Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kYfHHJK0jPA1l2P91_GJUkQs0xo.roa
File: kYfHHJK0jPA1l2P91_GJUkQs0xo.roa (raw, json)
Hash identifier: w1vcsEnLeUAateusfMTj+X2dFWXwe0KVvaoEs0oYMg8=
Subject key identifier: 91:87:C7:1C:92:B4:8C:F0:35:97:63:FD:D7:F1:89:52:44:2C:D3:1A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kYfHHJK0jPA1l2P91_GJUkQs0xo.roa
Signing time: Thu 15 Sep 2022 02:53:22 +0000
ROA not before: Thu 15 Sep 2022 02:53:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9187C71C92B48CF0359763FDD7F18952442CD31A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:8a:cb:b9:2f:37:04:6b:9f:f5:86:01:b4:
f7:f3:bf:0b:6d:02:fc:d9:a0:d5:5f:65:6d:f9:69:
09:b6:54:bb:78:66:11:5e:7f:e0:ae:ae:fb:33:8c:
02:49:e5:18:9f:29:85:69:a8:02:01:42:55:81:07:
6e:67:f6:97:a7:cd:a7:a7:50:14:0d:d3:38:20:26:
46:c4:ba:88:fe:58:9c:35:7b:42:bd:69:b3:d9:21:
20:2d:94:75:29:13:50:db:a6:78:68:d8:22:ee:c4:
ab:64:1b:61:f7:e1:3a:f4:17:f8:9d:83:0c:ee:bc:
b0:4f:2d:59:64:2f:d9:43:0c:50:56:f2:d9:76:58:
92:4d:bc:76:a5:d3:23:01:b3:23:43:7d:c1:5d:72:
0b:34:17:d7:c6:29:ea:0a:84:77:69:d5:2f:ae:18:
e8:22:dd:5d:79:15:c9:d3:f2:b0:55:6a:1f:0e:ad:
5b:63:60:e8:88:3a:25:1f:02:f5:fa:53:da:c8:25:
63:2a:54:d6:c7:69:4e:0e:83:94:ab:1b:04:78:67:
ae:a8:ca:7b:36:1d:72:fe:0e:5e:34:74:e8:ca:92:
88:dd:bc:00:0c:ed:1a:8c:56:5f:14:74:6e:9c:6a:
72:21:66:aa:50:4b:c2:29:4a:b7:32:25:b2:5c:66:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:87:C7:1C:92:B4:8C:F0:35:97:63:FD:D7:F1:89:52:44:2C:D3:1A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kYfHHJK0jPA1l2P91_GJUkQs0xo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.248.0/21
Signature Algorithm: sha256WithRSAEncryption
12:be:5f:94:70:06:7b:c9:37:1c:90:ba:e4:db:a0:78:e2:4b:
13:0e:79:eb:46:71:14:82:c0:2c:8a:cd:a4:3a:0c:bf:be:b2:
ab:2c:b3:7a:de:b1:01:3e:86:34:b8:41:18:8f:ef:16:9c:f8:
b2:86:83:3a:f9:ed:d1:da:c1:da:79:aa:83:47:b1:bc:69:59:
32:00:94:1c:4c:84:a8:5b:da:3f:43:9c:50:8e:52:d6:d3:09:
5e:72:97:e6:f6:9e:cb:5f:ed:6f:0b:2b:87:b9:bc:82:61:ce:
8b:a1:02:06:4f:9a:c7:87:ed:40:d6:6a:13:8c:48:f6:a8:4b:
02:3d:6f:59:bb:05:af:97:92:64:ca:a2:4e:74:92:cb:a6:a1:
2f:81:d5:71:42:89:53:a5:97:19:66:a1:01:4b:b6:24:e3:fb:
34:17:14:b0:0c:d1:94:51:2e:76:20:a8:16:6a:ee:f2:1b:69:
19:dc:18:e9:cb:02:4f:fc:66:af:4e:da:ac:23:a6:ba:f8:05:
6e:8b:bd:ad:34:b1:88:ef:f9:90:53:95:d5:ed:77:05:8b:5d:
ea:13:2c:0b:59:f4:fc:8c:35:85:90:f5:5f:b0:31:6b:9a:f7:
80:15:36:8d:de:02:cc:8f:29:97:e5:ab:2d:20:3b:c8:a7:ba:
6b:2f:2e:8d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzMjJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDkxODdDNzFDOTJCNDhD
RjAzNTk3NjNGREQ3RjE4OTUyNDQyQ0QzMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYcorLuS83BGuf9YYBtPfzvwttAvzZoNVfZW35aQm2VLt4ZhFe
f+CurvszjAJJ5RifKYVpqAIBQlWBB25n9penzaenUBQN0zggJkbEuoj+WJw1e0K9
abPZISAtlHUpE1Dbpnho2CLuxKtkG2H34Tr0F/idgwzuvLBPLVlkL9lDDFBW8tl2
WJJNvHal0yMBsyNDfcFdcgs0F9fGKeoKhHdp1S+uGOgi3V15FcnT8rBVah8OrVtj
YOiIOiUfAvX6U9rIJWMqVNbHaU4Og5SrGwR4Z66oyns2HXL+Dl40dOjKkojdvAAM
7RqMVl8UdG6canIhZqpQS8IpSrcyJbJcZug7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkYfHHJK0jPA1l2P91/GJUkQs0xowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tZZkhISkswalBBMWwyUDkx
X0dKVWtRczB4by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wfgwDQYJKoZIhvcNAQELBQADggEBABK+X5RwBnvJNxyQuuTboHjiSxMOeetGcRSC
wCyKzaQ6DL++sqsss3resQE+hjS4QRiP7xac+LKGgzr57dHawdp5qoNHsbxpWTIA
lBxMhKhb2j9DnFCOUtbTCV5yl+b2nstf7W8LK4e5vIJhzouhAgZPmseH7UDWahOM
SPaoSwI9b1m7Ba+XkmTKok50ksumoS+B1XFCiVOllxlmoQFLtiTj+zQXFLAM0ZRR
LnYgqBZq7vIbaRncGOnLAk/8Zq9O2qwjprr4BW6Lva00sYjv+ZBTldXtdwWLXeoT
LAtZ9PyMNYWQ9V+wMWua94AVNo3eAsyPKZflqy0gO8inumsvLo0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org