Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n4wz7sG-HxAgkSLpZck5YP3WUck.roa
File: n4wz7sG-HxAgkSLpZck5YP3WUck.roa (raw, json)
Hash identifier: Vm6Xxq3/o6Q+9amxMZJH4eU8KPlZdDmz9Ei5dISdBmc=
Subject key identifier: 9F:8C:33:EE:C1:BE:1F:10:20:91:22:E9:65:C9:39:60:FD:D6:51:C9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2346
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n4wz7sG-HxAgkSLpZck5YP3WUck.roa
Signing time: Fri 25 Nov 2022 04:42:17 +0000
ROA not before: Fri 25 Nov 2022 04:42:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9030 (0x2346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9F8C33EEC1BE1F10209122E965C93960FDD651C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:50:44:e5:56:e2:6b:02:b2:41:17:e0:90:
80:0a:82:6d:5e:48:0d:68:ff:f7:a1:66:63:e6:e6:
2d:0f:a3:16:23:39:7e:65:72:ae:aa:65:2f:e5:55:
58:5e:f8:26:9b:e6:48:28:95:86:15:63:47:42:44:
7b:ff:8e:c0:ec:a3:db:05:fc:07:d1:45:12:4b:b2:
19:5a:b3:00:21:ed:fd:a5:a8:f9:e2:12:4d:d5:5c:
ec:1a:8e:97:12:71:75:81:99:d8:af:d7:02:51:1f:
da:d1:a8:83:be:aa:f5:9c:43:52:af:1f:70:fd:c2:
3c:e6:cf:1d:19:3f:67:36:8c:a7:d6:b3:49:18:5b:
1a:58:83:0e:41:bd:d8:d3:a4:e7:3a:35:36:11:06:
e4:4d:ed:2b:fe:79:11:51:3f:f1:af:cf:71:ba:44:
a4:d9:8c:3e:79:b0:ef:60:ce:60:3f:b4:6e:f1:d0:
38:11:d2:2b:b7:7d:d2:46:ff:f1:41:a5:ba:8b:f9:
7d:9d:b0:05:e4:22:54:ec:ca:31:ee:4c:21:a9:93:
1d:9f:88:68:26:c0:b8:09:c3:72:a6:3d:bb:e4:c6:
9a:26:b6:d0:e4:ab:1a:7b:e7:02:cd:38:ec:db:0f:
a5:37:0b:7a:f1:7b:73:0b:01:08:3b:d7:f2:d4:e5:
07:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8C:33:EE:C1:BE:1F:10:20:91:22:E9:65:C9:39:60:FD:D6:51:C9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n4wz7sG-HxAgkSLpZck5YP3WUck.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.184.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:ea:91:68:d9:5d:fd:1f:e2:a5:7c:00:69:28:68:74:8c:0a:
ad:dd:b9:5b:d7:5f:1c:3d:fd:0d:a8:b3:6a:5c:1d:8c:c6:66:
f9:86:47:38:ee:1a:5e:45:d2:02:5b:db:b7:bc:0f:26:7b:56:
ca:08:35:7a:dc:b2:3c:99:8e:e0:2a:19:68:61:e1:3d:42:c9:
dc:3f:85:8b:0c:63:95:c3:12:7c:fb:f1:0a:91:d4:4f:f6:78:
6a:c5:a3:73:bd:0a:23:a0:db:ea:ef:98:3e:8f:1a:31:6b:b7:
5f:1f:d8:da:d7:5c:fb:dd:50:d6:c3:f4:28:66:21:74:51:d5:
c7:b4:54:44:f9:eb:9c:57:33:b8:56:84:ce:86:56:44:cc:d3:
f5:17:6c:18:50:df:d7:22:e3:e2:09:33:e8:09:6d:4b:76:62:
18:83:63:10:f0:1f:db:7d:6d:e6:05:64:af:78:4e:23:ee:a9:
87:e4:d2:33:53:dc:1e:aa:40:91:5f:83:35:ec:b1:33:76:08:
c0:23:95:85:a8:23:77:ca:18:ef:30:df:0a:36:9a:42:3b:a2:
bc:82:23:54:5f:c0:1c:3b:44:0d:db:48:42:e9:48:74:54:aa:
d1:6b:70:7c:ac:c3:62:36:97:eb:84:48:0e:29:a1:89:1a:bc:
c7:de:eb:e7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICI0YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQyMTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDlGOEMzM0VFQzFCRTFG
MTAyMDkxMjJFOTY1QzkzOTYwRkRENjUxQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7eFBE5VbiawKyQRfgkIAKgm1eSA1o//ehZmPm5i0PoxYjOX5l
cq6qZS/lVVhe+Cab5kgolYYVY0dCRHv/jsDso9sF/AfRRRJLshlaswAh7f2lqPni
Ek3VXOwajpcScXWBmdiv1wJRH9rRqIO+qvWcQ1KvH3D9wjzmzx0ZP2c2jKfWs0kY
WxpYgw5BvdjTpOc6NTYRBuRN7Sv+eRFRP/Gvz3G6RKTZjD55sO9gzmA/tG7x0DgR
0iu3fdJG//FBpbqL+X2dsAXkIlTsyjHuTCGpkx2fiGgmwLgJw3KmPbvkxpomttDk
qxp75wLNOOzbD6U3C3rxe3MLAQg71/LU5Qd9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUn4wz7sG+HxAgkSLpZck5YP3WUckwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL240d3o3c0ctSHhBZ2tTTHBa
Y2s1WVAzV1Vjay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wrgwDQYJKoZIhvcNAQELBQADggEBAAzqkWjZXf0f4qV8AGkoaHSMCq3duVvXXxw9
/Q2os2pcHYzGZvmGRzjuGl5F0gJb27e8DyZ7VsoINXrcsjyZjuAqGWhh4T1Cydw/
hYsMY5XDEnz78QqR1E/2eGrFo3O9CiOg2+rvmD6PGjFrt18f2NrXXPvdUNbD9Chm
IXRR1ce0VET565xXM7hWhM6GVkTM0/UXbBhQ39ci4+IJM+gJbUt2YhiDYxDwH9t9
beYFZK94TiPuqYfk0jNT3B6qQJFfgzXssTN2CMAjlYWoI3fKGO8w3wo2mkI7oryC
I1RfwBw7RA3bSELpSHRUqtFrcHysw2I2l+uESA4poYkavMfe6+c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org