Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxhlEspwwn9sScmEQRe97S5C11s.roa
File: uxhlEspwwn9sScmEQRe97S5C11s.roa (raw, json)
Hash identifier: QKA0SR92ivCT3dAPrZp0Rr3ockgkCG8QUrajFBLYums=
Subject key identifier: BB:18:65:12:CA:70:C2:7F:6C:49:C9:84:41:17:BD:ED:2E:42:D7:5B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CF3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxhlEspwwn9sScmEQRe97S5C11s.roa
Signing time: Wed 29 Sep 2021 02:48:25 +0000
ROA not before: Wed 29 Sep 2021 02:48:25 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7411 (0x1cf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:25 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BB186512CA70C27F6C49C9844117BDED2E42D75B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d7:ee:ee:87:32:63:67:91:90:f3:c5:8c:a0:
ed:32:6d:c2:77:3e:4e:85:62:7f:39:a7:21:95:75:
d8:e6:b0:a3:07:1d:a2:4d:d5:e8:74:df:32:f9:5e:
78:e9:03:23:c4:db:1c:24:74:e7:99:e1:3c:ae:59:
5f:f4:43:b7:dc:ad:6d:51:22:f3:50:09:be:65:42:
c1:b5:9b:7b:be:0d:06:34:e8:b6:15:30:ef:ec:82:
54:e1:f5:28:d5:65:d8:7d:b5:57:00:46:90:78:03:
8a:81:59:69:d5:75:4a:59:c8:bc:55:ca:c8:4a:5b:
ef:ee:d4:83:8f:4d:e5:c9:ac:5a:28:79:b9:16:c1:
0a:cc:f8:fa:90:31:5c:95:88:be:1e:43:21:f9:94:
29:97:ee:55:da:b3:a2:00:ff:49:e5:5d:ec:f9:01:
b1:9d:32:5b:75:7c:ab:d1:37:36:60:56:0f:95:a0:
a6:f8:96:c7:7f:cb:1b:b3:54:6f:4a:73:7c:59:ed:
94:dc:1c:a0:57:54:50:2e:3f:ee:1e:4b:47:89:39:
84:b6:5e:b9:34:dc:d4:42:11:ff:d1:82:21:3d:3b:
c3:56:72:da:d0:cf:b7:af:8a:99:83:4d:04:b3:13:
50:6c:c7:94:3e:c1:41:2e:24:5b:4b:0d:9c:c0:96:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:18:65:12:CA:70:C2:7F:6C:49:C9:84:41:17:BD:ED:2E:42:D7:5B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxhlEspwwn9sScmEQRe97S5C11s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:58:8d:28:3d:1c:76:d5:5f:b4:16:8b:8c:7e:98:90:8a:1c:
15:81:8f:82:a8:7f:4d:f3:0d:4a:87:ff:8f:02:86:e9:b3:68:
a6:92:e9:c7:67:21:93:7a:0e:89:5e:4a:43:47:cb:53:7b:51:
9f:17:c4:1f:6c:b9:91:22:a2:87:b6:1f:35:05:9f:4b:02:7a:
78:2d:d9:99:b7:50:6e:8c:0c:4e:b2:bf:9b:1b:0e:b7:9b:a9:
4a:1f:61:93:e8:54:4a:b1:7f:2f:f3:ab:ee:6e:b5:43:be:86:
1b:cc:92:8b:04:95:71:c6:09:9d:10:42:46:96:1f:1c:f9:dc:
65:d6:7d:7c:3e:e8:57:80:a6:85:d9:7a:85:db:64:a9:0e:1e:
f2:cb:72:16:eb:38:c2:04:f0:2e:26:97:66:54:8a:36:0b:29:
75:43:ee:b2:c6:4e:40:ab:3d:bf:28:2f:e8:c9:d5:5a:31:9c:
dc:ec:c5:8e:74:ac:fe:7d:ac:69:68:08:09:7b:03:0d:7f:52:
a0:91:be:36:0b:f2:9a:58:a8:00:8f:f4:ce:38:ef:63:0f:ea:
0d:6c:51:21:f1:f4:56:93:b9:d6:50:a4:49:42:24:1e:ba:37:
26:7b:93:fb:0b:fe:a3:8f:ce:0e:2e:05:b9:2e:f0:bb:9a:ad:
d7:b3:6d:e6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4MjVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEJCMTg2NTEyQ0E3MEMy
N0Y2QzQ5Qzk4NDQxMTdCREVEMkU0MkQ3NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDU1+7uhzJjZ5GQ88WMoO0ybcJ3Pk6FYn85pyGVddjmsKMHHaJN
1eh03zL5XnjpAyPE2xwkdOeZ4TyuWV/0Q7fcrW1RIvNQCb5lQsG1m3u+DQY06LYV
MO/sglTh9SjVZdh9tVcARpB4A4qBWWnVdUpZyLxVyshKW+/u1IOPTeXJrFooebkW
wQrM+PqQMVyViL4eQyH5lCmX7lXas6IA/0nlXez5AbGdMlt1fKvRNzZgVg+VoKb4
lsd/yxuzVG9Kc3xZ7ZTcHKBXVFAuP+4eS0eJOYS2Xrk03NRCEf/RgiE9O8NWctrQ
z7evipmDTQSzE1Bsx5Q+wUEuJFtLDZzAllj5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuxhlEspwwn9sScmEQRe97S5C11swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3V4aGxFc3B3d245c1NjbUVR
UmU5N1M1QzExcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wLQwDQYJKoZIhvcNAQELBQADggEBAIxYjSg9HHbVX7QWi4x+mJCKHBWBj4Kof03z
DUqH/48ChumzaKaS6cdnIZN6DoleSkNHy1N7UZ8XxB9suZEiooe2HzUFn0sCengt
2Zm3UG6MDE6yv5sbDrebqUofYZPoVEqxfy/zq+5utUO+hhvMkosElXHGCZ0QQkaW
Hxz53GXWfXw+6FeApoXZeoXbZKkOHvLLchbrOMIE8C4ml2ZUijYLKXVD7rLGTkCr
Pb8oL+jJ1VoxnNzsxY50rP59rGloCAl7Aw1/UqCRvjYL8ppYqACP9M4472MP6g1s
USHx9FaTudZQpElCJB66NyZ7k/sL/qOPzg4uBbku8LuardezbeY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org