Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iGRbyjb38MhSj1J9kKdubtffxH8.roa
File: iGRbyjb38MhSj1J9kKdubtffxH8.roa (raw, json)
Hash identifier: PruNa9UbbS/UBorSbUv2hpDF2xPnnm+B7nAu2lleGSs=
Subject key identifier: 88:64:5B:CA:36:F7:F0:C8:52:8F:52:7D:90:A7:6E:6E:D7:DF:C4:7F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iGRbyjb38MhSj1J9kKdubtffxH8.roa
Signing time: Thu 15 Sep 2022 02:45:06 +0000
ROA not before: Thu 15 Sep 2022 02:45:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=88645BCA36F7F0C8528F527D90A76E6ED7DFC47F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:48:ad:17:a2:69:16:4b:11:f2:4e:1c:f0:da:
e8:bd:ff:b7:ec:f8:40:f5:50:84:92:34:f2:46:3a:
67:7c:88:b3:af:65:cc:e9:33:6e:6a:61:d7:54:cb:
c0:c7:3b:a8:ee:ea:9a:39:c7:a9:4a:46:cf:fb:a5:
01:93:4b:8e:5f:de:30:ac:37:e2:f2:e8:c1:d6:9e:
ab:84:76:bf:37:11:48:c1:88:48:be:f8:e7:db:d1:
ad:51:d4:54:f1:73:c9:49:48:82:82:27:e4:0e:e7:
b8:6f:2e:b8:62:bc:e9:b4:8c:40:b0:15:64:dd:1b:
6a:44:c5:38:53:8d:a4:02:5c:6d:b6:19:94:8b:5c:
94:9d:4b:5c:c8:15:4f:c5:94:55:0e:10:10:96:c0:
5c:3f:43:4d:55:24:4f:81:3e:03:6b:dc:c4:d2:11:
6e:61:bc:73:44:ea:a3:82:ca:ce:46:1b:7b:4e:36:
c3:c2:20:58:55:fc:c4:41:85:3a:52:3e:dc:56:2b:
15:fa:56:5d:cc:04:31:33:8d:9c:c6:d6:24:95:e4:
cc:7c:07:44:be:d4:a0:e1:36:dc:9a:54:44:f1:37:
dd:c4:8f:59:99:34:6d:0c:8a:c9:66:4b:00:e7:9f:
9a:12:66:7e:19:5c:31:6f:44:db:8d:54:1f:88:76:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:64:5B:CA:36:F7:F0:C8:52:8F:52:7D:90:A7:6E:6E:D7:DF:C4:7F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iGRbyjb38MhSj1J9kKdubtffxH8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.168.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:63:7b:27:22:f3:3b:5c:6f:fd:8f:b8:0e:e4:69:2c:9c:07:
81:d9:6c:3b:4d:c3:0b:ea:2e:14:75:e8:8d:b0:9b:0c:0a:3b:
7c:d6:a3:57:6c:e8:1d:20:2d:8c:7f:74:8e:ae:71:f7:f2:3a:
46:a7:ce:70:13:33:52:41:b6:56:01:8e:d0:bc:a9:8b:4e:cf:
0e:f8:0c:be:ca:b9:25:af:3b:8e:50:e0:1e:99:9c:20:95:9e:
89:5a:66:ad:17:e1:99:88:33:f4:a4:5b:9a:81:20:38:59:b5:
86:89:d4:32:6e:d1:07:b4:81:dc:9c:36:ae:3d:ea:e8:6e:42:
d4:df:6a:88:ea:7f:d4:da:8c:a9:6b:d5:2a:91:ce:1f:42:21:
80:75:c0:01:c9:2d:4e:0d:c8:b4:df:ad:3a:28:4a:04:05:da:
60:2a:ee:37:19:71:b7:78:0c:9e:54:90:bd:15:99:53:ed:2d:
0d:94:1c:7c:34:0f:54:33:19:cc:4a:b7:90:2a:fe:44:23:b5:
8d:70:f1:2e:0a:b4:43:e9:d2:64:4f:16:42:a5:22:dc:de:e4:
f3:d2:e8:86:45:f3:0e:27:b0:a0:d2:a1:9a:19:d2:4c:f6:29:
28:9b:28:9e:bd:6f:26:51:70:88:59:e5:6f:1b:ba:ae:c6:a0:
f4:19:c0:5c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDg4NjQ1QkNBMzZGN0Yw
Qzg1MjhGNTI3RDkwQTc2RTZFRDdERkM0N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYSK0XomkWSxHyThzw2ui9/7fs+ED1UISSNPJGOmd8iLOvZczp
M25qYddUy8DHO6ju6po5x6lKRs/7pQGTS45f3jCsN+Ly6MHWnquEdr83EUjBiEi+
+Ofb0a1R1FTxc8lJSIKCJ+QO57hvLrhivOm0jECwFWTdG2pExThTjaQCXG22GZSL
XJSdS1zIFU/FlFUOEBCWwFw/Q01VJE+BPgNr3MTSEW5hvHNE6qOCys5GG3tONsPC
IFhV/MRBhTpSPtxWKxX6Vl3MBDEzjZzG1iSV5Mx8B0S+1KDhNtyaVETxN93Ej1mZ
NG0MislmSwDnn5oSZn4ZXDFvRNuNVB+IdrfZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUiGRbyjb38MhSj1J9kKdubtffxH8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2lHUmJ5amIzOE1oU2oxSjlr
S2R1YnRmZnhIOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wqgwDQYJKoZIhvcNAQELBQADggEBAIxjeyci8ztcb/2PuA7kaSycB4HZbDtNwwvq
LhR16I2wmwwKO3zWo1ds6B0gLYx/dI6ucffyOkanznATM1JBtlYBjtC8qYtOzw74
DL7KuSWvO45Q4B6ZnCCVnolaZq0X4ZmIM/SkW5qBIDhZtYaJ1DJu0Qe0gdycNq49
6uhuQtTfaojqf9TajKlr1SqRzh9CIYB1wAHJLU4NyLTfrTooSgQF2mAq7jcZcbd4
DJ5UkL0VmVPtLQ2UHHw0D1QzGcxKt5Aq/kQjtY1w8S4KtEPp0mRPFkKlItze5PPS
6IZF8w4nsKDSoZoZ0kz2KSibKJ69byZRcIhZ5W8buq7GoPQZwFw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org