Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/__HCuH_ogtS3zqatoHpWd8B5rvE.roa
File: __HCuH_ogtS3zqatoHpWd8B5rvE.roa (raw, json)
Hash identifier: PZWT0mDA6ejhdgHYpArvYbksJDcMmI6iB5pObMOeZVE=
Subject key identifier: FF:F1:C2:B8:7F:E8:82:D4:B7:CE:A6:AD:A0:7A:56:77:C0:79:AE:F1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20FE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/__HCuH_ogtS3zqatoHpWd8B5rvE.roa
Signing time: Fri 25 Nov 2022 04:39:22 +0000
ROA not before: Fri 25 Nov 2022 04:39:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.205.32/27 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8446 (0x20fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FFF1C2B87FE882D4B7CEA6ADA07A5677C079AEF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5a:83:8e:58:9f:a9:f1:eb:0c:00:02:87:2b:
81:17:56:32:99:66:07:91:93:08:b2:53:96:b2:e5:
1f:8c:4c:58:4c:f4:76:2c:bb:6e:ff:f5:0c:1b:06:
56:70:73:e4:60:8c:39:f2:f4:9f:cc:20:2d:b0:62:
3f:e4:9e:ec:e2:b0:43:89:7e:b6:bc:5e:da:d9:86:
e2:75:2f:df:74:33:7c:f3:29:bf:15:26:17:ad:9a:
59:7e:6e:0c:75:63:26:bc:7d:bf:d8:6e:8d:7f:8a:
da:08:f8:3b:5d:a2:a9:fc:0c:e7:97:7f:64:2c:94:
9f:0e:73:80:5a:6c:b4:95:ab:8b:4b:f7:85:04:4b:
d0:a9:a9:18:c5:30:71:00:6f:99:a2:04:61:e8:0f:
35:dc:6c:a4:ff:0f:fe:b0:f6:c7:da:98:b9:7a:f5:
1a:f2:97:cb:35:33:71:fd:fe:ba:13:ec:a3:74:98:
20:03:43:1c:79:98:70:f0:d3:ef:7e:79:f0:06:b4:
51:d2:eb:c6:40:a5:15:98:00:5f:dc:e7:5b:f8:54:
d9:70:65:e0:26:66:7d:87:ea:3e:ad:54:16:8c:22:
00:87:d3:c3:d7:08:d0:82:df:7e:c2:60:78:95:bd:
bf:b4:6d:e8:df:dc:24:33:f6:6d:59:89:6b:a8:92:
61:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F1:C2:B8:7F:E8:82:D4:B7:CE:A6:AD:A0:7A:56:77:C0:79:AE:F1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/__HCuH_ogtS3zqatoHpWd8B5rvE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.205.32/27
Signature Algorithm: sha256WithRSAEncryption
6c:75:85:63:0a:be:7e:95:14:05:4b:f8:c3:59:84:df:79:d3:
cf:a7:24:3a:36:69:47:25:b4:89:8b:e6:8e:56:2b:2f:b8:17:
a4:d4:69:eb:37:01:2f:52:35:df:ff:24:ec:8f:c9:63:ed:6e:
46:b6:53:69:e9:0c:c5:bc:08:10:cd:a8:e1:5b:e4:03:da:5b:
5e:8e:56:87:90:d3:1b:dd:cb:12:3b:4b:b8:52:7f:72:36:55:
af:df:66:35:be:8e:49:2b:09:0a:9f:b7:cf:57:93:7b:d7:6b:
59:de:2f:a8:ce:8f:a1:f5:56:0d:12:aa:86:91:f6:87:2c:33:
97:e1:34:84:cb:03:e4:80:ab:3c:7a:fe:5a:57:50:58:bc:cb:
97:ad:4a:ba:17:6e:3c:e0:53:a8:38:11:15:ee:9e:5e:8e:64:
f3:3d:12:78:cf:ae:9e:93:e0:15:55:27:2d:b0:6e:50:92:cd:
aa:ba:6d:94:aa:fb:82:72:57:f5:fb:78:0e:12:db:7b:14:db:
6f:5c:f0:b1:34:33:35:54:27:62:d5:f0:24:56:6c:75:d9:ed:
ec:9b:3d:83:64:fe:31:5d:8c:ec:2b:76:25:0b:5d:a5:68:ac:
07:3f:db:c1:52:6e:23:57:77:91:ed:a8:a0:7e:1d:7e:25:10:
06:40:9c:3e
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICIP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MjJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZGRjFDMkI4N0ZFODgy
RDRCN0NFQTZBREEwN0E1Njc3QzA3OUFFRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD3WoOOWJ+p8esMAAKHK4EXVjKZZgeRkwiyU5ay5R+MTFhM9HYs
u27/9QwbBlZwc+RgjDny9J/MIC2wYj/knuzisEOJfra8XtrZhuJ1L990M3zzKb8V
Jhetmll+bgx1Yya8fb/Ybo1/itoI+Dtdoqn8DOeXf2QslJ8Oc4BabLSVq4tL94UE
S9CpqRjFMHEAb5miBGHoDzXcbKT/D/6w9sfamLl69Rryl8s1M3H9/roT7KN0mCAD
Qxx5mHDw0+9+efAGtFHS68ZApRWYAF/c51v4VNlwZeAmZn2H6j6tVBaMIgCH08PX
CNCC337CYHiVvb+0bejf3CQz9m1ZiWuokmHNAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQU//HCuH/ogtS3zqatoHpWd8B5rvEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19fSEN1SF9vZ3RTM3pxYXRv
SHBXZDhCNXJ2RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQV7
ws0gMA0GCSqGSIb3DQEBCwUAA4IBAQBsdYVjCr5+lRQFS/jDWYTfedPPpyQ6NmlH
JbSJi+aOVisvuBek1GnrNwEvUjXf/yTsj8lj7W5GtlNp6QzFvAgQzajhW+QD2lte
jlaHkNMb3csSO0u4Un9yNlWv32Y1vo5JKwkKn7fPV5N712tZ3i+ozo+h9VYNEqqG
kfaHLDOX4TSEywPkgKs8ev5aV1BYvMuXrUq6F2484FOoOBEV7p5ejmTzPRJ4z66e
k+AVVSctsG5Qks2qum2UqvuCclf1+3gOEtt7FNtvXPCxNDM1VCdi1fAkVmx12e3s
mz2DZP4xXYzsK3YlC12laKwHP9vBUm4jV3eR7aigfh1+JRAGQJw+
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org