Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mBIq7IL4f3Brga3A6UlqJnwOgOE.roa
File: mBIq7IL4f3Brga3A6UlqJnwOgOE.roa (raw, json)
Hash identifier: fss66ZK1p9nY/YdhvdpjqlmlV8oI1UsbGecan+AgNRY=
Subject key identifier: 98:12:2A:EC:82:F8:7F:70:6B:81:AD:C0:E9:49:6A:26:7C:0E:80:E1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2147
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mBIq7IL4f3Brga3A6UlqJnwOgOE.roa
Signing time: Fri 25 Nov 2022 04:39:43 +0000
ROA not before: Fri 25 Nov 2022 04:39:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8519 (0x2147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=98122AEC82F87F706B81ADC0E9496A267C0E80E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:fd:9a:26:87:00:0c:6a:06:de:de:ed:96:
e3:58:c1:3a:eb:78:0b:f6:f6:8f:81:35:72:22:64:
ec:7b:b3:f2:57:96:ce:8e:7c:61:c5:0c:42:6b:d5:
5a:df:ef:22:dd:0d:ed:6d:0c:27:bb:2c:95:c9:1d:
a2:b2:6d:d0:3d:80:a0:9e:c1:65:88:39:99:3f:6d:
31:46:07:04:bf:70:c4:ba:f0:a6:b8:b7:69:c2:83:
fa:21:1e:5f:fc:f6:6f:42:cb:f5:42:9a:b2:96:12:
34:9f:24:38:a8:15:47:55:0e:9a:89:af:c0:d1:4d:
58:f3:09:84:ff:27:de:25:57:ad:15:c8:5e:bd:64:
2c:88:02:b3:cb:62:e2:b6:1e:f0:ff:e7:68:cc:04:
9c:88:a8:0f:e4:dd:ec:34:b5:43:65:03:6d:f0:71:
d2:81:91:38:c6:a8:75:42:44:e3:b1:d5:2e:3b:a0:
dd:65:59:81:ca:dd:22:27:d6:48:ee:7a:5d:e0:cd:
8c:70:9b:45:06:5e:cc:63:0b:72:0c:9a:90:32:02:
fe:8c:61:71:f4:55:ec:88:27:01:48:b7:06:32:a9:
1d:0d:a0:5b:57:d2:01:d1:b2:73:c6:17:3d:a5:28:
54:8c:18:b8:9d:9e:15:30:b4:0b:e5:98:23:41:91:
1f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:12:2A:EC:82:F8:7F:70:6B:81:AD:C0:E9:49:6A:26:7C:0E:80:E1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mBIq7IL4f3Brga3A6UlqJnwOgOE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.0.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:8b:6b:9d:17:60:72:a5:fa:a7:7b:68:a5:ca:13:f5:29:fa:
78:35:80:e4:12:c0:0d:d4:56:20:e1:5e:80:3d:34:4f:d4:e1:
c1:ec:9b:d3:9f:35:b0:48:64:17:13:f3:a6:f0:13:61:48:6d:
06:1e:06:8e:25:33:b2:53:be:a0:e8:7a:17:a7:a6:c4:83:a1:
b2:0e:9e:75:e3:ab:0e:da:ea:72:37:ea:4b:fb:67:a2:8f:b0:
08:d9:22:c2:9f:83:1b:4e:f7:f5:b6:1e:4c:81:9a:e9:71:c3:
e9:08:06:35:4e:33:56:a3:8a:50:33:16:6a:44:71:fb:3d:b3:
77:bc:f0:a8:76:13:66:f9:12:ea:74:8b:39:87:69:11:47:44:
3b:49:3a:eb:ff:92:b5:37:56:50:5b:4e:1f:7f:46:ed:88:57:
fe:8d:48:83:8b:bf:44:15:27:d6:4c:f0:3f:92:62:fe:d4:a4:
23:b3:96:5c:99:57:b2:a5:8c:1f:40:8b:f7:9d:8a:2d:79:cd:
07:53:c2:8f:c9:b1:de:3b:e7:5f:40:3a:7a:26:ab:76:cd:12:
7c:3d:9d:02:ca:6a:14:b9:1b:4b:7c:3f:22:a1:2c:e6:bc:e8:
f0:b4:c6:3f:7b:3b:b8:27:36:d8:6c:9c:98:d7:1d:b6:8d:20:
2e:18:c5:8c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIUcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5NDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDk4MTIyQUVDODJGODdG
NzA2QjgxQURDMEU5NDk2QTI2N0MwRTgwRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8if2aJocADGoG3t7tluNYwTrreAv29o+BNXIiZOx7s/JXls6O
fGHFDEJr1Vrf7yLdDe1tDCe7LJXJHaKybdA9gKCewWWIOZk/bTFGBwS/cMS68Ka4
t2nCg/ohHl/89m9Cy/VCmrKWEjSfJDioFUdVDpqJr8DRTVjzCYT/J94lV60VyF69
ZCyIArPLYuK2HvD/52jMBJyIqA/k3ew0tUNlA23wcdKBkTjGqHVCROOx1S47oN1l
WYHK3SIn1kjuel3gzYxwm0UGXsxjC3IMmpAyAv6MYXH0VeyIJwFItwYyqR0NoFtX
0gHRsnPGFz2lKFSMGLidnhUwtAvlmCNBkR+BAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmBIq7IL4f3Brga3A6UlqJnwOgOEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21CSXE3SUw0ZjNCcmdhM0E2
VWxxSm53T2dPRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wAAwDQYJKoZIhvcNAQELBQADggEBADuLa50XYHKl+qd7aKXKE/Up+ng1gOQSwA3U
ViDhXoA9NE/U4cHsm9OfNbBIZBcT86bwE2FIbQYeBo4lM7JTvqDoehenpsSDobIO
nnXjqw7a6nI36kv7Z6KPsAjZIsKfgxtO9/W2HkyBmulxw+kIBjVOM1ajilAzFmpE
cfs9s3e88Kh2E2b5Eup0izmHaRFHRDtJOuv/krU3VlBbTh9/Ru2IV/6NSIOLv0QV
J9ZM8D+SYv7UpCOzllyZV7KljB9Ai/edii15zQdTwo/Jsd47519AOnomq3bNEnw9
nQLKahS5G0t8PyKhLOa86PC0xj97O7gnNthsnJjXHbaNIC4YxYw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org