Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pgZzoL-FQKlPNTmFAv6sOe40KgA.roa
File: pgZzoL-FQKlPNTmFAv6sOe40KgA.roa (raw, json)
Hash identifier: T9iEp9G6y6YpL+TDUwHFQbLIz4sFU0xQy2yzAo/Xqus=
Subject key identifier: A6:06:73:A0:BF:85:40:A9:4F:35:39:85:02:FE:AC:39:EE:34:2A:00
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pgZzoL-FQKlPNTmFAv6sOe40KgA.roa
Signing time: Thu 15 Sep 2022 02:52:54 +0000
ROA not before: Thu 15 Sep 2022 02:52:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A60673A0BF8540A94F35398502FEAC39EE342A00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:2a:f6:c1:74:b4:d2:d2:f5:9b:a9:6f:8a:
b5:6f:d9:66:bb:38:c0:29:a8:d6:17:1b:be:58:ae:
2f:e1:aa:1f:37:6d:c3:c6:29:1a:51:5e:a0:f6:e2:
c6:97:8d:67:5e:ac:6a:19:89:40:c7:72:22:36:88:
da:29:e6:ac:34:ab:15:78:3f:a1:e1:3c:94:fd:23:
80:5f:14:e2:7d:bf:b8:56:a5:9e:99:69:16:e0:84:
6f:55:ea:b0:41:e2:12:41:10:b4:e0:5e:0c:6f:45:
ad:7a:38:87:6a:51:8f:6f:40:01:a5:83:6a:41:06:
c0:85:d0:e3:aa:93:10:8a:b0:e7:90:34:68:10:b9:
8e:4a:ed:e4:26:9c:96:8b:f7:b5:1a:dd:f1:44:fd:
ff:28:fa:4e:86:41:68:56:c2:30:08:05:d5:d2:12:
ff:82:c0:10:00:62:c8:aa:d7:17:9e:49:41:56:e7:
a3:e0:80:98:76:8c:a4:e2:ec:ab:a0:ed:00:ea:d4:
c7:15:f2:10:ab:37:19:84:b7:7c:79:2e:dc:f2:70:
93:c3:64:e5:58:d7:de:0a:03:30:ba:20:15:d2:f4:
a6:cf:9a:a0:65:a8:5e:ec:a4:08:d0:00:4a:a5:46:
6f:fd:ad:ef:94:e8:71:09:dc:cb:55:24:e9:c0:05:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:06:73:A0:BF:85:40:A9:4F:35:39:85:02:FE:AC:39:EE:34:2A:00
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pgZzoL-FQKlPNTmFAv6sOe40KgA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.150.0/24
Signature Algorithm: sha256WithRSAEncryption
04:3c:78:2f:b0:a6:a3:5c:b4:ed:5f:90:0d:05:b8:4e:ae:61:
5b:1a:eb:02:8f:c9:67:f4:00:21:2b:20:b8:ac:97:1c:fe:dc:
4f:e0:d2:7a:fc:c2:3f:c6:80:a8:96:e3:1b:07:30:71:24:e8:
68:97:9c:a0:19:68:67:15:61:d9:15:d5:e6:e0:82:71:40:30:
14:1f:b0:8c:8a:89:42:69:d8:f2:9f:97:03:4a:4b:89:34:e7:
51:31:a2:ee:f6:65:ef:0f:da:03:c1:15:7c:f5:8e:4a:d5:97:
ef:a8:7f:4d:9c:a8:58:32:80:54:7c:15:7b:f5:3b:2d:cd:58:
cc:58:28:83:d0:c2:7b:7c:c5:4b:ac:45:cc:8c:fc:f6:5e:4a:
51:42:33:9e:68:f7:17:a8:9e:ec:93:73:9b:6c:71:35:26:0a:
00:e0:bd:67:f9:23:f3:4f:70:b4:c9:59:5f:cc:f1:c6:89:7b:
4a:c1:f9:ea:7c:35:59:da:19:a4:5c:f0:5f:bc:73:29:3d:b6:
01:c7:f9:a4:80:37:0f:df:8d:e1:ab:55:78:eb:0c:ec:e3:58:
2f:f7:9f:54:d0:1f:ba:34:55:07:df:d2:24:88:69:d5:9d:8b:
1a:aa:2a:3d:d0:37:36:18:0e:54:ea:f2:28:d3:23:c6:8f:56:
33:f2:5f:ec
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUyNTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEE2MDY3M0EwQkY4NTQw
QTk0RjM1Mzk4NTAyRkVBQzM5RUUzNDJBMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJDir2wXS00tL1m6lvirVv2Wa7OMApqNYXG75Yri/hqh83bcPG
KRpRXqD24saXjWderGoZiUDHciI2iNop5qw0qxV4P6HhPJT9I4BfFOJ9v7hWpZ6Z
aRbghG9V6rBB4hJBELTgXgxvRa16OIdqUY9vQAGlg2pBBsCF0OOqkxCKsOeQNGgQ
uY5K7eQmnJaL97Ua3fFE/f8o+k6GQWhWwjAIBdXSEv+CwBAAYsiq1xeeSUFW56Pg
gJh2jKTi7Kug7QDq1McV8hCrNxmEt3x5LtzycJPDZOVY194KAzC6IBXS9KbPmqBl
qF7spAjQAEqlRm/9re+U6HEJ3MtVJOnABXPrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUpgZzoL+FQKlPNTmFAv6sOe40KgAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BnWnpvTC1GUUtsUE5UbUZB
djZzT2U0MEtnQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
w5YwDQYJKoZIhvcNAQELBQADggEBAAQ8eC+wpqNctO1fkA0FuE6uYVsa6wKPyWf0
ACErILislxz+3E/g0nr8wj/GgKiW4xsHMHEk6GiXnKAZaGcVYdkV1ebggnFAMBQf
sIyKiUJp2PKflwNKS4k051Exou72Ze8P2gPBFXz1jkrVl++of02cqFgygFR8FXv1
Oy3NWMxYKIPQwnt8xUusRcyM/PZeSlFCM55o9xeonuyTc5tscTUmCgDgvWf5I/NP
cLTJWV/M8caJe0rB+ep8NVnaGaRc8F+8cyk9tgHH+aSANw/fjeGrVXjrDOzjWC/3
n1TQH7o0VQff0iSIadWdixqqKj3QNzYYDlTq8ijTI8aPVjPyX+w=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:54 2025 by rpki-client