Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e1MU4evKpQTlddBgGYSO_7gDO_Q.roa
File: e1MU4evKpQTlddBgGYSO_7gDO_Q.roa (raw, json)
Hash identifier: xI3LuHm244L6jqq7iaizQBLkfBmgdM/FBZcoVxxUm5w=
Subject key identifier: 7B:53:14:E1:EB:CA:A5:04:E5:75:D0:60:19:84:8E:FF:B8:03:3B:F4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 220E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e1MU4evKpQTlddBgGYSO_7gDO_Q.roa
Signing time: Fri 25 Nov 2022 04:40:43 +0000
ROA not before: Fri 25 Nov 2022 04:40:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8718 (0x220e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7B5314E1EBCAA504E575D06019848EFFB8033BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:60:cc:94:84:86:73:e3:db:44:70:aa:dd:
ce:95:19:03:c2:fc:bc:00:b6:0e:b7:77:c9:e0:f3:
76:eb:9f:e1:62:a0:c0:56:4e:3b:13:8e:d0:b0:23:
6c:95:c7:58:c4:a1:ff:44:49:e0:10:77:8f:f1:d5:
41:4e:19:36:01:26:dc:cf:b3:62:84:2d:e9:ce:12:
33:9a:65:aa:cd:10:66:25:be:17:af:38:c3:60:2c:
5c:5e:77:7f:25:fb:56:af:2e:24:da:ba:27:d0:b0:
48:2e:07:7e:cb:7e:ac:1d:d2:c6:9f:6a:f3:99:15:
8a:c3:01:f5:17:a3:1a:39:8a:e9:2a:6c:e6:62:1e:
ff:12:e7:62:ee:f2:01:1a:bd:7f:5a:a3:c5:b9:f3:
77:53:d8:da:7f:33:af:d1:e7:4b:d5:83:2b:64:c2:
f4:9c:18:85:8c:42:17:df:49:70:43:92:ad:ed:cd:
83:ef:df:71:0e:33:9a:2b:e1:56:8a:b8:d1:ba:e7:
f2:65:45:11:f2:9a:a4:d3:13:1d:cf:02:ba:34:cd:
7d:b1:3a:dc:59:61:37:20:61:54:ce:fd:99:dd:d1:
a6:95:d4:79:e7:5f:6b:b1:a3:5d:ad:38:d8:fe:3e:
0c:f2:0e:cf:52:d1:15:7f:b5:e6:8e:9d:0a:ac:65:
b0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:53:14:E1:EB:CA:A5:04:E5:75:D0:60:19:84:8E:FF:B8:03:3B:F4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e1MU4evKpQTlddBgGYSO_7gDO_Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.20.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:48:58:c8:20:26:f7:ed:12:a4:3e:de:0a:2f:eb:b9:e7:ef:
27:33:6d:63:41:b8:36:56:fe:b2:c1:84:b2:39:7b:d8:66:02:
55:d3:d2:ff:b0:da:67:9d:f9:59:08:3f:f8:b2:1a:cb:54:f0:
46:1d:d1:d5:cf:81:40:20:e0:b8:c4:d4:ef:36:b0:e9:77:00:
7c:98:dc:a1:ba:1b:8f:7a:34:04:6d:81:b8:30:32:c9:99:47:
45:4c:ef:a4:72:08:d5:58:d6:89:8b:dd:72:bd:2b:fd:9b:31:
e1:0c:f3:d8:02:51:7c:73:6a:fc:27:05:27:56:33:1c:fc:ba:
ac:1c:a8:85:b6:ee:34:a9:64:57:fe:e4:ef:31:41:12:bb:be:
17:5a:e0:c8:76:6a:29:20:d2:2d:46:2d:56:cd:9c:b0:c8:a5:
ff:4a:87:f1:f7:fe:75:b3:fb:55:c9:e9:58:eb:0e:5e:02:7e:
5f:16:a9:c8:72:00:91:79:5d:a6:d2:81:3d:5c:2d:07:86:4b:
e6:e3:3a:11:06:f4:3b:56:f2:cd:2d:40:3d:89:4b:9f:1b:81:
85:e8:28:ec:5d:1b:b7:37:6f:8a:ab:44:ed:88:c0:59:c5:15:
c1:61:b7:38:c4:fc:02:66:f1:7d:46:4f:c2:94:a0:1e:7a:fb:
af:57:1f:0c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIg4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwNDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDdCNTMxNEUxRUJDQUE1
MDRFNTc1RDA2MDE5ODQ4RUZGQjgwMzNCRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBS2DMlISGc+PbRHCq3c6VGQPC/LwAtg63d8ng83brn+FioMBW
TjsTjtCwI2yVx1jEof9ESeAQd4/x1UFOGTYBJtzPs2KELenOEjOaZarNEGYlvhev
OMNgLFxed38l+1avLiTauifQsEguB37Lfqwd0safavOZFYrDAfUXoxo5iukqbOZi
Hv8S52Lu8gEavX9ao8W583dT2Np/M6/R50vVgytkwvScGIWMQhffSXBDkq3tzYPv
33EOM5or4VaKuNG65/JlRRHymqTTEx3PAro0zX2xOtxZYTcgYVTO/Znd0aaV1Hnn
X2uxo12tONj+PgzyDs9S0RV/teaOnQqsZbD1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUe1MU4evKpQTlddBgGYSO/7gDO/QwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2UxTVU0ZXZLcFFUbGRkQmdH
WVNPXzdnRE9fUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wxQwDQYJKoZIhvcNAQELBQADggEBAApIWMggJvftEqQ+3gov67nn7yczbWNBuDZW
/rLBhLI5e9hmAlXT0v+w2med+VkIP/iyGstU8EYd0dXPgUAg4LjE1O82sOl3AHyY
3KG6G496NARtgbgwMsmZR0VM76RyCNVY1omL3XK9K/2bMeEM89gCUXxzavwnBSdW
Mxz8uqwcqIW27jSpZFf+5O8xQRK7vhda4Mh2aikg0i1GLVbNnLDIpf9Kh/H3/nWz
+1XJ6VjrDl4Cfl8WqchyAJF5XabSgT1cLQeGS+bjOhEG9DtW8s0tQD2JS58bgYXo
KOxdG7c3b4qrRO2IwFnFFcFhtzjE/AJm8X1GT8KUoB56+69XHww=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org