Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y4gtIblMJmT2S2DxQoRtJKF7TiI.roa
File: y4gtIblMJmT2S2DxQoRtJKF7TiI.roa (raw, json)
Hash identifier: gkxFCh/gnnMjeUXrdOhxvJ5DvjjJENcJHrSSk5TwDkw=
Subject key identifier: CB:88:2D:21:B9:4C:26:64:F6:4B:60:F1:42:84:6D:24:A1:7B:4E:22
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F48
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y4gtIblMJmT2S2DxQoRtJKF7TiI.roa
Signing time: Tue 29 Sep 2020 09:56:45 +0000
ROA not before: Tue 29 Sep 2020 09:56:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3912 (0xf48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CB882D21B94C2664F64B60F142846D24A17B4E22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:8f:dd:4e:01:c8:29:e3:99:b4:39:19:da:
2d:2a:8e:6c:47:52:3c:16:0c:b3:9e:9b:78:46:07:
c1:c3:9c:ca:8d:9b:02:4e:07:b7:77:d4:c9:ba:01:
85:c2:16:23:6c:f6:77:2d:f7:7c:ef:3a:75:6a:32:
93:60:eb:ca:bb:f8:6b:21:72:f6:29:6a:2b:3d:69:
a1:11:91:95:4c:a7:40:74:86:ad:69:0e:1f:d8:36:
6b:ac:8b:51:69:0e:f0:b2:d5:8d:e5:12:a1:3e:88:
b1:78:37:16:57:7d:df:4e:7f:8e:5e:40:1e:d5:57:
fa:5a:1c:12:ab:c1:06:a2:72:e0:bd:9c:e4:e9:d1:
03:f3:aa:d4:0f:49:41:60:ca:41:1d:11:4a:cc:e3:
83:4f:a9:3b:37:a3:fb:e1:70:28:fe:e8:78:57:ce:
dc:38:9e:2e:e1:70:9c:27:f3:16:df:8c:d2:5f:78:
02:00:4b:35:6c:bc:50:74:9d:d4:b6:99:4d:2c:fa:
01:32:bd:4c:17:34:36:75:98:9d:d4:95:88:e8:d2:
4a:3a:05:6d:e3:59:4c:c4:65:74:ae:84:80:82:9a:
f4:7d:42:7b:6f:b7:89:06:b6:eb:57:94:20:83:85:
0e:cb:8a:87:a5:c9:3e:4c:8f:9f:2e:4c:f3:e5:bb:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:88:2D:21:B9:4C:26:64:F6:4B:60:F1:42:84:6D:24:A1:7B:4E:22
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y4gtIblMJmT2S2DxQoRtJKF7TiI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.100.0/22
Signature Algorithm: sha256WithRSAEncryption
14:cd:f5:93:40:10:2e:5d:f0:c7:6e:e1:3e:42:86:2e:ff:c7:
ff:79:37:fd:3d:4b:1b:cc:b0:36:bc:61:a5:8d:6a:6e:9b:46:
7b:24:69:ee:66:0f:62:63:78:62:a6:e5:58:72:f8:0c:d7:27:
85:29:1b:34:1d:c4:09:ac:30:48:f4:e9:6a:85:64:5d:37:28:
5f:bf:e0:c3:81:6a:59:c9:bb:9a:9b:92:e1:10:24:91:3b:a4:
1e:00:07:cc:79:b8:25:7c:43:95:0c:9d:b7:5f:6a:43:8b:c7:
79:6f:cd:cc:90:c4:9a:de:53:c3:b5:8d:25:92:c0:c6:fc:f4:
e5:22:b2:1f:70:cd:cd:af:46:10:be:fd:52:7a:2d:4c:fe:ab:
7b:bc:00:b3:9a:a2:5a:e7:a4:d5:2c:49:a0:f5:09:4d:4e:c8:
4a:f3:5b:e7:a9:27:b7:71:a9:1b:eb:34:e7:3e:82:07:47:ba:
0f:b0:89:e5:0c:56:0a:dc:4c:41:18:b7:92:a3:7e:7e:d5:22:
e4:dd:5d:54:50:11:a6:f9:ce:0b:89:02:44:da:33:68:56:14:
88:e9:a6:d9:dd:df:54:a0:fa:38:27:20:ac:09:e3:62:1d:86:
bd:6f:3a:b7:27:9b:65:28:ba:ef:72:1f:b1:82:90:7b:df:18:
82:62:2f:17
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD0gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2NDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKENCODgyRDIxQjk0QzI2
NjRGNjRCNjBGMTQyODQ2RDI0QTE3QjRFMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB+o/dTgHIKeOZtDkZ2i0qjmxHUjwWDLOem3hGB8HDnMqNmwJO
B7d31Mm6AYXCFiNs9nct93zvOnVqMpNg68q7+GshcvYpais9aaERkZVMp0B0hq1p
Dh/YNmusi1FpDvCy1Y3lEqE+iLF4NxZXfd9Of45eQB7VV/paHBKrwQaicuC9nOTp
0QPzqtQPSUFgykEdEUrM44NPqTs3o/vhcCj+6HhXztw4ni7hcJwn8xbfjNJfeAIA
SzVsvFB0ndS2mU0s+gEyvUwXNDZ1mJ3UlYjo0ko6BW3jWUzEZXSuhICCmvR9Qntv
t4kGtutXlCCDhQ7LioelyT5Mj58uTPPlu0jRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUy4gtIblMJmT2S2DxQoRtJKF7TiIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3k0Z3RJYmxNSm1UMlMyRHhR
b1J0SktGN1RpSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wWQwDQYJKoZIhvcNAQELBQADggEBABTN9ZNAEC5d8Mdu4T5Chi7/x/95N/09SxvM
sDa8YaWNam6bRnskae5mD2JjeGKm5Vhy+AzXJ4UpGzQdxAmsMEj06WqFZF03KF+/
4MOBalnJu5qbkuEQJJE7pB4AB8x5uCV8Q5UMnbdfakOLx3lvzcyQxJreU8O1jSWS
wMb89OUish9wzc2vRhC+/VJ6LUz+q3u8ALOaolrnpNUsSaD1CU1OyErzW+epJ7dx
qRvrNOc+ggdHug+wieUMVgrcTEEYt5Kjfn7VIuTdXVRQEab5zguJAkTaM2hWFIjp
ptnd31Sg+jgnIKwJ42Idhr1vOrcnm2Uouu9yH7GCkHvfGIJiLxc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org