Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h35TWmR6lmCS1o21zMKCmAnslY4.roa
File: h35TWmR6lmCS1o21zMKCmAnslY4.roa (raw, json)
Hash identifier: kXGDDwcKr65Yr4fHsRzG+ZGDIhw4emyic5jfAVhZusQ=
Subject key identifier: 87:7E:53:5A:64:7A:96:60:92:D6:8D:B5:CC:C2:82:98:09:EC:95:8E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h35TWmR6lmCS1o21zMKCmAnslY4.roa
Signing time: Thu 15 Sep 2022 02:53:04 +0000
ROA not before: Thu 15 Sep 2022 02:53:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=877E535A647A966092D68DB5CCC2829809EC958E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:55:c1:28:ee:59:eb:7f:d8:31:78:3a:0a:
20:fe:6c:48:9d:2a:e3:f7:19:1f:4a:f5:10:a0:e4:
6b:3b:ff:10:93:45:5a:ff:e2:a7:29:18:fb:e1:d4:
68:9c:da:46:f5:df:9e:88:dc:25:68:92:83:58:3b:
54:ef:da:98:a1:3d:fb:4d:ad:c1:6d:5f:9d:79:d2:
77:c1:da:63:3b:3a:a9:70:4a:86:56:cc:45:d6:61:
13:6c:ca:d6:27:5f:9a:4e:5d:10:8e:9d:78:1d:ae:
2a:8e:a5:7e:3c:af:ce:f0:2c:37:a8:47:ce:a6:28:
9f:cd:48:2d:ac:10:23:00:5b:f4:73:af:19:85:b2:
0c:aa:79:ed:fd:c6:79:de:9d:1f:07:c6:9d:23:09:
a3:c6:ce:b4:4b:40:cb:22:ba:65:65:61:43:94:7e:
d3:76:f2:e9:8e:19:89:a5:18:cc:c4:68:a7:ab:ba:
43:b9:74:e5:98:c7:eb:43:5b:0b:29:33:4a:4c:6d:
7a:05:1c:29:71:df:2d:b6:27:74:e1:46:c5:db:7f:
8d:2d:35:2e:18:64:3a:26:62:8b:32:15:a7:a7:87:
a2:55:b3:b9:90:a5:80:1d:04:8f:d6:c1:33:a8:fd:
26:bf:c2:79:53:2b:01:d8:56:00:6a:24:34:00:5f:
37:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7E:53:5A:64:7A:96:60:92:D6:8D:B5:CC:C2:82:98:09:EC:95:8E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h35TWmR6lmCS1o21zMKCmAnslY4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.164.0/22
Signature Algorithm: sha256WithRSAEncryption
81:67:08:e7:8f:71:60:66:17:58:77:02:2d:69:22:7c:8e:de:
0f:46:ff:cb:e7:34:47:7a:26:5d:fb:8a:a8:57:8c:8c:13:3c:
49:b0:87:8b:c8:46:98:dd:9c:36:7b:66:dc:59:7f:d2:99:a4:
4a:5a:35:4f:15:31:83:58:48:7e:df:5c:13:6d:e1:7f:c8:e8:
f2:20:41:20:d3:ac:cc:ad:d4:4e:88:6d:7b:76:c9:a5:b8:34:
33:3e:7d:92:fd:bb:8a:33:22:d2:26:ab:53:02:0e:1e:ae:74:
7d:20:71:99:5b:fb:86:42:23:e4:09:fb:ed:ac:95:f7:57:38:
9c:56:7f:ae:89:da:b1:14:a0:02:54:af:8d:d4:16:3a:02:d4:
3c:95:63:1d:1b:f9:13:91:2e:6a:ae:0d:72:f2:d1:06:48:f5:
cf:78:d7:9e:15:81:ba:17:bf:c6:71:91:4f:09:88:c7:1a:75:
dc:f4:0d:67:b5:b0:03:37:7b:e0:11:81:d5:08:f6:8d:10:35:
15:00:29:53:36:49:d5:80:92:44:9a:b7:0f:91:b7:cf:af:b0:
4b:7b:7a:89:8e:c1:68:ab:7e:35:b0:8b:a6:72:8a:40:dc:ec:
0c:80:f8:5b:51:f1:27:30:76:0d:7a:f8:f6:08:b8:02:1b:90:
28:3c:33:4f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzMDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDg3N0U1MzVBNjQ3QTk2
NjA5MkQ2OERCNUNDQzI4Mjk4MDlFQzk1OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7MFXBKO5Z63/YMXg6CiD+bEidKuP3GR9K9RCg5Gs7/xCTRVr/
4qcpGPvh1Gic2kb1356I3CVokoNYO1Tv2pihPftNrcFtX5150nfB2mM7OqlwSoZW
zEXWYRNsytYnX5pOXRCOnXgdriqOpX48r87wLDeoR86mKJ/NSC2sECMAW/RzrxmF
sgyqee39xnnenR8Hxp0jCaPGzrRLQMsiumVlYUOUftN28umOGYmlGMzEaKerukO5
dOWYx+tDWwspM0pMbXoFHClx3y22J3ThRsXbf40tNS4YZDomYosyFaenh6JVs7mQ
pYAdBI/WwTOo/Sa/wnlTKwHYVgBqJDQAXzdTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUh35TWmR6lmCS1o21zMKCmAnslY4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2gzNVRXbVI2bG1DUzFvMjF6
TUtDbUFuc2xZNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wqQwDQYJKoZIhvcNAQELBQADggEBAIFnCOePcWBmF1h3Ai1pInyO3g9G/8vnNEd6
Jl37iqhXjIwTPEmwh4vIRpjdnDZ7ZtxZf9KZpEpaNU8VMYNYSH7fXBNt4X/I6PIg
QSDTrMyt1E6IbXt2yaW4NDM+fZL9u4ozItImq1MCDh6udH0gcZlb+4ZCI+QJ++2s
lfdXOJxWf66J2rEUoAJUr43UFjoC1DyVYx0b+RORLmquDXLy0QZI9c94154VgboX
v8ZxkU8JiMcaddz0DWe1sAM3e+ARgdUI9o0QNRUAKVM2SdWAkkSatw+Rt8+vsEt7
eomOwWirfjWwi6ZyikDc7AyA+FtR8Scwdg16+PYIuAIbkCg8M08=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org