Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0I1y19V5wAU0uH0tj1VHbrNNb04.roa
File: 0I1y19V5wAU0uH0tj1VHbrNNb04.roa (raw, json)
Hash identifier: QsxSj4FJ6QN66v4GjEgB6dZKa1Oyi9nlubcBrojbNNU=
Subject key identifier: D0:8D:72:D7:D5:79:C0:05:34:B8:7D:2D:8F:55:47:6E:B3:4D:6F:4E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D7A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0I1y19V5wAU0uH0tj1VHbrNNb04.roa
Signing time: Tue 29 Sep 2020 09:54:36 +0000
ROA not before: Tue 29 Sep 2020 09:54:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3450 (0xd7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:36 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D08D72D7D579C00534B87D2D8F55476EB34D6F4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:1f:33:d8:9a:88:01:75:09:7a:7b:37:78:
92:d6:05:8d:18:00:53:c8:b7:1e:e1:16:52:d6:50:
2f:db:ca:7f:c6:e8:13:54:67:1b:54:d7:cc:52:c8:
c5:fd:10:3a:f3:be:91:cb:f2:52:5d:48:63:30:c0:
26:7e:74:bb:b1:97:2c:86:47:f4:04:45:7b:5a:69:
96:93:26:a0:46:70:2a:56:82:77:21:4d:11:49:fb:
2c:70:87:5c:ac:74:9e:66:3c:fa:72:32:79:91:68:
40:89:69:ec:48:43:ea:17:58:40:9b:4d:50:6d:31:
b7:4d:03:a5:36:33:4f:0d:dd:75:de:8c:64:14:5a:
a0:80:95:ce:b5:76:ed:97:24:f4:8c:c0:d5:e0:51:
25:4a:dc:8b:c3:65:36:36:0b:d0:94:b6:5b:e9:eb:
dd:9f:46:89:d5:b6:4d:e3:1d:58:e4:99:9d:19:e1:
77:08:ac:ff:3a:90:f7:f9:e9:41:46:40:f4:74:fc:
44:14:95:81:95:06:1c:96:53:61:cc:f2:01:5c:e4:
11:f6:69:95:fb:77:cf:af:7e:3a:a0:a0:92:ce:4f:
54:cc:e7:81:95:9b:03:d7:90:c0:18:c7:06:5f:65:
de:01:60:a7:54:a8:91:17:1f:c4:a2:b8:50:e7:da:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8D:72:D7:D5:79:C0:05:34:B8:7D:2D:8F:55:47:6E:B3:4D:6F:4E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0I1y19V5wAU0uH0tj1VHbrNNb04.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.48.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:4d:11:a3:ad:28:4f:df:78:96:7f:d0:28:69:85:86:47:3d:
5f:3e:93:d3:1a:b9:94:d4:3e:dc:10:b5:b7:5f:5f:be:ea:58:
3a:36:20:7a:67:ab:5f:8a:a5:1c:8c:6c:a3:44:fd:39:9c:14:
23:ee:20:7f:93:83:68:cc:57:01:d9:9a:a3:1c:75:22:ff:ed:
82:c6:a1:ec:7a:42:81:db:35:93:b4:10:36:ad:95:9d:15:79:
59:57:45:c8:40:a6:ac:9b:34:09:14:2c:f1:0e:73:30:98:fe:
d7:65:34:1d:16:2c:00:38:c0:d6:f2:79:97:2a:a1:6b:8c:9a:
ec:f1:35:a5:fa:32:cd:a1:79:d5:b7:f1:98:7a:2e:bb:e8:f2:
ec:e7:3d:2c:1e:0e:3b:ca:9f:f7:cc:27:30:20:ab:a3:3d:b0:
7e:6d:d9:56:a8:a7:de:9e:26:d0:07:8b:55:65:fc:ad:09:7d:
e4:a2:e0:58:e6:9d:e3:7a:36:98:d4:13:c0:4e:13:59:b2:c6:
3d:a2:4e:5f:d4:c9:05:47:dd:97:a7:e9:45:0e:95:2e:a6:bc:
15:cf:7c:aa:e3:d4:e4:f1:d3:20:d0:86:fc:c5:45:66:2e:5d:
d7:cc:c1:0d:8e:24:87:52:d7:cf:6b:c9:f8:f9:6e:df:42:62:
e8:14:cc:7b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDXowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0MzZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQwOEQ3MkQ3RDU3OUMw
MDUzNEI4N0QyRDhGNTU0NzZFQjM0RDZGNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChXR8z2JqIAXUJens3eJLWBY0YAFPItx7hFlLWUC/byn/G6BNU
ZxtU18xSyMX9EDrzvpHL8lJdSGMwwCZ+dLuxlyyGR/QERXtaaZaTJqBGcCpWgnch
TRFJ+yxwh1ysdJ5mPPpyMnmRaECJaexIQ+oXWECbTVBtMbdNA6U2M08N3XXejGQU
WqCAlc61du2XJPSMwNXgUSVK3IvDZTY2C9CUtlvp692fRonVtk3jHVjkmZ0Z4XcI
rP86kPf56UFGQPR0/EQUlYGVBhyWU2HM8gFc5BH2aZX7d8+vfjqgoJLOT1TM54GV
mwPXkMAYxwZfZd4BYKdUqJEXH8SiuFDn2trFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU0I1y19V5wAU0uH0tj1VHbrNNb04wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBJMXkxOVY1d0FVMHVIMHRq
MVZIYnJOTmIwNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wTAwDQYJKoZIhvcNAQELBQADggEBALhNEaOtKE/feJZ/0ChphYZHPV8+k9MauZTU
PtwQtbdfX77qWDo2IHpnq1+KpRyMbKNE/TmcFCPuIH+Tg2jMVwHZmqMcdSL/7YLG
oex6QoHbNZO0EDatlZ0VeVlXRchApqybNAkULPEOczCY/tdlNB0WLAA4wNbyeZcq
oWuMmuzxNaX6Ms2hedW38Zh6Lrvo8uznPSweDjvKn/fMJzAgq6M9sH5t2Vaop96e
JtAHi1Vl/K0JfeSi4FjmneN6NpjUE8BOE1myxj2iTl/UyQVH3Zen6UUOlS6mvBXP
fKrj1OTx0yDQhvzFRWYuXdfMwQ2OJIdS189ryfj5bt9CYugUzHs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org