Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mCKE5Eel1aQQs69qmFS7lPFf9AA.roa
File: mCKE5Eel1aQQs69qmFS7lPFf9AA.roa (raw, json)
Hash identifier: F22k3GnsOL5tWDQ0ldAdsiyDdagey+qYjyLVPE8XgTs=
Subject key identifier: 98:22:84:E4:47:A5:D5:A4:10:B3:AF:6A:98:54:BB:94:F1:5F:F4:00
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20D5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mCKE5Eel1aQQs69qmFS7lPFf9AA.roa
Signing time: Fri 25 Nov 2022 04:39:10 +0000
ROA not before: Fri 25 Nov 2022 04:39:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8405 (0x20d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=982284E447A5D5A410B3AF6A9854BB94F15FF400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:a2:8d:fe:0f:13:c8:12:28:63:6d:50:ad:
fb:8a:73:2e:29:22:ba:c5:ba:3f:48:a2:3a:6b:9f:
0f:ed:e0:d4:f8:d8:17:54:17:51:4f:d0:17:44:b2:
16:fa:bf:f2:84:06:1b:99:61:50:ec:22:ad:b3:4c:
2c:1e:92:a3:39:2b:6a:86:4e:95:ac:9a:ae:44:55:
1b:26:6f:ee:df:81:d3:39:23:d5:d6:f1:f1:46:f1:
14:e0:30:45:17:55:36:d9:6d:d8:43:40:bb:da:e4:
54:56:5d:d0:36:f4:0e:92:c4:5e:35:db:4a:88:09:
2d:61:a5:71:e5:5a:a0:9e:5a:1b:d1:ff:1a:18:4f:
23:01:f6:ff:47:e8:e6:5c:74:3e:f0:e0:1d:6e:d5:
5c:49:b1:44:6b:31:0b:c4:c8:84:38:01:5b:8c:f4:
38:c3:0a:1b:dc:3c:7f:28:d0:0f:5d:6a:2a:b2:e3:
5f:1d:87:5b:ae:59:38:9f:59:8c:0f:29:8f:5b:1c:
1b:09:d9:e2:c7:2e:09:99:ff:35:e3:20:7d:b1:9f:
cb:1a:c8:4d:34:0b:a7:86:06:8b:1d:6a:02:e2:29:
2a:94:90:89:cd:ca:56:cb:e0:fc:77:42:33:9c:5a:
4a:9d:c6:94:cd:c7:bf:82:b4:5a:2a:c3:7f:31:4c:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:22:84:E4:47:A5:D5:A4:10:B3:AF:6A:98:54:BB:94:F1:5F:F4:00
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mCKE5Eel1aQQs69qmFS7lPFf9AA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.136.0/21
Signature Algorithm: sha256WithRSAEncryption
35:1d:0d:47:e5:bd:83:1f:ca:a2:83:13:20:18:96:a9:47:74:
3c:5e:6c:52:77:91:66:2a:6a:fe:7a:94:ce:aa:9c:0c:cc:31:
51:0b:2f:19:fb:4f:e2:91:ff:5c:de:71:16:79:bf:f1:89:4e:
b6:12:39:f5:38:b4:ed:d6:66:16:87:54:41:e1:2d:57:ba:e5:
af:1a:bc:06:1f:8d:60:66:32:af:99:46:9e:39:a0:13:e6:98:
48:8d:80:51:9a:44:ea:71:1e:b3:38:4e:7a:41:60:ab:68:98:
21:b7:36:d1:51:e8:cc:87:32:d0:44:af:21:aa:44:ca:e6:57:
75:e1:c4:50:5a:8c:59:37:3a:30:3e:b3:78:3d:61:f5:97:6e:
3a:40:f2:d0:fc:e0:3f:60:cc:ef:c8:57:54:39:30:ac:37:16:
ed:84:e4:b3:7d:e3:e4:c5:37:c6:ba:90:0b:32:23:7f:95:28:
64:e5:5a:34:71:95:db:77:72:35:7f:14:76:6a:06:82:80:ef:
35:a0:01:18:02:05:b8:e7:53:de:41:bb:b6:a1:11:6c:71:eb:
67:30:ce:65:aa:72:cd:a8:d1:87:8b:13:5b:00:03:a9:01:28:
c4:d1:cb:dd:7e:cd:1b:c9:37:bf:33:64:95:59:f2:9e:f9:24:
67:b3:62:46
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICINUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MTBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDk4MjI4NEU0NDdBNUQ1
QTQxMEIzQUY2QTk4NTRCQjk0RjE1RkY0MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+G6KN/g8TyBIoY21QrfuKcy4pIrrFuj9Iojprnw/t4NT42BdU
F1FP0BdEshb6v/KEBhuZYVDsIq2zTCwekqM5K2qGTpWsmq5EVRsmb+7fgdM5I9XW
8fFG8RTgMEUXVTbZbdhDQLva5FRWXdA29A6SxF4120qICS1hpXHlWqCeWhvR/xoY
TyMB9v9H6OZcdD7w4B1u1VxJsURrMQvEyIQ4AVuM9DjDChvcPH8o0A9daiqy418d
h1uuWTifWYwPKY9bHBsJ2eLHLgmZ/zXjIH2xn8sayE00C6eGBosdagLiKSqUkInN
ylbL4Px3QjOcWkqdxpTNx7+CtFoqw38xTJelAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmCKE5Eel1aQQs69qmFS7lPFf9AAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21DS0U1RWVsMWFRUXM2OXFt
RlM3bFBGZjlBQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w4gwDQYJKoZIhvcNAQELBQADggEBADUdDUflvYMfyqKDEyAYlqlHdDxebFJ3kWYq
av56lM6qnAzMMVELLxn7T+KR/1zecRZ5v/GJTrYSOfU4tO3WZhaHVEHhLVe65a8a
vAYfjWBmMq+ZRp45oBPmmEiNgFGaROpxHrM4TnpBYKtomCG3NtFR6MyHMtBEryGq
RMrmV3XhxFBajFk3OjA+s3g9YfWXbjpA8tD84D9gzO/IV1Q5MKw3Fu2E5LN94+TF
N8a6kAsyI3+VKGTlWjRxldt3cjV/FHZqBoKA7zWgARgCBbjnU95Bu7ahEWxx62cw
zmWqcs2o0YeLE1sAA6kBKMTRy91+zRvJN78zZJVZ8p75JGezYkY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org