Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lVpdyiV3Z3pg6TfH3DK-W0FkSms.roa
File: lVpdyiV3Z3pg6TfH3DK-W0FkSms.roa (raw, json)
Hash identifier: vu/qVXEWUiXfQkpQzECv+4GuglOdx5ijYrKUE+wX9Bs=
Subject key identifier: 95:5A:5D:CA:25:77:67:7A:60:E9:37:C7:DC:32:BE:5B:41:64:4A:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2177
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lVpdyiV3Z3pg6TfH3DK-W0FkSms.roa
Signing time: Fri 25 Nov 2022 04:39:57 +0000
ROA not before: Fri 25 Nov 2022 04:39:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8567 (0x2177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=955A5DCA2577677A60E937C7DC32BE5B41644A6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7f:03:9d:74:c4:a8:02:74:5a:f2:18:c7:a2:
be:21:d6:10:c2:cd:93:50:46:44:0e:03:d7:f1:f4:
d1:5b:9e:ec:90:8c:74:29:e4:23:d7:5a:25:f3:79:
17:b3:29:26:ef:0b:1d:d2:1b:37:4e:b4:c2:88:b2:
20:e9:48:31:41:19:bf:66:d9:81:70:bf:ff:3a:aa:
6d:99:bf:8e:dc:23:5c:ef:c1:88:fb:a3:b6:0a:b7:
f6:28:68:04:ad:cd:3c:82:22:76:d6:0a:7b:5d:2f:
fa:7f:5c:63:11:39:a1:f4:aa:10:7d:af:1c:05:1a:
b7:05:5d:33:a9:00:4f:60:c9:00:b4:a4:e3:9d:14:
a6:a6:41:c9:ba:77:09:d0:96:30:39:93:07:72:7a:
d0:ed:fd:6c:5b:8a:ab:57:e8:74:b2:12:b5:e9:21:
e1:a4:df:fc:88:a6:61:9f:4e:ea:5a:f6:bf:79:02:
92:2e:af:8e:dc:ff:dd:15:29:ac:44:b6:6b:9d:99:
c3:31:a1:10:f3:3a:6b:f8:5a:41:b4:ed:e1:db:a1:
b5:18:75:c9:25:d1:40:2d:69:95:eb:72:55:35:2a:
09:5c:c2:d2:9b:66:da:cc:0f:a0:64:78:fe:3b:b0:
50:5a:48:01:7e:64:12:3d:84:53:1e:44:03:55:6e:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5A:5D:CA:25:77:67:7A:60:E9:37:C7:DC:32:BE:5B:41:64:4A:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lVpdyiV3Z3pg6TfH3DK-W0FkSms.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.60.0/22
Signature Algorithm: sha256WithRSAEncryption
40:68:51:fd:79:a1:27:fb:10:52:31:ac:59:71:0e:a1:3e:a5:
2f:ef:07:7a:fd:ad:33:75:c1:a4:00:26:b1:59:7e:7d:93:c0:
1c:91:a0:52:58:13:63:38:97:07:89:1f:c9:2e:e7:78:a2:46:
c7:7d:3a:63:fd:f7:08:11:e4:1f:fc:68:3c:a2:2e:64:1c:d8:
a7:05:d5:fb:05:83:18:dc:d8:83:74:77:5f:2d:86:3e:80:77:
32:cc:5c:70:b2:61:39:39:21:de:e7:cd:f4:66:08:87:79:80:
fa:dd:ec:55:60:d4:bf:ef:44:4e:90:2c:1b:f3:12:bd:1f:e0:
b4:98:6b:aa:4e:8b:08:94:6b:06:30:08:f2:49:1a:17:6a:4b:
e7:54:68:e9:3a:d8:07:e7:0b:f9:ea:7d:a8:13:7b:d9:19:0d:
f6:2c:46:db:d6:32:a1:0b:ea:b4:86:1a:be:f1:0d:22:b8:eb:
a6:b1:10:47:97:a1:cf:d6:e8:a1:da:46:d9:44:93:31:16:f4:
45:d1:56:c8:8e:14:08:b3:85:f3:ae:0b:27:bf:8c:82:92:7a:
17:a9:26:c5:5d:bf:1d:ca:8e:34:89:42:02:7b:ce:69:34:78:
14:a5:98:bd:d5:af:a0:16:7b:c4:7d:e1:07:9c:38:a8:45:06:
1e:a1:30:b6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIXcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5NTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDk1NUE1RENBMjU3NzY3
N0E2MEU5MzdDN0RDMzJCRTVCNDE2NDRBNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDwfwOddMSoAnRa8hjHor4h1hDCzZNQRkQOA9fx9NFbnuyQjHQp
5CPXWiXzeRezKSbvCx3SGzdOtMKIsiDpSDFBGb9m2YFwv/86qm2Zv47cI1zvwYj7
o7YKt/YoaAStzTyCInbWCntdL/p/XGMROaH0qhB9rxwFGrcFXTOpAE9gyQC0pOOd
FKamQcm6dwnQljA5kwdyetDt/WxbiqtX6HSyErXpIeGk3/yIpmGfTupa9r95ApIu
r47c/90VKaxEtmudmcMxoRDzOmv4WkG07eHbobUYdckl0UAtaZXrclU1KglcwtKb
ZtrMD6BkeP47sFBaSAF+ZBI9hFMeRANVbkfvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUlVpdyiV3Z3pg6TfH3DK+W0FkSmswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xWcGR5aVYzWjNwZzZUZkgz
REstVzBGa1Ntcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wTwwDQYJKoZIhvcNAQELBQADggEBAEBoUf15oSf7EFIxrFlxDqE+pS/vB3r9rTN1
waQAJrFZfn2TwByRoFJYE2M4lweJH8ku53iiRsd9OmP99wgR5B/8aDyiLmQc2KcF
1fsFgxjc2IN0d18thj6AdzLMXHCyYTk5Id7nzfRmCId5gPrd7FVg1L/vRE6QLBvz
Er0f4LSYa6pOiwiUawYwCPJJGhdqS+dUaOk62AfnC/nqfagTe9kZDfYsRtvWMqEL
6rSGGr7xDSK466axEEeXoc/W6KHaRtlEkzEW9EXRVsiOFAizhfOuCye/jIKSehep
JsVdvx3KjjSJQgJ7zmk0eBSlmL3Vr6AWe8R94QecOKhFBh6hMLY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org