Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kxblyKzf1nCEDc2-7AfmBqLgC4E.roa
File: kxblyKzf1nCEDc2-7AfmBqLgC4E.roa (raw, json)
Hash identifier: vWUjbHKahJizo+IAIidZpKGhGW6FiNid8LG7Rf3g+mM=
Subject key identifier: 93:16:E5:C8:AC:DF:D6:70:84:0D:CD:BE:EC:07:E6:06:A2:E0:0B:81
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20E7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kxblyKzf1nCEDc2-7AfmBqLgC4E.roa
Signing time: Fri 25 Nov 2022 04:39:16 +0000
ROA not before: Fri 25 Nov 2022 04:39:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8423 (0x20e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9316E5C8ACDFD670840DCDBEEC07E606A2E00B81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:97:f5:51:a4:04:44:01:fe:ed:60:fb:11:
fc:81:99:4d:33:c4:d7:21:8d:0d:b2:b8:fc:2e:c6:
ac:72:28:a6:b3:24:b1:6d:6b:d4:76:8f:c2:e3:5a:
6b:b8:fa:b7:84:47:b2:b9:52:c8:c4:f5:0b:d4:cd:
a1:63:ca:00:d7:5d:3e:18:cb:7e:75:cc:37:71:7b:
f6:a7:44:bb:f5:81:e7:5f:85:73:78:11:d5:a7:19:
ef:17:74:27:a0:40:c9:bf:ce:7b:3c:5a:47:44:7f:
35:12:2f:9f:e3:bb:5d:58:f1:af:9b:96:4c:5a:31:
88:44:78:2b:d8:ef:f3:05:de:ff:4b:ad:dc:47:c3:
5b:96:f7:a1:d2:cd:4c:58:a3:88:65:8c:86:e6:22:
df:0f:b8:1a:06:d9:5a:20:c0:e2:81:90:99:47:ac:
a3:21:91:13:a5:51:63:a4:76:a6:26:b6:cc:aa:8a:
f9:68:d6:63:0c:d0:73:56:33:73:28:9c:2f:10:9f:
89:b0:76:9b:cd:c1:0a:b8:4c:2a:9c:6f:36:e0:02:
be:c1:5c:11:f9:6a:53:8e:cd:3c:27:dd:10:af:bd:
b7:e6:67:af:1d:01:1e:46:69:15:28:ef:63:b6:f2:
ba:fd:ef:e2:5b:b2:af:34:53:a8:a6:95:be:bd:83:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:16:E5:C8:AC:DF:D6:70:84:0D:CD:BE:EC:07:E6:06:A2:E0:0B:81
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kxblyKzf1nCEDc2-7AfmBqLgC4E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.110.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:52:ef:19:bc:77:d4:2f:55:7f:9d:eb:fc:1d:b8:85:9b:74:
8d:65:3b:bb:92:1b:e5:d0:ab:8a:b2:57:4c:c3:65:e2:f7:ea:
e3:94:fe:be:02:10:03:f0:05:5c:12:85:e4:b0:02:99:d9:5c:
b9:c4:35:83:b6:91:e2:1c:29:5d:fd:26:74:4c:c1:ee:e1:b8:
48:5d:27:07:a5:3d:f8:f9:1e:44:36:dc:95:f2:28:c6:98:e1:
5f:b3:40:16:fb:ba:39:3d:0b:82:05:28:08:2f:04:c7:8c:d4:
86:51:27:34:dd:a9:24:e0:e4:1b:79:2c:59:30:3b:0c:10:7f:
52:a4:dd:d3:1e:c3:02:d8:56:74:25:e5:6c:21:28:0a:0e:52:
b6:ad:f0:60:7e:ef:94:68:89:c5:76:92:70:7b:c4:09:cd:0d:
a7:3f:2d:48:a2:6c:1d:cf:ea:0d:76:1f:6f:19:62:1b:62:b6:
8f:26:c4:6f:73:a7:a2:17:4a:ce:5f:0b:bf:38:2d:1c:ed:95:
10:5e:26:85:99:19:de:25:fc:d4:a2:cb:40:09:4e:31:22:41:
9c:ba:78:cb:7a:6a:e0:7e:06:9f:74:cd:9b:59:f8:57:af:15:
00:50:7d:07:f6:ae:63:bd:bc:f9:90:f6:0f:be:3a:23:80:a3:
36:55:1f:f0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDkzMTZFNUM4QUNERkQ2
NzA4NDBEQ0RCRUVDMDdFNjA2QTJFMDBCODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCylJf1UaQERAH+7WD7EfyBmU0zxNchjQ2yuPwuxqxyKKazJLFt
a9R2j8LjWmu4+reER7K5UsjE9QvUzaFjygDXXT4Yy351zDdxe/anRLv1gedfhXN4
EdWnGe8XdCegQMm/zns8WkdEfzUSL5/ju11Y8a+blkxaMYhEeCvY7/MF3v9LrdxH
w1uW96HSzUxYo4hljIbmIt8PuBoG2VogwOKBkJlHrKMhkROlUWOkdqYmtsyqivlo
1mMM0HNWM3MonC8Qn4mwdpvNwQq4TCqcbzbgAr7BXBH5alOOzTwn3RCvvbfmZ68d
AR5GaRUo72O28rr97+Jbsq80U6imlb69g3SZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkxblyKzf1nCEDc2+7AfmBqLgC4EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2t4Ymx5S3pmMW5DRURjMi03
QWZtQnFMZ0M0RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wW4wDQYJKoZIhvcNAQELBQADggEBAKxS7xm8d9QvVX+d6/wduIWbdI1lO7uSG+XQ
q4qyV0zDZeL36uOU/r4CEAPwBVwSheSwApnZXLnENYO2keIcKV39JnRMwe7huEhd
JwelPfj5HkQ23JXyKMaY4V+zQBb7ujk9C4IFKAgvBMeM1IZRJzTdqSTg5Bt5LFkw
OwwQf1Kk3dMewwLYVnQl5WwhKAoOUrat8GB+75RoicV2knB7xAnNDac/LUiibB3P
6g12H28ZYhtito8mxG9zp6IXSs5fC784LRztlRBeJoWZGd4l/NSiy0AJTjEiQZy6
eMt6auB+Bp90zZtZ+FevFQBQfQf2rmO9vPmQ9g++OiOAozZVH/A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org