Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p0t-QqabqRysYDNTcKIdlHE30Lg.roa
File: p0t-QqabqRysYDNTcKIdlHE30Lg.roa (raw, json)
Hash identifier: 28GJo24UZa3Xn/Sq2Mm0sfABfWnagu9MyDGawYJcGFE=
Subject key identifier: A7:4B:7E:42:A6:9B:A9:1C:AC:60:33:53:70:A2:1D:94:71:37:D0:B8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D65
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p0t-QqabqRysYDNTcKIdlHE30Lg.roa
Signing time: Wed 29 Sep 2021 02:48:58 +0000
ROA not before: Wed 29 Sep 2021 02:48:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7525 (0x1d65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:58 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A74B7E42A69BA91CAC60335370A21D947137D0B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:7a:68:11:07:e9:11:55:b3:e6:c4:32:e7:
4c:38:a2:77:81:7f:1b:c3:01:82:bc:94:08:2d:a6:
e1:af:a4:c1:98:e1:05:fb:ea:8c:f8:ae:f2:ac:72:
a4:48:25:f1:f7:d2:3f:57:c9:84:7a:16:f1:c0:68:
38:21:f0:d9:95:cc:ba:41:69:37:c1:c9:d1:6b:23:
64:50:a1:85:8e:d0:72:4b:68:97:91:e5:4a:34:d7:
52:51:ae:58:3f:2a:fc:39:d4:33:d9:84:a5:0e:05:
ec:41:f0:3b:87:88:7a:cb:6e:56:4b:76:d9:d5:84:
3f:c1:82:b6:8a:ee:87:69:51:5f:21:4f:53:7a:94:
51:6c:95:22:43:78:81:af:9e:53:8d:56:be:87:a0:
7a:2e:7c:af:b2:c9:dd:be:37:16:4f:36:94:c7:26:
a9:eb:a7:bb:33:d0:01:7a:a9:f5:ee:eb:a0:26:31:
e5:92:ab:8c:61:fe:98:9c:3a:a8:a6:6a:48:33:c0:
8c:28:4c:40:da:e1:95:15:ba:96:88:32:92:b3:e4:
eb:c8:b0:94:2b:34:fb:3b:5a:b9:c8:ae:fd:31:06:
24:79:97:27:96:dd:39:9b:62:b3:a7:04:d6:11:79:
0c:4d:f5:d5:af:1e:f9:79:41:01:43:9c:23:26:a2:
9e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4B:7E:42:A6:9B:A9:1C:AC:60:33:53:70:A2:1D:94:71:37:D0:B8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p0t-QqabqRysYDNTcKIdlHE30Lg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.232.0/22
Signature Algorithm: sha256WithRSAEncryption
78:29:4c:56:99:c0:6a:2d:03:d0:0e:85:09:e2:4b:c0:70:4b:
ad:74:a0:7d:47:6c:66:20:05:6e:26:91:80:73:d9:aa:33:e3:
07:89:da:6a:34:70:5d:bf:48:ff:f1:56:bd:6e:cc:40:62:db:
30:6b:96:60:71:6e:b9:8c:a2:b9:0b:23:19:01:d9:1c:0b:5b:
8b:e2:4f:88:a5:64:5e:9f:c1:03:fb:7f:71:f5:8d:d1:02:fc:
7f:65:87:2c:c9:57:88:17:a6:85:32:bd:24:0e:59:45:03:74:
1d:26:b0:1c:53:e7:23:30:45:d4:09:fc:78:62:bc:f1:9d:89:
84:2c:74:05:90:81:f2:54:a2:fa:90:7c:e3:14:41:88:da:e4:
fd:ed:ee:b9:34:c8:a9:bc:a9:4c:47:3c:2b:b0:6c:54:27:6d:
65:77:c8:0b:fa:dc:e7:fa:31:57:67:23:3d:b0:66:6e:0c:92:
3b:78:6d:b8:b1:9d:51:20:3a:d7:8d:ff:14:cd:a6:da:16:ce:
cd:09:1f:6e:47:00:3b:4c:ec:c0:a8:fa:51:d3:58:a5:a2:b8:
c6:f2:a7:11:a0:32:ea:75:a2:65:a5:d0:37:45:d5:10:ae:ae:
bf:a3:47:c9:b9:03:8e:52:1f:bc:22:c5:9b:93:20:c5:a9:6c:
96:ca:d2:8f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHWUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4NThaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEE3NEI3RTQyQTY5QkE5
MUNBQzYwMzM1MzcwQTIxRDk0NzEzN0QwQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwEXpoEQfpEVWz5sQy50w4oneBfxvDAYK8lAgtpuGvpMGY4QX7
6oz4rvKscqRIJfH30j9XyYR6FvHAaDgh8NmVzLpBaTfBydFrI2RQoYWO0HJLaJeR
5Uo011JRrlg/Kvw51DPZhKUOBexB8DuHiHrLblZLdtnVhD/BgraK7odpUV8hT1N6
lFFslSJDeIGvnlONVr6HoHoufK+yyd2+NxZPNpTHJqnrp7sz0AF6qfXu66AmMeWS
q4xh/picOqimakgzwIwoTEDa4ZUVupaIMpKz5OvIsJQrNPs7WrnIrv0xBiR5lyeW
3TmbYrOnBNYReQxN9dWvHvl5QQFDnCMmop61AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUp0t+QqabqRysYDNTcKIdlHE30LgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3AwdC1RcWFicVJ5c1lETlRj
S0lkbEhFMzBMZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wugwDQYJKoZIhvcNAQELBQADggEBAHgpTFaZwGotA9AOhQniS8BwS610oH1HbGYg
BW4mkYBz2aoz4weJ2mo0cF2/SP/xVr1uzEBi2zBrlmBxbrmMorkLIxkB2RwLW4vi
T4ilZF6fwQP7f3H1jdEC/H9lhyzJV4gXpoUyvSQOWUUDdB0msBxT5yMwRdQJ/Hhi
vPGdiYQsdAWQgfJUovqQfOMUQYja5P3t7rk0yKm8qUxHPCuwbFQnbWV3yAv63Of6
MVdnIz2wZm4Mkjt4bbixnVEgOteN/xTNptoWzs0JH25HADtM7MCo+lHTWKWiuMby
pxGgMup1omWl0DdF1RCurr+jR8m5A45SH7wixZuTIMWpbJbK0o8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:57 2025 by rpki-client