Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/asO8OqBK_tt5CnRJyAOGUivxhNY.roa
File: asO8OqBK_tt5CnRJyAOGUivxhNY.roa (raw, json)
Hash identifier: qoeCGMNxPNLabrGU3esi65+29csQGFm1ehiRErkGZnA=
Subject key identifier: 6A:C3:BC:3A:A0:4A:FE:DB:79:0A:74:49:C8:03:86:52:2B:F1:84:D6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1483
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/asO8OqBK_tt5CnRJyAOGUivxhNY.roa
Signing time: Sun 07 Feb 2021 11:58:56 +0000
ROA not before: Sun 07 Feb 2021 11:58:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5251 (0x1483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:58:56 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6AC3BC3AA04AFEDB790A7449C80386522BF184D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:f3:b6:df:c9:e7:01:a6:85:ab:28:b2:c5:
e8:e0:d3:3b:54:72:96:21:19:32:b1:6b:b3:3e:74:
6c:44:91:bd:7c:c0:55:1d:22:ff:bd:af:b7:af:0b:
05:6f:5e:b0:1c:f9:68:4c:66:e8:f4:bb:dd:8f:74:
02:e3:b7:5e:89:49:3d:01:b6:f6:54:48:33:53:e7:
a8:2a:13:28:3b:51:fb:a3:20:2e:2a:73:f1:b7:0c:
e5:11:f2:8c:e9:65:0c:92:07:75:1a:f0:93:e5:55:
9b:13:ca:e4:32:43:6c:08:15:8b:d9:f2:c2:b5:87:
fe:35:cd:2e:6c:e3:ef:b1:48:2a:2c:3f:cc:f7:b4:
01:76:00:bf:bf:fd:6d:65:2e:e9:d2:f5:3e:35:0c:
47:45:33:62:fa:4b:f1:cd:16:3b:3b:50:1e:b1:48:
54:76:87:fe:04:56:27:3e:6f:3d:a8:3c:06:49:b2:
83:08:b5:c2:03:59:2e:29:33:bf:25:96:03:8e:2c:
d0:5b:ca:3b:cc:8f:d9:1a:c6:5a:b6:3e:ba:ab:34:
47:3e:18:e8:f4:b3:50:2e:58:f1:90:62:37:c6:75:
8a:58:32:fc:f0:13:2a:c1:9d:dc:a3:da:a5:da:1a:
61:50:d2:81:20:e5:97:81:71:e6:fe:04:70:a0:4c:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C3:BC:3A:A0:4A:FE:DB:79:0A:74:49:C8:03:86:52:2B:F1:84:D6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/asO8OqBK_tt5CnRJyAOGUivxhNY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.188.0/22
Signature Algorithm: sha256WithRSAEncryption
32:95:a3:20:f3:e3:bf:b3:60:37:75:02:12:ec:fc:d6:cc:d2:
ef:49:2c:4d:18:7c:26:92:02:a1:19:66:ce:63:33:4c:d9:af:
15:d1:cc:87:49:64:69:94:48:7c:59:9d:ed:90:aa:5c:a7:a3:
97:f3:8c:b0:7d:85:c8:b1:e3:e4:98:5d:d7:3f:50:97:cd:82:
96:d4:48:0f:12:2e:b5:18:52:11:30:11:f7:7a:b9:e6:a5:b6:
43:31:b9:93:41:94:e0:e9:40:38:4a:c1:fb:44:00:6a:11:45:
2c:6a:ff:44:97:2f:eb:19:99:cf:40:05:92:b0:bc:19:f8:47:
5c:ad:c3:06:5e:76:f1:00:89:f2:ce:ba:51:07:ad:15:a3:f8:
6b:25:bb:88:92:32:a2:bf:e0:5e:3e:87:84:dc:5f:f6:ff:87:
93:fe:13:65:56:ce:34:86:aa:2f:38:6d:ff:1f:7c:a8:3b:f0:
df:8b:c0:5d:ab:0c:fa:54:34:c4:53:ba:6b:5d:b7:b3:40:7b:
27:cf:db:24:d6:2b:fe:e9:d5:ce:dd:44:b1:d2:67:2a:6e:de:
0f:df:77:64:62:fe:60:2c:f9:55:02:73:13:0e:6e:4f:d2:58:
98:5b:12:31:7d:70:ec:f9:e7:ae:8f:88:72:4b:ef:4a:57:a5:
fd:99:82:1a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFIMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU4NTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDZBQzNCQzNBQTA0QUZF
REI3OTBBNzQ0OUM4MDM4NjUyMkJGMTg0RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClO/O238nnAaaFqyiyxejg0ztUcpYhGTKxa7M+dGxEkb18wFUd
Iv+9r7evCwVvXrAc+WhMZuj0u92PdALjt16JST0BtvZUSDNT56gqEyg7UfujIC4q
c/G3DOUR8ozpZQySB3Ua8JPlVZsTyuQyQ2wIFYvZ8sK1h/41zS5s4++xSCosP8z3
tAF2AL+//W1lLunS9T41DEdFM2L6S/HNFjs7UB6xSFR2h/4EVic+bz2oPAZJsoMI
tcIDWS4pM78llgOOLNBbyjvMj9kaxlq2PrqrNEc+GOj0s1AuWPGQYjfGdYpYMvzw
EyrBndyj2qXaGmFQ0oEg5ZeBceb+BHCgTOkTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUasO8OqBK/tt5CnRJyAOGUivxhNYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FzTzhPcUJLX3R0NUNuUkp5
QU9HVWl2eGhOWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wrwwDQYJKoZIhvcNAQELBQADggEBADKVoyDz47+zYDd1AhLs/NbM0u9JLE0YfCaS
AqEZZs5jM0zZrxXRzIdJZGmUSHxZne2Qqlyno5fzjLB9hcix4+SYXdc/UJfNgpbU
SA8SLrUYUhEwEfd6uealtkMxuZNBlODpQDhKwftEAGoRRSxq/0SXL+sZmc9ABZKw
vBn4R1ytwwZedvEAifLOulEHrRWj+Gslu4iSMqK/4F4+h4TcX/b/h5P+E2VWzjSG
qi84bf8ffKg78N+LwF2rDPpUNMRTumtdt7NAeyfP2yTWK/7p1c7dRLHSZypu3g/f
d2Ri/mAs+VUCcxMObk/SWJhbEjF9cOz5566PiHJL70pXpf2Zgho=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org