Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_fb6WD3DRu1iunZPK8VnOGmg4P0.roa
File: _fb6WD3DRu1iunZPK8VnOGmg4P0.roa (raw, json)
Hash identifier: 8Wg82GBqRkdX9MoZkVvRfJ1EGc0Ie9B0fy9ON3+OK54=
Subject key identifier: FD:F6:FA:58:3D:C3:46:ED:62:BA:76:4F:2B:C5:67:38:69:A0:E0:FD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1E39
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_fb6WD3DRu1iunZPK8VnOGmg4P0.roa
Signing time: Wed 27 Apr 2022 08:39:04 +0000
ROA not before: Wed 27 Apr 2022 08:39:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7737 (0x1e39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Apr 27 08:39:04 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=FDF6FA583DC346ED62BA764F2BC5673869A0E0FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:3c:07:49:b7:da:75:40:ec:6f:10:c5:55:
6d:77:5b:21:8e:e1:c9:2f:18:cd:59:2f:4a:e7:d6:
56:ff:b6:36:f0:d8:4b:ea:90:b7:6d:62:d6:e1:b0:
54:70:ab:b3:08:7d:28:31:4e:62:96:f6:6b:bf:04:
ff:c0:fb:62:91:5d:d2:73:01:31:93:9d:62:17:12:
98:a3:e7:b2:53:e1:7a:f0:61:33:58:77:19:e3:37:
9c:59:bc:5b:fa:f9:11:e0:4e:bb:1a:2a:fa:bd:44:
de:c9:a5:3c:69:8c:63:1d:47:48:3f:f0:15:75:b3:
49:25:de:a6:cc:81:c5:39:22:a4:b9:d0:df:47:84:
b8:11:1b:ed:53:cc:95:4b:54:d3:55:ee:ac:fb:00:
48:9d:a6:15:5e:72:73:72:4a:db:3e:f6:73:70:83:
ee:92:7f:c2:ed:17:72:c0:50:66:b6:b5:b0:9d:c7:
7b:ae:97:7a:95:4f:b8:13:d7:1e:af:bd:60:b5:08:
e2:d0:da:96:dc:06:56:f9:51:c9:f8:63:f2:2c:ce:
df:ea:b8:db:7e:df:ff:94:b2:fa:47:4e:d6:61:43:
f8:01:2d:aa:76:6e:9f:b2:b6:b3:59:7b:e8:4e:69:
96:f8:42:c6:f9:98:23:16:6b:a3:97:02:72:81:af:
69:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F6:FA:58:3D:C3:46:ED:62:BA:76:4F:2B:C5:67:38:69:A0:E0:FD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_fb6WD3DRu1iunZPK8VnOGmg4P0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.232.0/22
Signature Algorithm: sha256WithRSAEncryption
49:f7:b3:be:d9:57:8d:a6:68:9d:24:86:16:9d:08:a3:c0:0e:
c9:7a:af:37:3d:55:b3:9d:d3:56:7e:59:03:a8:ab:3e:ce:ab:
14:81:7e:55:2f:63:a7:72:48:8d:5b:76:d7:75:8d:bd:d0:d0:
d3:b6:52:56:c2:fc:bb:33:4b:3f:bf:64:fe:ff:9e:74:2d:b3:
93:b8:e7:63:61:51:45:5c:4d:ff:f5:3e:be:01:b2:fc:c5:98:
e6:96:66:ad:aa:7a:cb:88:30:2f:28:e3:0a:e6:0d:06:64:a5:
69:4a:88:9d:ca:63:cd:45:99:19:cf:de:63:3f:89:58:1e:8f:
2f:c5:e6:3f:89:d4:83:bd:b9:d6:21:e2:e6:46:7f:57:00:7e:
72:f4:82:15:f7:7a:2b:3d:f8:74:81:53:e7:3c:75:2b:92:6d:
8b:f6:a4:38:cf:8f:c4:97:cb:e1:f6:c2:2b:14:eb:44:81:53:
0c:a0:06:7b:10:2a:5d:9e:a9:90:9d:26:ae:b1:de:54:21:4b:
69:be:75:9e:f3:4b:a4:2a:15:50:88:15:72:9f:f3:f2:d1:59:
34:3a:c8:15:49:76:81:8a:6b:d3:18:6e:6f:53:6b:55:06:8e:
8e:1f:ba:9e:8e:6e:26:25:f9:6e:d5:de:ed:b9:d0:61:c8:0a:
6f:6b:0b:e2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHjkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA0Mjcw
ODM5MDRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEZERjZGQTU4M0RDMzQ2
RUQ2MkJBNzY0RjJCQzU2NzM4NjlBMEUwRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDE/TwHSbfadUDsbxDFVW13WyGO4ckvGM1ZL0rn1lb/tjbw2Evq
kLdtYtbhsFRwq7MIfSgxTmKW9mu/BP/A+2KRXdJzATGTnWIXEpij57JT4XrwYTNY
dxnjN5xZvFv6+RHgTrsaKvq9RN7JpTxpjGMdR0g/8BV1s0kl3qbMgcU5IqS50N9H
hLgRG+1TzJVLVNNV7qz7AEidphVecnNySts+9nNwg+6Sf8LtF3LAUGa2tbCdx3uu
l3qVT7gT1x6vvWC1COLQ2pbcBlb5Ucn4Y/Iszt/quNt+3/+UsvpHTtZhQ/gBLap2
bp+ytrNZe+hOaZb4Qsb5mCMWa6OXAnKBr2lxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/fb6WD3DRu1iunZPK8VnOGmg4P0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19mYjZXRDNEUnUxaXVuWlBL
OFZuT0dtZzRQMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wegwDQYJKoZIhvcNAQELBQADggEBAEn3s77ZV42maJ0khhadCKPADsl6rzc9VbOd
01Z+WQOoqz7OqxSBflUvY6dySI1bdtd1jb3Q0NO2UlbC/LszSz+/ZP7/nnQts5O4
52NhUUVcTf/1Pr4BsvzFmOaWZq2qesuIMC8o4wrmDQZkpWlKiJ3KY81FmRnP3mM/
iVgejy/F5j+J1IO9udYh4uZGf1cAfnL0ghX3eis9+HSBU+c8dSuSbYv2pDjPj8SX
y+H2wisU60SBUwygBnsQKl2eqZCdJq6x3lQhS2m+dZ7zS6QqFVCIFXKf8/LRWTQ6
yBVJdoGKa9MYbm9Ta1UGjo4fup6ObiYl+W7V3u250GHICm9rC+I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org