Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mGMT9MhLifiUeOWH92Kg2qfx__E.roa
File: mGMT9MhLifiUeOWH92Kg2qfx__E.roa (raw, json)
Hash identifier: hFuRKRNN9jgoM24a+4yUtbHmLuvvEHMYvWcNQFzkuHw=
Subject key identifier: 98:63:13:F4:C8:4B:89:F8:94:78:E5:87:F7:62:A0:DA:A7:F1:FF:F1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2309
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mGMT9MhLifiUeOWH92Kg2qfx__E.roa
Signing time: Fri 25 Nov 2022 04:41:58 +0000
ROA not before: Fri 25 Nov 2022 04:41:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8969 (0x2309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=986313F4C84B89F89478E587F762A0DAA7F1FFF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:74:55:fe:8a:b0:f2:a9:9e:96:5a:ef:3a:
c9:40:e8:36:45:8e:41:ca:62:3f:0d:98:6d:06:ec:
e8:d3:74:1b:97:ce:13:88:4b:4a:d8:4f:a2:3d:cb:
99:a2:ad:94:10:61:a9:6d:02:13:d2:07:cd:47:d9:
e7:15:bd:b3:5f:5f:b7:1d:3a:a2:c4:14:16:00:17:
d5:29:0c:4b:b6:a8:6e:ea:f9:97:b3:7d:43:63:dd:
fb:fa:a0:d9:d2:18:a2:8c:29:07:8b:ed:38:9c:9e:
98:13:83:4a:b3:2b:fa:a0:73:9b:3c:60:7b:1b:53:
62:1a:94:38:95:a0:19:01:8c:6f:04:b6:ac:4a:a1:
9b:4e:50:14:18:48:02:3f:aa:70:de:ab:91:42:28:
00:70:04:de:21:02:08:6c:c3:c1:a5:e8:74:60:f1:
5b:c9:d5:d5:85:a1:33:6d:07:c5:28:4f:c4:10:9d:
9d:53:1f:dd:88:d4:8d:4c:e2:a5:6b:bc:45:a0:d8:
a9:22:27:38:5c:72:e9:a1:cd:be:53:c7:33:3a:b2:
3c:b1:ee:73:0e:54:8f:c4:07:0e:db:54:d7:d2:b3:
1a:c4:f3:2d:60:03:d6:3e:42:a1:db:87:68:17:23:
e2:dc:fa:6c:a2:e2:59:88:ea:06:e8:c8:7e:f1:69:
22:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:63:13:F4:C8:4B:89:F8:94:78:E5:87:F7:62:A0:DA:A7:F1:FF:F1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mGMT9MhLifiUeOWH92Kg2qfx__E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.56.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:8a:5f:75:c0:4c:11:55:0f:1d:37:be:1c:97:c2:13:40:ef:
fa:a0:35:f8:86:d8:fb:46:fe:71:ef:29:ca:76:e2:d3:9a:ce:
02:bb:d8:d5:f4:4c:41:98:00:fa:42:f4:57:34:c2:8d:23:df:
74:3a:5f:8b:a7:29:c1:0f:d1:2a:56:18:2e:4b:e7:cf:50:d9:
e9:43:09:e3:f3:76:70:b5:e2:52:6e:e3:97:68:5f:9d:6b:da:
56:02:e5:3f:1c:6b:6a:f1:0f:82:67:a0:b8:e0:5b:92:e4:30:
b2:6a:8c:28:c0:ce:cf:26:2f:e6:71:a0:39:c6:b3:3e:ee:6a:
52:96:78:ca:fd:6e:6d:94:cb:a1:62:fc:79:2d:56:3b:d7:13:
b8:6d:7e:58:32:94:20:30:12:c3:7f:ff:80:ef:da:fb:b4:6a:
05:9f:40:db:c0:1a:ef:cf:6c:55:1a:5d:fd:00:a6:22:49:f1:
2e:77:3d:21:61:a9:b3:7f:95:45:b9:8e:06:1c:8a:f6:fc:19:
31:48:75:df:84:71:35:40:8f:3b:45:90:71:8f:c2:19:44:e8:
24:d4:c0:ac:08:6d:f1:60:d4:7e:5d:7f:55:bc:91:fd:41:5d:
a8:f0:e2:5a:d7:5f:f4:a8:c9:b1:84:a7:b6:52:0f:60:ac:87:
ba:14:48:7a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIwkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxNThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDk4NjMxM0Y0Qzg0Qjg5
Rjg5NDc4RTU4N0Y3NjJBMERBQTdGMUZGRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCaTHRV/oqw8qmellrvOslA6DZFjkHKYj8NmG0G7OjTdBuXzhOI
S0rYT6I9y5mirZQQYaltAhPSB81H2ecVvbNfX7cdOqLEFBYAF9UpDEu2qG7q+Zez
fUNj3fv6oNnSGKKMKQeL7TicnpgTg0qzK/qgc5s8YHsbU2IalDiVoBkBjG8EtqxK
oZtOUBQYSAI/qnDeq5FCKABwBN4hAghsw8Gl6HRg8VvJ1dWFoTNtB8UoT8QQnZ1T
H92I1I1M4qVrvEWg2KkiJzhccumhzb5TxzM6sjyx7nMOVI/EBw7bVNfSsxrE8y1g
A9Y+QqHbh2gXI+Lc+myi4lmI6gboyH7xaSLXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmGMT9MhLifiUeOWH92Kg2qfx//EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21HTVQ5TWhMaWZpVWVPV0g5
MktnMnFmeF9fRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wDgwDQYJKoZIhvcNAQELBQADggEBADqKX3XATBFVDx03vhyXwhNA7/qgNfiG2PtG
/nHvKcp24tOazgK72NX0TEGYAPpC9Fc0wo0j33Q6X4unKcEP0SpWGC5L589Q2elD
CePzdnC14lJu45doX51r2lYC5T8ca2rxD4JnoLjgW5LkMLJqjCjAzs8mL+ZxoDnG
sz7ualKWeMr9bm2Uy6Fi/HktVjvXE7htflgylCAwEsN//4Dv2vu0agWfQNvAGu/P
bFUaXf0ApiJJ8S53PSFhqbN/lUW5jgYcivb8GTFIdd+EcTVAjztFkHGPwhlE6CTU
wKwIbfFg1H5df1W8kf1BXajw4lrXX/SoybGEp7ZSD2Csh7oUSHo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org