Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yYWOS_yBGrxEwKUb982Cc4bhmd8.roa
File: yYWOS_yBGrxEwKUb982Cc4bhmd8.roa (raw, json)
Hash identifier: lYWihzq6Wh7jQ2YcH+0XpUyLcJgzMUQV9hI4K1V7Zuo=
Subject key identifier: C9:85:8E:4B:FC:81:1A:BC:44:C0:A5:1B:F7:CD:82:73:86:E1:99:DF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yYWOS_yBGrxEwKUb982Cc4bhmd8.roa
Signing time: Thu 15 Sep 2022 02:45:19 +0000
ROA not before: Thu 15 Sep 2022 02:45:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C9858E4BFC811ABC44C0A51BF7CD827386E199DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:ab:9b:67:d4:dd:8f:5e:17:6f:68:08:f6:
78:2d:14:15:47:61:97:1e:57:7d:b3:c8:61:73:d0:
f8:84:3c:7c:3c:27:75:bf:4d:7a:5a:a9:7b:2c:e4:
e2:51:29:75:bf:20:5f:b9:70:a9:be:ec:de:04:64:
a3:bb:e6:e4:17:cf:b0:53:ea:55:0d:23:83:c9:9e:
84:06:e3:0e:e1:0c:7e:72:05:9a:c3:a3:ca:b3:b3:
0d:a5:5e:bc:5e:2c:3f:90:cb:f1:08:a8:fb:c7:9f:
7a:8e:2f:94:81:c4:51:cc:57:0d:1f:b9:2f:75:96:
73:2d:83:97:07:8c:6f:fe:56:c9:7f:32:13:46:0a:
42:c3:0b:2c:c5:c3:bd:13:cd:d1:22:e7:91:9b:d1:
72:11:f6:59:63:13:e5:6f:db:c1:fa:5b:45:7f:1b:
2d:4f:03:d6:ce:78:c2:af:9a:c5:f3:76:8f:5a:55:
0f:c2:61:fa:2f:90:c7:92:ee:93:1c:ab:8f:28:f3:
8a:b8:a8:40:7e:6a:68:c7:f8:a7:06:43:33:64:c3:
bb:21:64:4a:cc:c3:38:01:3b:88:c3:94:54:c3:8a:
72:13:b8:00:b3:d9:fb:01:e9:ac:d6:48:37:55:4e:
84:a5:be:67:e3:9f:88:68:dc:34:e4:2c:d6:47:29:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:85:8E:4B:FC:81:1A:BC:44:C0:A5:1B:F7:CD:82:73:86:E1:99:DF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yYWOS_yBGrxEwKUb982Cc4bhmd8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.200.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:ab:5a:c0:4b:c1:52:11:3e:0b:e2:b0:57:0e:3d:8f:67:49:
06:9d:a7:cf:23:1b:a8:bb:fd:66:8b:32:ec:3b:5a:45:a8:c5:
ba:4a:12:05:6b:4f:e7:2e:73:61:ad:ee:0b:b1:05:d7:ba:4e:
8a:32:d5:62:19:44:65:ce:dd:b4:a1:db:67:0f:15:02:ca:a0:
10:94:41:2b:0d:47:5f:7f:ba:eb:9a:d4:c2:fb:b6:b4:21:b8:
09:39:5c:58:b6:3c:d7:aa:1e:9c:77:ac:a9:5c:2e:fb:a3:73:
7f:65:71:a2:e1:09:ae:7e:71:0b:0c:42:e0:9e:d0:32:6e:a2:
5d:1f:4e:59:52:4e:c9:41:1d:60:e6:28:e7:e5:8c:eb:70:2a:
4f:55:24:3d:dd:60:bc:10:e1:b3:00:6f:16:27:67:05:69:d0:
76:17:3c:0c:48:a2:81:4c:1f:4f:b1:2e:a5:21:b2:c0:31:f5:
2f:7b:05:23:90:43:a3:53:7f:17:8b:88:4a:30:63:9c:c9:3f:
f0:11:27:a0:68:f5:c6:63:dd:21:75:96:82:73:1c:e2:f7:c4:
08:62:ee:97:fd:2c:a1:74:b6:c5:ac:7d:b0:9b:6c:26:56:9f:
6b:99:3e:ec:33:09:d2:89:16:0e:80:c2:8d:1c:3d:50:0a:86:
13:47:06:cf
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEM5ODU4RTRCRkM4MTFB
QkM0NEMwQTUxQkY3Q0Q4MjczODZFMTk5REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsKqubZ9Tdj14Xb2gI9ngtFBVHYZceV32zyGFz0PiEPHw8J3W/
TXpaqXss5OJRKXW/IF+5cKm+7N4EZKO75uQXz7BT6lUNI4PJnoQG4w7hDH5yBZrD
o8qzsw2lXrxeLD+Qy/EIqPvHn3qOL5SBxFHMVw0fuS91lnMtg5cHjG/+Vsl/MhNG
CkLDCyzFw70TzdEi55Gb0XIR9lljE+Vv28H6W0V/Gy1PA9bOeMKvmsXzdo9aVQ/C
YfovkMeS7pMcq48o84q4qEB+amjH+KcGQzNkw7shZErMwzgBO4jDlFTDinITuACz
2fsB6azWSDdVToSlvmfjn4ho3DTkLNZHKc8vAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUyYWOS/yBGrxEwKUb982Cc4bhmd8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lZV09TX3lCR3J4RXdLVWI5
ODJDYzRiaG1kOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wMgwDQYJKoZIhvcNAQELBQADggEBAFurWsBLwVIRPgvisFcOPY9nSQadp88jG6i7
/WaLMuw7WkWoxbpKEgVrT+cuc2Gt7guxBde6Tooy1WIZRGXO3bSh22cPFQLKoBCU
QSsNR19/uuua1ML7trQhuAk5XFi2PNeqHpx3rKlcLvujc39lcaLhCa5+cQsMQuCe
0DJuol0fTllSTslBHWDmKOfljOtwKk9VJD3dYLwQ4bMAbxYnZwVp0HYXPAxIooFM
H0+xLqUhssAx9S97BSOQQ6NTfxeLiEowY5zJP/ARJ6Bo9cZj3SF1loJzHOL3xAhi
7pf9LKF0tsWsfbCbbCZWn2uZPuwzCdKJFg6Awo0cPVAKhhNHBs8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org