Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nQjj09lwwm5i3U2aD0p6f4kNFHI.roa
File: nQjj09lwwm5i3U2aD0p6f4kNFHI.roa (raw, json)
Hash identifier: kWz1e9cW9U6OrjH4hnz7ZaKohiVNHqp35BH7TEA42L4=
Subject key identifier: 9D:08:E3:D3:D9:70:C2:6E:62:DD:4D:9A:0F:4A:7A:7F:89:0D:14:72
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D1E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nQjj09lwwm5i3U2aD0p6f4kNFHI.roa
Signing time: Tue 29 Sep 2020 09:54:12 +0000
ROA not before: Tue 29 Sep 2020 09:54:12 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3358 (0xd1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:12 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9D08E3D3D970C26E62DD4D9A0F4A7A7F890D1472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9f:c9:b1:8c:a1:de:42:16:83:bf:48:10:6f:
90:30:68:e2:af:96:70:6e:ab:ab:85:99:78:31:0e:
36:07:1d:4f:2d:b8:51:fc:e0:be:0e:84:76:36:9e:
a5:c8:16:8f:d1:01:f3:6d:c9:aa:54:db:06:90:b9:
c3:51:73:f7:87:f7:29:96:c4:21:58:b5:24:90:63:
e0:8c:fa:33:c5:8e:3d:d7:f5:ee:16:b6:83:6f:89:
d3:f4:45:b7:9f:94:4e:86:27:bd:0e:86:cc:32:93:
ea:af:29:42:16:7b:66:e6:23:6a:8d:81:d2:13:b3:
d3:84:58:e6:f6:78:9d:a9:11:42:33:6d:82:22:69:
8a:fa:ac:34:14:a7:78:ba:0e:e9:ed:36:64:41:25:
3f:7e:11:7b:cc:3d:ee:90:57:82:e1:0e:5f:27:b4:
80:63:72:be:91:89:de:1c:65:30:87:08:cb:34:cd:
72:4d:74:81:e3:e1:cc:53:b0:a9:32:ac:26:c2:84:
16:0f:a0:03:53:12:09:10:8f:ed:aa:6f:95:32:eb:
2f:4d:f4:eb:c9:df:92:71:53:2a:02:15:ef:db:42:
aa:45:8d:5a:df:3e:91:7a:a5:1d:11:40:1b:18:ee:
82:4e:9a:af:f8:ef:ff:98:25:a0:83:e5:dc:bd:9e:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:08:E3:D3:D9:70:C2:6E:62:DD:4D:9A:0F:4A:7A:7F:89:0D:14:72
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nQjj09lwwm5i3U2aD0p6f4kNFHI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.232.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:a0:03:08:65:6c:67:9a:e2:1c:4f:77:ec:eb:e1:4d:86:13:
08:cb:de:5f:b2:13:44:9a:47:04:86:80:2b:0d:02:bb:4c:2d:
1d:25:bc:ff:ea:d2:14:bb:d2:8b:b0:c7:ec:5c:06:ed:df:64:
50:d7:14:ab:9d:31:1f:2f:7b:68:9a:26:2b:d1:d8:64:ba:af:
c7:62:36:be:2c:d6:4f:60:88:83:48:77:45:6e:78:c4:5d:4c:
23:fc:36:16:82:b7:c0:96:f5:6f:2b:3b:77:5f:ee:9c:ea:4f:
91:1c:b8:c2:7b:a3:36:ca:5f:d7:58:b2:3d:cf:4b:db:7a:e0:
39:9d:e8:a0:6c:5e:9f:fb:54:86:d7:7f:fa:37:72:53:8d:ef:
36:46:65:3d:e6:0b:ed:81:63:f0:da:e2:01:0b:82:f6:1a:03:
5f:2d:4f:73:08:a2:af:59:c7:5e:9b:3f:87:2d:e8:8c:d1:f1:
ea:9e:eb:36:22:eb:77:15:a3:87:91:5c:d6:c7:96:a4:28:65:
3b:99:26:12:22:ef:2a:9a:4c:a2:b1:1f:2a:62:87:5c:df:79:
92:9a:da:5a:4e:f0:9e:e9:c4:5d:a8:e7:31:f2:47:a4:9b:17:
aa:fc:40:bc:63:8e:58:3a:fc:40:0a:eb:20:f0:26:c3:7d:f4:
7c:43:32:f6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDR4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0MTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDlEMDhFM0QzRDk3MEMy
NkU2MkRENEQ5QTBGNEE3QTdGODkwRDE0NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDyn8mxjKHeQhaDv0gQb5AwaOKvlnBuq6uFmXgxDjYHHU8tuFH8
4L4OhHY2nqXIFo/RAfNtyapU2waQucNRc/eH9ymWxCFYtSSQY+CM+jPFjj3X9e4W
toNvidP0RbeflE6GJ70Ohswyk+qvKUIWe2bmI2qNgdITs9OEWOb2eJ2pEUIzbYIi
aYr6rDQUp3i6DuntNmRBJT9+EXvMPe6QV4LhDl8ntIBjcr6Rid4cZTCHCMs0zXJN
dIHj4cxTsKkyrCbChBYPoANTEgkQj+2qb5Uy6y9N9OvJ35JxUyoCFe/bQqpFjVrf
PpF6pR0RQBsY7oJOmq/47/+YJaCD5dy9nu45AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUnQjj09lwwm5i3U2aD0p6f4kNFHIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL25RamowOWx3d201aTNVMmFE
MHA2ZjRrTkZISS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
w+gwDQYJKoZIhvcNAQELBQADggEBAGqgAwhlbGea4hxPd+zr4U2GEwjL3l+yE0Sa
RwSGgCsNArtMLR0lvP/q0hS70ouwx+xcBu3fZFDXFKudMR8ve2iaJivR2GS6r8di
Nr4s1k9giINId0VueMRdTCP8NhaCt8CW9W8rO3df7pzqT5EcuMJ7ozbKX9dYsj3P
S9t64Dmd6KBsXp/7VIbXf/o3clON7zZGZT3mC+2BY/Da4gELgvYaA18tT3MIoq9Z
x16bP4ct6IzR8eqe6zYi63cVo4eRXNbHlqQoZTuZJhIi7yqaTKKxHypih1zfeZKa
2lpO8J7pxF2o5zHyR6SbF6r8QLxjjlg6/EAK6yDwJsN99HxDMvY=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:39 2023 by rpki-client on console-fra.rpki-client.org