Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pTdiLCToOuM5GA-LTFhjBcM5UF0.roa
File: pTdiLCToOuM5GA-LTFhjBcM5UF0.roa (raw, json)
Hash identifier: GigWsLCZmHQCwe4zx/VqTHKIj1U6D8IzSpnRNRC5lKM=
Subject key identifier: A5:37:62:2C:24:E8:3A:E3:39:18:0F:8B:4C:58:63:05:C3:39:50:5D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pTdiLCToOuM5GA-LTFhjBcM5UF0.roa
Signing time: Thu 15 Sep 2022 02:46:12 +0000
ROA not before: Thu 15 Sep 2022 02:46:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A537622C24E83AE339180F8B4C586305C339505D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:e5:8c:ff:ff:52:01:eb:b9:a7:ef:6a:e2:
53:18:f0:79:ce:0a:44:2c:72:02:3c:4d:f8:63:03:
2a:65:05:a7:38:16:be:59:76:ef:00:56:2b:37:b0:
d5:d1:60:eb:55:7a:a2:de:22:24:85:21:dd:08:be:
1c:93:6b:e0:17:55:ec:a6:75:5d:a2:c9:32:90:6a:
ab:3f:1c:bb:fc:97:72:c8:d4:cc:f4:a1:44:e0:5b:
33:aa:86:0b:ef:81:b8:ac:33:42:61:bd:05:87:f7:
91:6f:24:aa:94:fe:a6:ff:0e:a1:2d:47:8d:85:69:
79:ef:c9:c0:38:1d:0c:de:26:c6:20:c8:52:03:e6:
ca:6c:27:36:18:97:60:29:a7:65:91:79:16:f0:bd:
89:a7:b9:6e:9d:e5:9b:6a:01:de:68:06:c1:65:69:
84:cd:6a:58:0f:66:ac:80:ee:7e:b8:db:5c:e0:93:
9d:ce:eb:7b:10:02:3e:b5:00:42:a4:75:ab:19:1b:
f4:9d:3d:45:9f:1d:4e:ca:a3:1b:91:3d:ca:0f:6d:
b5:4b:fd:ce:8d:51:24:40:15:62:e6:2e:6e:f0:47:
76:7d:62:20:43:a8:98:15:ae:b6:e8:d2:e6:38:8f:
93:a9:30:d6:f8:fc:14:7f:be:33:80:80:21:78:e8:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:37:62:2C:24:E8:3A:E3:39:18:0F:8B:4C:58:63:05:C3:39:50:5D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pTdiLCToOuM5GA-LTFhjBcM5UF0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:aa:3c:5d:f6:e3:36:d5:af:5d:4f:2b:60:93:6a:c5:cd:80:
2d:0b:83:48:38:3e:92:e7:a2:2d:79:9b:57:64:9c:21:7f:04:
19:8e:0a:38:51:59:f4:20:77:02:84:d0:87:a4:74:33:b4:59:
92:df:66:b3:5f:da:72:5e:57:5f:55:0e:b6:5a:91:cb:33:64:
66:9e:ae:e5:05:be:80:12:60:c1:28:6c:c4:09:6b:57:76:e3:
75:b6:eb:d5:01:2f:d9:c9:6b:6a:38:ab:1c:c2:9b:6c:ad:5a:
78:0e:0d:67:4c:58:ff:55:92:84:81:1c:cc:a6:7a:f9:db:6c:
1c:19:82:43:0f:b0:cf:bb:d0:c0:06:5d:2e:31:b4:16:7d:56:
53:fa:1f:a5:c9:df:0d:ec:0f:5e:8f:28:df:33:05:fd:a9:ba:
29:2e:56:f9:c0:92:e9:97:4e:ca:9c:1c:80:a9:7d:4e:c6:46:
b7:85:03:b5:32:a3:27:d1:66:ab:99:0f:a9:ac:f8:c8:d5:ca:
37:d9:27:69:5c:9b:8a:14:30:aa:bd:8e:3c:25:b7:72:4b:e8:
4c:a4:a9:ef:fd:01:86:41:3e:b1:c5:fa:c1:2a:c5:95:fd:44:
18:a7:0c:f6:7b:5a:c5:c4:8f:70:37:ee:e3:a1:de:30:2a:31:
ee:05:f2:71
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ2MTJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEE1Mzc2MjJDMjRFODNB
RTMzOTE4MEY4QjRDNTg2MzA1QzMzOTUwNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+0eWM//9SAeu5p+9q4lMY8HnOCkQscgI8TfhjAyplBac4Fr5Z
du8AVis3sNXRYOtVeqLeIiSFId0IvhyTa+AXVeymdV2iyTKQaqs/HLv8l3LI1Mz0
oUTgWzOqhgvvgbisM0JhvQWH95FvJKqU/qb/DqEtR42FaXnvycA4HQzeJsYgyFID
5spsJzYYl2App2WReRbwvYmnuW6d5ZtqAd5oBsFlaYTNalgPZqyA7n6421zgk53O
63sQAj61AEKkdasZG/SdPUWfHU7KoxuRPcoPbbVL/c6NUSRAFWLmLm7wR3Z9YiBD
qJgVrrbo0uY4j5OpMNb4/BR/vjOAgCF46OllAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUpTdiLCToOuM5GA+LTFhjBcM5UF0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BUZGlMQ1RvT3VNNUdBLUxU
RmhqQmNNNVVGMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wwAwDQYJKoZIhvcNAQELBQADggEBAEuqPF324zbVr11PK2CTasXNgC0Lg0g4PpLn
oi15m1dknCF/BBmOCjhRWfQgdwKE0IekdDO0WZLfZrNf2nJeV19VDrZakcszZGae
ruUFvoASYMEobMQJa1d243W269UBL9nJa2o4qxzCm2ytWngODWdMWP9VkoSBHMym
evnbbBwZgkMPsM+70MAGXS4xtBZ9VlP6H6XJ3w3sD16PKN8zBf2puikuVvnAkumX
TsqcHICpfU7GRreFA7UyoyfRZquZD6ms+MjVyjfZJ2lcm4oUMKq9jjwlt3JL6Eyk
qe/9AYZBPrHF+sEqxZX9RBinDPZ7WsXEj3A37uOh3jAqMe4F8nE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:40 2024 by rpki-client on console-ams.rpki-client.org