Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/57dI0RPOYzcDfdCFuG0Zp-9pilY.roa
File: 57dI0RPOYzcDfdCFuG0Zp-9pilY.roa (raw, json)
Hash identifier: AKo/JMxEuRkQiPZ6RHFRRszzHxKHY2YZgNFQB37QxFw=
Subject key identifier: E7:B7:48:D1:13:CE:63:37:03:7D:D0:85:B8:6D:19:A7:EF:69:8A:56
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1867
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/57dI0RPOYzcDfdCFuG0Zp-9pilY.roa
Signing time: Sun 07 Feb 2021 12:29:03 +0000
ROA not before: Sun 07 Feb 2021 12:29:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6247 (0x1867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:29:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E7B748D113CE6337037DD085B86D19A7EF698A56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a3:a5:ce:4f:27:88:e3:b9:02:80:ec:33:c0:
72:83:92:86:c1:d0:95:0b:17:6c:26:0f:f2:af:df:
8c:45:57:b8:a0:f8:ae:60:06:a4:b0:d3:a7:a0:d4:
f8:11:8b:a7:e2:f6:49:5a:34:91:94:fb:52:c6:87:
7c:50:2b:70:34:76:b3:de:6c:48:f4:3d:9b:f9:49:
64:89:0f:5b:37:0c:27:a9:78:6c:45:b7:b4:bf:e6:
aa:c3:12:72:6b:8d:3c:28:4f:ac:fd:04:7f:44:94:
f0:a7:f9:ae:f2:76:dc:1a:15:64:0b:27:dd:4e:05:
df:5d:fa:dc:eb:b2:a3:3d:24:8a:2b:c6:ad:8c:0a:
70:0f:16:a6:df:b2:bb:80:be:17:7c:84:e1:99:b7:
e5:9e:7f:6b:67:fb:9e:24:1d:b9:34:6b:9c:4d:79:
f4:29:90:14:9a:40:87:ca:8d:d9:61:bb:d9:de:10:
b3:15:7a:5b:40:6a:c8:19:49:fe:4a:24:99:e1:22:
fc:eb:fe:08:61:11:86:d3:08:71:b3:ec:3e:d4:00:
e5:9d:e6:91:5e:01:39:e0:c4:b1:31:69:10:ab:67:
16:10:34:22:11:b8:40:d1:65:9a:dd:db:2f:51:ee:
df:23:d0:ea:78:eb:f0:87:c8:f8:25:0f:ab:82:ce:
2e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B7:48:D1:13:CE:63:37:03:7D:D0:85:B8:6D:19:A7:EF:69:8A:56
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/57dI0RPOYzcDfdCFuG0Zp-9pilY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.136.0/22
Signature Algorithm: sha256WithRSAEncryption
89:eb:6d:57:70:7e:d9:0b:e6:dc:23:ee:0e:c1:47:c5:62:e4:
3c:ac:fe:2b:3c:d7:7e:ab:32:cd:45:73:9d:6d:af:eb:31:84:
a0:47:ca:ed:8b:f9:4e:4b:6f:6f:5a:87:57:b2:63:fc:ba:5f:
2b:57:20:3e:35:e1:28:b2:1f:c7:0c:26:bd:ef:08:a3:1a:c4:
ee:b2:20:bf:fa:43:fe:fc:26:11:c0:cd:57:00:3e:b3:55:6d:
a3:49:ad:19:4f:cc:fb:ea:cb:a9:6f:bb:f7:27:99:33:99:14:
7e:a1:e7:97:5d:b2:2e:f3:b8:5c:b8:db:80:de:d0:da:26:b3:
a4:00:fb:8d:e1:6a:a9:98:91:96:e7:1d:b5:cd:14:c9:3e:16:
c7:08:0a:10:fa:9a:97:9c:a2:6a:26:91:5b:34:68:0b:4a:e0:
ff:d9:5b:88:14:ec:93:6f:c5:cd:27:ee:67:90:ea:d1:e6:5a:
a2:d7:52:89:ba:74:36:ab:27:83:55:de:27:ba:73:7e:51:07:
f1:58:c6:90:36:a8:b2:43:70:ca:5c:46:07:5b:1d:fb:e3:30:
52:d9:b8:e8:65:28:5a:2f:35:eb:cd:cb:e4:f5:a9:25:ed:aa:
20:f1:c2:65:29:a8:c5:56:c7:c2:e8:db:0f:a2:36:69:14:b9:
2b:29:5d:e7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGGcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjI5MDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEU3Qjc0OEQxMTNDRTYz
MzcwMzdERDA4NUI4NkQxOUE3RUY2OThBNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDro6XOTyeI47kCgOwzwHKDkobB0JULF2wmD/Kv34xFV7ig+K5g
BqSw06eg1PgRi6fi9klaNJGU+1LGh3xQK3A0drPebEj0PZv5SWSJD1s3DCepeGxF
t7S/5qrDEnJrjTwoT6z9BH9ElPCn+a7ydtwaFWQLJ91OBd9d+tzrsqM9JIorxq2M
CnAPFqbfsruAvhd8hOGZt+Wef2tn+54kHbk0a5xNefQpkBSaQIfKjdlhu9neELMV
eltAasgZSf5KJJnhIvzr/ghhEYbTCHGz7D7UAOWd5pFeATngxLExaRCrZxYQNCIR
uEDRZZrd2y9R7t8j0Op46/CHyPglD6uCzi6NAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU57dI0RPOYzcDfdCFuG0Zp+9pilYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzU3ZEkwUlBPWXpjRGZkQ0Z1
RzBacC05cGlsWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wYgwDQYJKoZIhvcNAQELBQADggEBAInrbVdwftkL5twj7g7BR8Vi5Dys/is8136r
Ms1Fc51tr+sxhKBHyu2L+U5Lb29ah1eyY/y6XytXID414SiyH8cMJr3vCKMaxO6y
IL/6Q/78JhHAzVcAPrNVbaNJrRlPzPvqy6lvu/cnmTOZFH6h55ddsi7zuFy424De
0Noms6QA+43haqmYkZbnHbXNFMk+FscIChD6mpecomomkVs0aAtK4P/ZW4gU7JNv
xc0n7meQ6tHmWqLXUom6dDarJ4NV3ie6c35RB/FYxpA2qLJDcMpcRgdbHfvjMFLZ
uOhlKFovNevNy+T1qSXtqiDxwmUpqMVWx8Lo2w+iNmkUuSspXec=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:21 2023 by rpki-client on console-fra.rpki-client.org