Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e8cxxSZ8SfJgCowbu9GQ5hJ4auc.roa
File: e8cxxSZ8SfJgCowbu9GQ5hJ4auc.roa (raw, json)
Hash identifier: gZt22oO2y/UWA/AqhbA6kyUhMzBpVCnQH5yRPEd4CSQ=
Subject key identifier: 7B:C7:31:C5:26:7C:49:F2:60:0A:8C:1B:BB:D1:90:E6:12:78:6A:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e8cxxSZ8SfJgCowbu9GQ5hJ4auc.roa
Signing time: Thu 15 Sep 2022 02:53:00 +0000
ROA not before: Thu 15 Sep 2022 02:53:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7BC731C5267C49F2600A8C1BBBD190E612786AE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:73:0e:e4:3c:68:78:0c:6e:17:05:a7:a5:dc:
46:ee:b0:e8:ab:92:fb:e9:26:b5:54:d6:c7:f0:c8:
ba:7f:30:3c:c0:99:54:9c:dc:83:9b:e4:44:a5:34:
6d:69:3c:dc:58:12:27:4c:6e:35:2f:04:26:c6:51:
c1:f7:20:59:9e:46:e2:67:99:50:c0:63:bf:f3:8f:
8b:b5:db:34:a2:26:e6:4f:c4:5e:97:ad:4c:2e:68:
03:9d:ea:1e:a4:b7:01:9f:d6:6a:13:98:ad:d3:be:
b8:8a:24:2d:af:fc:7e:92:0f:d8:79:e0:94:d3:d2:
fa:b0:8b:c8:f0:86:f9:c3:f6:5a:be:07:6d:12:d0:
15:78:bc:a4:fe:73:ad:f3:09:94:fd:fd:77:e8:a9:
c0:45:27:33:25:35:b1:e4:3b:c3:e7:8d:9b:e1:34:
31:c7:fb:c1:39:4c:cb:75:1d:c5:83:00:35:31:64:
d6:af:8d:9d:5e:e2:cd:57:21:ae:9c:49:cd:22:9d:
37:db:91:10:2a:c0:ba:46:a2:92:01:fa:b5:0e:74:
a5:12:c6:53:41:a7:5a:5f:18:34:5e:7d:88:8b:3a:
28:21:01:bb:db:17:11:7f:d9:d7:7b:8b:fe:ce:3f:
9f:cd:e9:d2:bc:f8:0e:62:79:db:3a:ed:25:2a:07:
59:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C7:31:C5:26:7C:49:F2:60:0A:8C:1B:BB:D1:90:E6:12:78:6A:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e8cxxSZ8SfJgCowbu9GQ5hJ4auc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:2b:ef:a6:6c:66:de:e9:52:08:32:ee:14:4d:98:16:66:19:
f2:5c:1c:c9:a7:1c:d9:f8:95:34:6d:35:86:0b:87:78:43:02:
a4:8f:01:a7:18:fc:b8:eb:76:74:c4:13:40:fc:8a:c1:fb:be:
c2:f2:10:d2:04:d3:f3:90:1f:40:96:9c:5e:f1:23:41:a9:89:
d3:2f:92:f1:06:07:97:72:30:68:bb:b8:ae:0a:4b:5e:2b:a4:
f5:45:93:08:c8:ec:68:cf:e6:d9:14:75:dd:6e:50:35:9e:90:
37:10:c0:92:b1:4d:93:b0:d1:08:63:a1:b6:79:b6:7b:a1:eb:
07:eb:69:7d:b2:5f:29:d2:05:15:97:27:d5:1c:e1:77:bf:74:
80:2a:49:dd:0d:46:89:d9:88:b8:e8:d8:d9:32:38:d9:2a:86:
c5:5e:6c:43:c4:4b:75:78:43:3c:42:d8:20:5d:30:31:54:85:
4c:b6:0b:45:76:1d:0c:3a:fc:eb:22:32:43:ea:a0:4d:96:d4:
0b:68:55:a3:22:c8:bd:e0:58:ea:05:54:40:00:44:75:10:fa:
d6:de:b3:11:28:37:96:63:08:29:13:d5:d3:ee:2d:02:04:dc:
6a:b4:69:92:6f:dd:de:00:3a:7f:fc:e5:55:27:18:cf:e3:b9:
80:e2:41:dc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzMDBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDdCQzczMUM1MjY3QzQ5
RjI2MDBBOEMxQkJCRDE5MEU2MTI3ODZBRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjcw7kPGh4DG4XBael3EbusOirkvvpJrVU1sfwyLp/MDzAmVSc
3IOb5ESlNG1pPNxYEidMbjUvBCbGUcH3IFmeRuJnmVDAY7/zj4u12zSiJuZPxF6X
rUwuaAOd6h6ktwGf1moTmK3TvriKJC2v/H6SD9h54JTT0vqwi8jwhvnD9lq+B20S
0BV4vKT+c63zCZT9/XfoqcBFJzMlNbHkO8PnjZvhNDHH+8E5TMt1HcWDADUxZNav
jZ1e4s1XIa6cSc0inTfbkRAqwLpGopIB+rUOdKUSxlNBp1pfGDRefYiLOighAbvb
FxF/2dd7i/7OP5/N6dK8+A5ieds67SUqB1kNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUe8cxxSZ8SfJgCowbu9GQ5hJ4aucwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2U4Y3h4U1o4U2ZKZ0Nvd2J1
OUdRNWhKNGF1Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wQQwDQYJKoZIhvcNAQELBQADggEBAC8r76ZsZt7pUggy7hRNmBZmGfJcHMmnHNn4
lTRtNYYLh3hDAqSPAacY/LjrdnTEE0D8isH7vsLyENIE0/OQH0CWnF7xI0GpidMv
kvEGB5dyMGi7uK4KS14rpPVFkwjI7GjP5tkUdd1uUDWekDcQwJKxTZOw0QhjobZ5
tnuh6wfraX2yXynSBRWXJ9Uc4Xe/dIAqSd0NRonZiLjo2NkyONkqhsVebEPES3V4
QzxC2CBdMDFUhUy2C0V2HQw6/OsiMkPqoE2W1AtoVaMiyL3gWOoFVEAARHUQ+tbe
sxEoN5ZjCCkT1dPuLQIE3Gq0aZJv3d4AOn/85VUnGM/juYDiQdw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:17 2025 by rpki-client