Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mMj_8rLAKobwwru00zWANUozgbc.roa
File: mMj_8rLAKobwwru00zWANUozgbc.roa (raw, json)
Hash identifier: Xq6JB/RGhvcNXyTKVJ+TUSHSE/6Ojvqzt4Nyn6DEftY=
Subject key identifier: 98:C8:FF:F2:B2:C0:2A:86:F0:C2:BB:B4:D3:35:80:35:4A:33:81:B7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D0D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mMj_8rLAKobwwru00zWANUozgbc.roa
Signing time: Wed 29 Sep 2021 02:48:33 +0000
ROA not before: Wed 29 Sep 2021 02:48:33 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7437 (0x1d0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:33 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=98C8FFF2B2C02A86F0C2BBB4D33580354A3381B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:65:ad:da:db:14:dd:9b:b6:88:8b:5c:40:
e0:52:79:9c:57:44:35:d9:1c:c0:1b:d8:33:6d:f3:
ee:74:18:e2:cb:99:06:b4:31:b6:85:68:0a:43:d5:
5c:08:eb:94:1e:9f:28:ed:39:b1:a8:3b:b8:42:2d:
6e:de:c2:33:de:52:51:2c:0c:6c:44:12:0a:c8:39:
fa:0d:56:d5:01:7c:4d:4c:71:4d:2e:da:87:9a:1d:
cc:8c:b4:66:d2:97:ad:a2:3c:d7:e1:c7:c3:dc:61:
75:75:70:04:74:c1:15:40:c8:af:98:87:6f:9b:be:
04:19:1f:3a:7c:54:7c:e6:82:6b:1e:48:f0:3d:89:
74:02:02:6d:cb:f7:04:07:8e:0b:65:1a:6b:f4:3c:
33:49:57:5f:be:f0:ee:dc:70:72:8f:18:5c:ea:ff:
5a:11:c8:06:1b:a4:ab:cc:d2:96:c1:8b:a0:e0:a3:
fb:e0:54:05:65:f0:9f:b1:1f:57:7d:3c:b8:61:ce:
9f:15:b8:84:c0:49:ef:c8:78:af:3b:b5:89:dc:0d:
ed:f0:60:31:19:93:a8:ae:a1:e4:f1:a3:2a:c5:bd:
b1:e1:6e:82:67:a3:70:86:41:e7:79:cf:ad:63:df:
de:02:5d:4d:93:c9:2c:8a:88:0d:3f:2c:d6:d7:7f:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C8:FF:F2:B2:C0:2A:86:F0:C2:BB:B4:D3:35:80:35:4A:33:81:B7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mMj_8rLAKobwwru00zWANUozgbc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.104.0/22
Signature Algorithm: sha256WithRSAEncryption
41:9e:3f:0b:b9:34:0c:8f:48:ca:92:9a:df:53:48:48:73:56:
c9:30:97:5c:ff:6a:86:05:be:16:75:ad:42:04:14:db:d6:64:
de:33:89:c9:28:4d:54:ec:64:cf:c7:c4:e0:67:4e:a7:8b:14:
43:bc:ed:11:33:19:02:2f:f6:4f:d5:0e:67:5c:41:3a:2a:c2:
e6:7c:54:07:3a:5c:5a:89:51:bd:e5:ae:62:da:1f:ee:bb:e4:
13:de:3b:66:3c:f3:78:d9:24:9c:3f:26:7b:1f:dd:a2:30:21:
95:a5:cf:06:f7:3a:b1:cb:d1:43:ad:08:4b:52:3d:44:56:f1:
c5:0a:f1:3b:a3:f8:0e:d3:59:3b:ab:bc:4c:ca:12:aa:3f:6d:
22:ca:e3:60:30:41:cd:c5:3a:37:69:06:07:af:da:bd:a7:9d:
fa:90:9e:c7:7a:5f:38:d9:6c:1d:ae:06:e9:b2:7a:66:fe:f8:
23:2e:e8:80:93:16:b2:47:78:9e:2b:79:1c:2d:8e:50:99:31:
6d:32:53:c8:ac:ff:20:51:d7:7a:4c:1c:34:66:08:af:20:4f:
7c:61:e4:c7:65:e1:93:75:eb:ba:69:14:8e:60:bf:4e:8c:8e:
66:31:19:75:ef:df:07:aa:da:a5:c7:2d:b0:0a:a0:25:26:59:
3a:6e:4a:8d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4MzNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDk4QzhGRkYyQjJDMDJB
ODZGMEMyQkJCNEQzMzU4MDM1NEEzMzgxQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCx42Wt2tsU3Zu2iItcQOBSeZxXRDXZHMAb2DNt8+50GOLLmQa0
MbaFaApD1VwI65QenyjtObGoO7hCLW7ewjPeUlEsDGxEEgrIOfoNVtUBfE1McU0u
2oeaHcyMtGbSl62iPNfhx8PcYXV1cAR0wRVAyK+Yh2+bvgQZHzp8VHzmgmseSPA9
iXQCAm3L9wQHjgtlGmv0PDNJV1++8O7ccHKPGFzq/1oRyAYbpKvM0pbBi6Dgo/vg
VAVl8J+xH1d9PLhhzp8VuITASe/IeK87tYncDe3wYDEZk6iuoeTxoyrFvbHhboJn
o3CGQed5z61j394CXU2TySyKiA0/LNbXf45HAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmMj/8rLAKobwwru00zWANUozgbcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21Nal84ckxBS29id3dydTAw
eldBTlVvemdiYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
w2gwDQYJKoZIhvcNAQELBQADggEBAEGePwu5NAyPSMqSmt9TSEhzVskwl1z/aoYF
vhZ1rUIEFNvWZN4zickoTVTsZM/HxOBnTqeLFEO87REzGQIv9k/VDmdcQToqwuZ8
VAc6XFqJUb3lrmLaH+675BPeO2Y883jZJJw/Jnsf3aIwIZWlzwb3OrHL0UOtCEtS
PURW8cUK8Tuj+A7TWTurvEzKEqo/bSLK42AwQc3FOjdpBgev2r2nnfqQnsd6XzjZ
bB2uBumyemb++CMu6ICTFrJHeJ4reRwtjlCZMW0yU8is/yBR13pMHDRmCK8gT3xh
5Mdl4ZN167ppFI5gv06MjmYxGXXv3weq2qXHLbAKoCUmWTpuSo0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:31 2025 by rpki-client