1E:44:C5:8F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_L2e1vDmiinJylIcdr9oEB5ExY8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.111.0/24
Signature Algorithm: sha256WithRSAEncryption
75:0c:ce:6f:f5:60:47:d3:df:68:91:9a:a3:80:24:a6:4c:33:
8b:d6:4e:e9:c4:53:08:69:b5:47:cb:36:8e:f1:b6:dc:1a:ab:
60:d8:6f:5b:3b:aa:d7:ec:f9:53:43:f5:d9:28:17:f5:5a:eb:
21:f2:db:fb:b8:1c:88:78:0f:43:c1:27:d5:67:af:1f:e3:e0:
3b:6c:09:1a:c6:90:4d:5b:c3:ae:c3:48:7a:68:04:12:73:dc:
8a:50:38:3b:56:34:51:a2:89:28:97:e1:77:54:54:da:f7:3a:
69:af:c4:92:f7:93:9b:ed:e9:b5:72:20:0f:e3:da:34:98:17:
0c:06:2d:ab:49:40:30:6f:e8:46:4a:fe:e4:a4:e6:8a:e7:7b:
94:03:84:2d:0d:a6:0e:6c:28:f2:30:32:0c:39:c2:0b:fc:07:
f1:32:3a:cd:47:5d:90:b4:2e:0f:ed:ec:84:2e:b7:d9:79:95:
f8:d5:ff:fd:a3:43:b1:ec:86:d7:ec:1a:91:8c:38:96:0f:17:
64:ea:40:03:a2:a4:e6:7d:23:c6:04:ef:26:20:c5:26:18:aa:
43:db:15:e9:4c:b7:93:21:8e:4f:59:a4:ad:44:08:33:32:f2:
db:2e:69:21:ab:cb:f0:17:6f:16:17:90:1a:7d:4c:35:52:b9:
72:b3:5e:0a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIQkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MjVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZDQkQ5RUQ2RjBFNjhB
MjlDOUNBNTIxQzc2QkY2ODEwMUU0NEM1OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvgPClqr3JV5uZsamc0j/LwHm7bQGY2Kh4U8j71+B501Mf/7XN
YurhHQILISsdJJTLj2SN90g0Khic0pwEeDolFoDcQGyC+keRXfj129opdihRNAxH
HC/OxPMJCxg1gC+InYlV4HkI9EJfiJbW7i/iN25WUsSD2frrD9ADwBErmcFKA08U
EzFhSz4QStwdvFmKnwtDvRzi1aYHJpaNYZXdBAFRhhVPTHhjGAIwC+/vxGnb3opb
prHE4F/r5eHo5U/JoeYxd8NggR2k38/Gyzn70C06V8WWpM76IfVr8y80HG4BgQbr
VmWER+RGjSVMl78Y7wuZJO++F81yWo9OT5SdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/L2e1vDmiinJylIcdr9oEB5ExY8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19MMmUxdkRtaWluSnlsSWNk
cjlvRUI1RXhZOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wW8wDQYJKoZIhvcNAQELBQADggEBAHUMzm/1YEfT32iRmqOAJKZMM4vWTunEUwhp
tUfLNo7xttwaq2DYb1s7qtfs+VND9dkoF/Va6yHy2/u4HIh4D0PBJ9Vnrx/j4Dts
CRrGkE1bw67DSHpoBBJz3IpQODtWNFGiiSiX4XdUVNr3OmmvxJL3k5vt6bVyIA/j
2jSYFwwGLatJQDBv6EZK/uSk5orne5QDhC0Npg5sKPIwMgw5wgv8B/EyOs1HXZC0
Lg/t7IQut9l5lfjV//2jQ7HshtfsGpGMOJYPF2TqQAOipOZ9I8YE7yYgxSYYqkPb
FelMt5Mhjk9ZpK1ECDMy8tsuaSGry/AXbxYXkBp9TDVSuXKzXgo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org