Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w629kYtsvBebtGr9cySh2LvQzxY.roa
File: w629kYtsvBebtGr9cySh2LvQzxY.roa (raw, json)
Hash identifier: fuOjoeqsARiFSmj32Dn6upk/59EKCGqCHthI5sumA7E=
Subject key identifier: C3:AD:BD:91:8B:6C:BC:17:9B:B4:6A:FD:73:24:A1:D8:BB:D0:CF:16
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21FC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w629kYtsvBebtGr9cySh2LvQzxY.roa
Signing time: Fri 25 Nov 2022 04:40:38 +0000
ROA not before: Fri 25 Nov 2022 04:40:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8700 (0x21fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C3ADBD918B6CBC179BB46AFD7324A1D8BBD0CF16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f5:3f:1e:bc:7b:aa:35:30:34:f4:38:fd:d7:
8d:15:28:70:f0:66:f1:1d:bb:cf:2d:df:1e:71:c2:
2c:ef:7f:7f:27:9a:28:f4:34:1c:ff:d2:4f:ec:97:
15:dc:d8:cb:ea:d6:e4:05:6b:11:ad:a1:61:58:ab:
19:8c:b0:e4:8d:6f:10:df:4f:af:e1:c6:b8:5b:fb:
99:2d:f7:57:00:27:03:83:a1:2f:6e:e9:43:9e:ba:
7d:50:ca:5a:c7:56:ed:8f:85:b5:54:55:86:10:2a:
49:a7:e2:57:f3:eb:92:21:17:44:ae:64:49:4e:55:
c3:ad:12:16:d5:b6:16:26:0c:74:4a:72:7d:64:5b:
ef:4c:72:7e:4f:98:86:35:a3:02:20:fa:36:87:b0:
72:a1:43:ab:90:52:a5:f4:74:de:50:2c:bc:be:11:
b5:2b:13:f1:72:c5:60:38:7c:e4:c9:d2:06:4c:1b:
cc:92:7d:95:94:74:81:a5:98:79:38:5d:27:b1:e5:
ba:51:67:a6:f9:df:d7:61:19:66:e1:d0:23:5f:b2:
cd:dc:ec:71:c5:06:6c:f8:57:fc:98:c3:92:56:19:
93:a2:05:81:61:b8:cb:e9:f8:8d:23:b8:34:18:ab:
53:29:dd:92:fc:db:a3:3f:0e:c8:0c:c3:00:3d:fb:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AD:BD:91:8B:6C:BC:17:9B:B4:6A:FD:73:24:A1:D8:BB:D0:CF:16
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w629kYtsvBebtGr9cySh2LvQzxY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.48.0/20
Signature Algorithm: sha256WithRSAEncryption
31:7e:40:a4:d2:97:39:3c:27:f5:65:37:12:b0:cb:df:d8:d0:
18:5e:dd:ee:65:2a:ba:9b:dc:25:13:97:9e:e7:04:0f:d5:45:
31:96:ae:3f:d2:22:16:66:e6:23:93:00:28:8c:3f:46:27:f0:
e0:33:14:bf:1b:09:0e:96:e1:19:09:71:1f:e0:14:7d:2e:cc:
39:b0:89:3f:6f:cb:26:d6:42:69:1a:59:d5:de:40:66:c3:c1:
bc:db:93:3b:cc:0d:4e:89:71:10:40:be:51:2e:4f:c9:c9:46:
a0:08:37:eb:bc:bd:fa:b1:34:c3:03:32:e3:e1:73:f6:a0:7c:
45:71:62:6e:04:0b:42:1b:92:ac:d9:e6:97:34:0e:a2:ed:7f:
36:66:b1:c9:9e:76:fc:1f:88:05:ed:34:3f:b9:29:5d:6d:5d:
f2:50:02:ed:16:37:72:be:72:fc:23:c1:7a:27:62:c9:7d:db:
86:b0:82:3a:a4:39:86:f7:06:a9:2a:4d:0a:dc:78:2b:8d:49:
15:48:97:4c:b4:99:f7:c9:14:98:21:e5:bb:c9:9a:a1:c5:66:
44:9b:ea:e7:74:fc:fb:73:1a:18:44:93:44:fc:e4:73:20:41:
29:42:b2:b7:b0:a9:73:9b:85:a0:64:46:3c:e2:73:e8:85:7c:
9b:1f:53:d2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMzhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEMzQURCRDkxOEI2Q0JD
MTc5QkI0NkFGRDczMjRBMUQ4QkJEMENGMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDX9T8evHuqNTA09Dj9140VKHDwZvEdu88t3x5xwizvf38nmij0
NBz/0k/slxXc2Mvq1uQFaxGtoWFYqxmMsOSNbxDfT6/hxrhb+5kt91cAJwODoS9u
6UOeun1QylrHVu2PhbVUVYYQKkmn4lfz65IhF0SuZElOVcOtEhbVthYmDHRKcn1k
W+9Mcn5PmIY1owIg+jaHsHKhQ6uQUqX0dN5QLLy+EbUrE/FyxWA4fOTJ0gZMG8yS
fZWUdIGlmHk4XSex5bpRZ6b539dhGWbh0CNfss3c7HHFBmz4V/yYw5JWGZOiBYFh
uMvp+I0juDQYq1Mp3ZL826M/DsgMwwA9+1zDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUw629kYtsvBebtGr9cySh2LvQzxYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3c2MjlrWXRzdkJlYnRHcjlj
eVNoMkx2UXp4WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
wDAwDQYJKoZIhvcNAQELBQADggEBADF+QKTSlzk8J/VlNxKwy9/Y0Bhe3e5lKrqb
3CUTl57nBA/VRTGWrj/SIhZm5iOTACiMP0Yn8OAzFL8bCQ6W4RkJcR/gFH0uzDmw
iT9vyybWQmkaWdXeQGbDwbzbkzvMDU6JcRBAvlEuT8nJRqAIN+u8vfqxNMMDMuPh
c/agfEVxYm4EC0IbkqzZ5pc0DqLtfzZmscmedvwfiAXtND+5KV1tXfJQAu0WN3K+
cvwjwXonYsl924awgjqkOYb3BqkqTQrceCuNSRVIl0y0mffJFJgh5bvJmqHFZkSb
6ud0/PtzGhhEk0T85HMgQSlCsrewqXObhaBkRjzic+iFfJsfU9I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org