Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mlnvgGSXzHhT9gkDB7s7UKF6jCk.roa
File: mlnvgGSXzHhT9gkDB7s7UKF6jCk.roa (raw, json)
Hash identifier: EMSmUqP9xsyzpzRykLPLf2u63oFc83py6nor14DDWso=
Subject key identifier: 9A:59:EF:80:64:97:CC:78:53:F6:09:03:07:BB:3B:50:A1:7A:8C:29
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mlnvgGSXzHhT9gkDB7s7UKF6jCk.roa
Signing time: Thu 15 Sep 2022 02:52:45 +0000
ROA not before: Thu 15 Sep 2022 02:52:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9A59EF806497CC7853F6090307BB3B50A17A8C29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:a9:00:81:41:da:fe:4b:da:0c:ed:cb:35:
29:ad:fd:53:71:4f:42:7e:ae:31:dc:9c:02:b0:36:
96:eb:57:c0:6b:d6:7c:41:9e:21:bb:6c:67:93:e2:
a4:17:0d:24:b6:74:7a:53:da:eb:4d:e3:ac:53:64:
97:f7:82:bb:c0:d8:37:6f:19:e8:40:eb:e3:a4:20:
3c:a6:24:19:bc:c9:ad:70:27:49:cf:89:d4:0b:b6:
13:64:fa:c4:0a:ae:1c:05:89:8f:2d:d9:10:fd:1d:
a9:4e:f7:63:52:9d:06:3a:97:35:0d:67:4a:80:d1:
f1:f9:cd:68:a3:4e:40:a5:02:ee:2f:d8:98:7e:90:
eb:ae:8f:ea:77:3f:f3:a4:be:cf:f5:2e:6e:22:24:
8a:96:95:3b:07:f0:fb:96:00:f9:4e:84:16:99:2f:
17:9b:9f:58:74:31:d2:8f:3e:9b:de:8d:23:08:fa:
dc:49:29:86:18:88:99:29:c4:2a:70:9a:ce:a5:c3:
a6:d2:a0:59:da:d6:7f:ac:18:b9:28:4c:9d:76:3d:
b0:f6:2b:34:90:94:be:bb:9c:21:22:4e:93:48:50:
8c:09:9a:ee:df:29:e9:ab:5c:a7:42:2f:fa:24:ce:
1a:9b:cf:95:22:3a:28:eb:06:0d:e7:79:1a:bd:9a:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:59:EF:80:64:97:CC:78:53:F6:09:03:07:BB:3B:50:A1:7A:8C:29
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mlnvgGSXzHhT9gkDB7s7UKF6jCk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.232.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:91:b2:94:82:1a:61:d0:73:95:63:5b:32:f2:90:c2:da:b8:
b7:ca:d1:03:d0:65:64:31:97:7f:60:43:5f:21:53:cc:15:0c:
50:da:c0:71:28:e1:6c:48:d1:68:19:9d:05:77:23:ce:06:dd:
09:84:fc:8c:c5:dd:83:2d:19:0b:ff:78:2d:79:5e:2e:da:bb:
d8:c8:79:ad:e7:ca:3a:4d:6f:0a:5c:ce:0b:43:07:29:cd:f8:
57:dd:7f:63:42:dd:b5:24:f3:f9:af:e7:a0:21:f3:9a:75:f5:
c9:45:3d:98:a4:d6:4e:4b:a0:9c:32:a4:70:26:4b:bd:d6:ca:
1a:e4:61:6f:ab:74:c5:3a:06:be:33:53:64:28:ea:08:64:93:
9f:4c:0f:d4:30:9d:5b:2a:04:41:20:9b:9f:3c:17:0b:ce:de:
56:91:02:b2:5d:ee:89:12:2e:c1:1c:41:24:b5:c6:57:6a:71:
11:92:2d:85:72:00:86:b2:5b:d5:33:91:65:4d:13:db:19:cc:
7a:22:d6:2b:51:c0:ad:36:2e:d1:b2:66:2e:b1:3a:b4:7e:bc:
28:0a:4a:37:e7:b8:62:dc:03:a5:e3:65:0f:a8:4a:1d:36:3b:
3d:e6:69:17:3d:62:8d:4c:b1:cd:f8:ff:4f:e5:94:2e:0b:2b:
0f:56:93:c7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUyNDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDlBNTlFRjgwNjQ5N0ND
Nzg1M0Y2MDkwMzA3QkIzQjUwQTE3QThDMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDI3akAgUHa/kvaDO3LNSmt/VNxT0J+rjHcnAKwNpbrV8Br1nxB
niG7bGeT4qQXDSS2dHpT2utN46xTZJf3grvA2DdvGehA6+OkIDymJBm8ya1wJ0nP
idQLthNk+sQKrhwFiY8t2RD9HalO92NSnQY6lzUNZ0qA0fH5zWijTkClAu4v2Jh+
kOuuj+p3P/Okvs/1Lm4iJIqWlTsH8PuWAPlOhBaZLxebn1h0MdKPPpvejSMI+txJ
KYYYiJkpxCpwms6lw6bSoFna1n+sGLkoTJ12PbD2KzSQlL67nCEiTpNIUIwJmu7f
KemrXKdCL/okzhqbz5UiOijrBg3neRq9mlIdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmlnvgGSXzHhT9gkDB7s7UKF6jCkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21sbnZnR1NYekhoVDlna0RC
N3M3VUtGNmpDay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wOgwDQYJKoZIhvcNAQELBQADggEBAKqRspSCGmHQc5VjWzLykMLauLfK0QPQZWQx
l39gQ18hU8wVDFDawHEo4WxI0WgZnQV3I84G3QmE/IzF3YMtGQv/eC15Xi7au9jI
ea3nyjpNbwpczgtDBynN+Ffdf2NC3bUk8/mv56Ah85p19clFPZik1k5LoJwypHAm
S73WyhrkYW+rdMU6Br4zU2Qo6ghkk59MD9QwnVsqBEEgm588FwvO3laRArJd7okS
LsEcQSS1xldqcRGSLYVyAIayW9UzkWVNE9sZzHoi1itRwK02LtGyZi6xOrR+vCgK
SjfnuGLcA6XjZQ+oSh02Oz3maRc9Yo1Msc34/0/llC4LKw9Wk8c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org