Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n72YXHEpypfS_WfV3O-Auip16jw.roa
File: n72YXHEpypfS_WfV3O-Auip16jw.roa (raw, json)
Hash identifier: e+DXZ2S9Zn/gRgZFRF1ZyugvqJYeM3LN4J1dH9eGesU=
Subject key identifier: 9F:BD:98:5C:71:29:CA:97:D2:FD:67:D5:DC:EF:80:BA:2A:75:EA:3C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n72YXHEpypfS_WfV3O-Auip16jw.roa
Signing time: Thu 15 Sep 2022 02:44:51 +0000
ROA not before: Thu 15 Sep 2022 02:44:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9FBD985C7129CA97D2FD67D5DCEF80BA2A75EA3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:3e:1b:24:f1:50:48:11:cd:02:af:06:fc:
80:fb:d3:a6:f6:6a:9d:bc:9c:49:e6:14:fc:a2:a5:
3d:7e:7b:6e:24:42:85:a3:41:b0:3f:1d:74:ca:00:
c3:89:71:89:fb:45:39:5d:af:40:36:71:6c:5e:a9:
4a:8f:b7:57:2b:15:ad:ff:7d:17:77:73:6a:0d:cd:
55:22:32:1e:b8:71:fb:1d:25:45:e8:a8:5b:24:f2:
8a:db:02:7c:0c:36:be:dd:ff:e4:42:66:8c:75:6f:
55:f7:c1:c7:71:3b:dc:d1:4a:01:91:5c:46:2f:39:
f4:bf:f0:fb:1c:d9:42:02:72:30:2b:99:37:f4:4f:
70:c1:13:d8:00:ea:1a:ef:c7:b6:f5:42:db:3a:3f:
b0:a8:26:f6:79:2a:db:28:6e:43:70:f4:89:73:88:
4d:21:37:3e:dc:8a:fe:70:8a:7a:95:cd:e6:cf:04:
65:7f:8e:a7:af:9a:1d:68:31:d8:c2:fc:81:18:d0:
54:b5:39:2f:4f:77:ce:6f:2b:48:db:17:b5:68:5f:
02:49:5c:03:e7:59:b9:78:e2:e9:1e:bd:91:19:a3:
18:42:ee:ec:bb:25:28:75:c1:44:77:ca:68:d4:da:
e1:fa:e5:88:18:91:8b:8a:ac:6d:97:de:58:06:3c:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BD:98:5C:71:29:CA:97:D2:FD:67:D5:DC:EF:80:BA:2A:75:EA:3C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n72YXHEpypfS_WfV3O-Auip16jw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:9b:8a:0a:7f:21:f7:e2:b0:e6:b3:6a:67:c8:35:86:2b:d8:
a3:84:2a:91:7d:f6:be:60:e6:94:b7:32:36:46:c4:8f:d7:6b:
01:c9:c4:64:69:a0:d8:d2:70:e9:f7:88:8f:32:04:0d:be:cb:
fc:6c:ab:92:7c:e3:bf:c8:49:7f:31:e2:b9:8c:0b:07:a5:a3:
79:ff:7a:46:ec:43:a6:99:ef:05:a6:fd:43:96:58:df:45:ba:
3b:63:b9:e4:e7:c3:c9:b6:1c:d2:3a:63:f9:34:ed:58:63:7e:
64:d3:22:3a:5b:84:5a:85:f1:fa:5c:71:5a:d4:47:b4:00:b3:
c4:b5:26:0d:2a:97:28:af:32:80:84:98:04:55:02:f7:16:89:
d1:a0:12:0e:f6:1b:8a:ce:77:cf:e4:d3:d4:60:5d:bc:63:27:
d0:a5:36:e4:9d:1a:8a:38:61:2a:b3:68:c2:83:db:e8:32:a0:
8b:b4:1f:d3:2e:43:03:42:57:29:36:3a:e8:90:3b:2c:80:8d:
06:67:3a:f5:32:54:c4:a3:73:15:d2:20:ea:72:28:61:7c:18:
48:8f:c7:e5:15:5d:af:c5:3b:32:b1:ad:af:0c:8a:b5:bf:e7:
f9:08:b3:3d:49:75:60:1d:0e:d8:0d:5a:a8:b6:93:6e:d4:7c:
8e:f8:ce:03
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ0NTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDlGQkQ5ODVDNzEyOUNB
OTdEMkZENjdENURDRUY4MEJBMkE3NUVBM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNEj4bJPFQSBHNAq8G/ID706b2ap28nEnmFPyipT1+e24kQoWj
QbA/HXTKAMOJcYn7RTldr0A2cWxeqUqPt1crFa3/fRd3c2oNzVUiMh64cfsdJUXo
qFsk8orbAnwMNr7d/+RCZox1b1X3wcdxO9zRSgGRXEYvOfS/8Psc2UICcjArmTf0
T3DBE9gA6hrvx7b1Qts6P7CoJvZ5KtsobkNw9IlziE0hNz7civ5winqVzebPBGV/
jqevmh1oMdjC/IEY0FS1OS9Pd85vK0jbF7VoXwJJXAPnWbl44ukevZEZoxhC7uy7
JSh1wUR3ymjU2uH65YgYkYuKrG2X3lgGPDynAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUn72YXHEpypfS/WfV3O+Auip16jwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL243MllYSEVweXBmU19XZlYz
Ty1BdWlwMTZqdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wkswDQYJKoZIhvcNAQELBQADggEBACubigp/IffisOazamfINYYr2KOEKpF99r5g
5pS3MjZGxI/XawHJxGRpoNjScOn3iI8yBA2+y/xsq5J847/ISX8x4rmMCwelo3n/
ekbsQ6aZ7wWm/UOWWN9FujtjueTnw8m2HNI6Y/k07VhjfmTTIjpbhFqF8fpccVrU
R7QAs8S1Jg0qlyivMoCEmARVAvcWidGgEg72G4rOd8/k09RgXbxjJ9ClNuSdGoo4
YSqzaMKD2+gyoIu0H9MuQwNCVyk2OuiQOyyAjQZnOvUyVMSjcxXSIOpyKGF8GEiP
x+UVXa/FOzKxra8MirW/5/kIsz1JdWAdDtgNWqi2k27UfI74zgM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org