Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t5WUpQ5yrnlMltmACG5Aixrdg_4.roa
File: t5WUpQ5yrnlMltmACG5Aixrdg_4.roa (raw, json)
Hash identifier: NRBhtjRDxItFn0nUGOXn90AbdF0sy1fs2LkrVMiAeFo=
Subject key identifier: B7:95:94:A5:0E:72:AE:79:4C:96:D9:80:08:6E:40:8B:1A:DD:83:FE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t5WUpQ5yrnlMltmACG5Aixrdg_4.roa
Signing time: Thu 15 Sep 2022 02:53:57 +0000
ROA not before: Thu 15 Sep 2022 02:53:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B79594A50E72AE794C96D980086E408B1ADD83FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:50:79:f4:ec:ac:2b:c7:6a:6e:d2:0e:2e:
e8:7b:27:e5:ec:1f:15:a2:3f:3a:ef:89:e6:6c:b9:
cd:1e:3f:75:5f:d3:1f:ae:9f:0d:d4:d8:94:31:f3:
3b:57:7d:73:6c:13:30:41:3a:62:0a:27:2b:16:51:
df:a4:35:e1:e8:96:96:fe:48:39:cf:66:f2:bc:a3:
f0:9b:86:04:e0:74:bc:9f:85:a4:41:70:95:73:ee:
58:a0:70:61:03:fc:f9:ff:09:5b:e3:eb:d0:66:67:
5b:b4:a1:2c:ec:2c:d0:ea:78:bd:a3:d0:29:e2:26:
30:42:c5:ff:ac:2c:6e:46:ad:13:b7:e2:9c:f1:dd:
c2:a1:4b:81:f8:3b:d0:48:36:6c:3d:65:c8:8e:d2:
7c:bb:d2:0f:de:59:60:b5:53:1e:f9:7a:08:5a:c0:
44:ad:4d:d1:5e:4c:7b:28:df:b1:39:21:26:e9:37:
0f:06:23:2e:f9:11:64:a5:d9:4a:43:a5:0c:db:bf:
59:32:e5:bc:88:98:3e:0f:2f:bc:ef:39:ff:bc:9c:
60:e6:20:38:91:3b:0d:e6:53:81:0e:02:d2:0c:08:
fa:95:1f:97:f7:91:9c:c9:6a:41:ea:ef:9e:e3:fb:
0c:bc:fe:f0:45:c2:db:05:d4:54:9f:d1:07:b4:cc:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:95:94:A5:0E:72:AE:79:4C:96:D9:80:08:6E:40:8B:1A:DD:83:FE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t5WUpQ5yrnlMltmACG5Aixrdg_4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.196.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:ce:0a:24:32:a2:06:bc:ee:c3:22:37:9a:cc:d6:9a:ec:5e:
85:45:b8:50:3b:54:b7:bb:38:68:f2:92:37:45:2f:68:9b:fe:
43:4e:d6:1c:e6:13:54:02:e2:e9:87:96:81:23:85:1d:58:73:
94:b0:89:3a:64:80:22:d3:a2:13:11:cf:28:4d:26:67:f7:14:
16:08:e4:ae:3f:40:10:13:d6:64:68:97:d4:25:0a:96:59:e5:
a9:e4:c1:66:f0:d3:4a:12:68:00:b2:32:24:a0:8b:89:15:22:
80:57:b9:27:f4:fc:d8:81:fc:7f:5f:06:48:0f:19:8a:b3:6a:
e2:de:dc:04:61:e7:59:62:46:b2:0a:d0:e9:40:25:88:de:83:
07:af:2b:f5:37:e8:7b:6d:34:9e:21:00:42:d5:d2:87:f5:2a:
a1:3b:10:24:37:03:b3:c6:fe:39:75:e9:38:6b:e9:9b:77:63:
5c:b2:de:da:5b:b5:9a:cc:c8:da:d3:77:7f:96:9d:4a:f0:8b:
87:b0:de:3c:bb:2f:dc:f5:ac:82:09:20:7e:18:94:05:f6:9c:
05:76:11:cf:1c:3f:d7:a7:d5:78:43:5b:94:a0:42:93:db:7c:
3b:8a:8a:b5:92:2e:ac:c4:75:9c:59:d0:c5:d1:eb:84:c7:a6:
65:d6:8e:1d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzNTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI3OTU5NEE1MEU3MkFF
Nzk0Qzk2RDk4MDA4NkU0MDhCMUFERDgzRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZVVB59OysK8dqbtIOLuh7J+XsHxWiPzrvieZsuc0eP3Vf0x+u
nw3U2JQx8ztXfXNsEzBBOmIKJysWUd+kNeHolpb+SDnPZvK8o/CbhgTgdLyfhaRB
cJVz7ligcGED/Pn/CVvj69BmZ1u0oSzsLNDqeL2j0CniJjBCxf+sLG5GrRO34pzx
3cKhS4H4O9BINmw9ZciO0ny70g/eWWC1Ux75eghawEStTdFeTHso37E5ISbpNw8G
Iy75EWSl2UpDpQzbv1ky5byImD4PL7zvOf+8nGDmIDiROw3mU4EOAtIMCPqVH5f3
kZzJakHq757j+wy8/vBFwtsF1FSf0Qe0zKgdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUt5WUpQ5yrnlMltmACG5Aixrdg/4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Q1V1VwUTV5cm5sTWx0bUFD
RzVBaXhyZGdfNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wsQwDQYJKoZIhvcNAQELBQADggEBAE7OCiQyoga87sMiN5rM1prsXoVFuFA7VLe7
OGjykjdFL2ib/kNO1hzmE1QC4umHloEjhR1Yc5SwiTpkgCLTohMRzyhNJmf3FBYI
5K4/QBAT1mRol9QlCpZZ5ankwWbw00oSaACyMiSgi4kVIoBXuSf0/NiB/H9fBkgP
GYqzauLe3ARh51liRrIK0OlAJYjegwevK/U36HttNJ4hAELV0of1KqE7ECQ3A7PG
/jl16Thr6Zt3Y1yy3tpbtZrMyNrTd3+WnUrwi4ew3jy7L9z1rIIJIH4YlAX2nAV2
Ec8cP9en1XhDW5SgQpPbfDuKirWSLqzEdZxZ0MXR64THpmXWjh0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org