Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8ijM3pTt21e30bp0GV7UCI81vYE.roa
File: 8ijM3pTt21e30bp0GV7UCI81vYE.roa (raw, json)
Hash identifier: 15nOk5xF7ORs4HRPAf1d7Lw47UqNkHF9zalSaFtuEeY=
Subject key identifier: F2:28:CC:DE:94:ED:DB:57:B7:D1:BA:74:19:5E:D4:08:8F:35:BD:81
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1685
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8ijM3pTt21e30bp0GV7UCI81vYE.roa
Signing time: Sun 07 Feb 2021 12:11:00 +0000
ROA not before: Sun 07 Feb 2021 12:11:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5765 (0x1685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:11:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F228CCDE94EDDB57B7D1BA74195ED4088F35BD81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:50:88:0c:73:ea:7c:69:7d:4b:a3:bf:d3:
aa:24:de:d4:5c:de:7c:b9:62:21:23:d2:ee:5c:bb:
74:31:1b:db:e5:a8:c0:50:55:37:11:32:d1:e1:bb:
b9:09:c0:57:e0:80:2b:fb:2b:fb:ac:41:fd:64:32:
58:ff:44:8d:f5:71:6f:74:35:ba:42:70:b6:79:04:
d3:07:95:f4:70:7c:b6:0d:2c:2e:23:44:51:b5:21:
a1:af:61:34:71:58:a4:ba:99:88:e7:e7:03:73:a2:
07:3f:24:ea:b2:e1:33:69:a3:31:f9:d1:37:7c:73:
a6:d5:88:23:4c:36:62:9c:c8:d9:39:78:c4:80:65:
4a:bb:ad:f3:b6:cf:f1:98:b3:07:5c:21:88:65:82:
a4:ee:a0:be:1d:1e:b2:0a:5d:1f:ee:75:85:58:b1:
a4:a5:8f:89:32:34:22:e1:cb:b0:3b:7c:62:24:f2:
a0:f8:c2:08:d2:2b:46:94:6d:db:06:af:54:69:3c:
87:cf:56:6e:4c:01:07:9d:68:69:ff:46:4d:1a:13:
aa:de:2a:5f:12:06:80:26:bb:8b:87:1f:d7:3d:ce:
ac:45:dd:b9:29:8f:85:38:20:6e:bf:8b:47:23:ab:
9b:c4:7f:46:63:e7:3b:4f:eb:08:e3:87:aa:ad:12:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:28:CC:DE:94:ED:DB:57:B7:D1:BA:74:19:5E:D4:08:8F:35:BD:81
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8ijM3pTt21e30bp0GV7UCI81vYE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.200.0/21
Signature Algorithm: sha256WithRSAEncryption
87:fe:ae:df:8a:a1:5b:af:8b:6f:9a:91:98:1f:54:be:fa:44:
8d:68:36:b0:b5:72:b5:e7:a3:1b:5d:c0:ab:87:ac:ea:e3:13:
76:16:2c:57:96:13:46:f2:ad:f6:29:7e:fd:29:83:a6:d4:d5:
ef:da:c5:68:76:44:c7:3d:64:23:e2:68:0e:24:4f:03:83:10:
75:c5:42:ec:a3:28:be:ed:f1:4b:a7:a2:3b:8e:a5:ac:91:1d:
90:e7:50:5b:78:a1:1e:aa:c4:ed:f0:2e:6e:64:8e:f4:b9:a6:
51:66:ce:11:37:99:19:06:b3:95:44:35:8a:4e:46:4c:31:31:
9d:e5:77:a5:62:e4:17:dc:28:40:8e:2a:ab:c6:c0:b0:2b:ae:
eb:e9:d2:ee:ed:79:ad:00:25:33:89:51:e7:be:c8:28:50:9a:
c1:31:fc:2f:df:3d:0e:f0:f5:cd:62:6f:f3:95:b6:1d:79:66:
fe:7f:ba:73:d9:62:a0:9d:71:70:2f:3c:6a:41:57:47:9b:d7:
2e:ff:53:dc:2e:91:07:0a:e3:9d:7d:d9:d3:83:e8:7b:dc:28:
3a:fb:d3:eb:2c:ca:3c:39:d7:92:17:5b:fb:09:f5:e8:e9:b7:
1a:2d:f8:7d:b7:b6:54:ca:e2:aa:22:33:dc:3a:b7:03:e0:1f:
7e:5b:52:0a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFoUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjExMDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEYyMjhDQ0RFOTRFRERC
NTdCN0QxQkE3NDE5NUVENDA4OEYzNUJEODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7dlCIDHPqfGl9S6O/06ok3tRc3ny5YiEj0u5cu3QxG9vlqMBQ
VTcRMtHhu7kJwFfggCv7K/usQf1kMlj/RI31cW90NbpCcLZ5BNMHlfRwfLYNLC4j
RFG1IaGvYTRxWKS6mYjn5wNzogc/JOqy4TNpozH50Td8c6bViCNMNmKcyNk5eMSA
ZUq7rfO2z/GYswdcIYhlgqTuoL4dHrIKXR/udYVYsaSlj4kyNCLhy7A7fGIk8qD4
wgjSK0aUbdsGr1RpPIfPVm5MAQedaGn/Rk0aE6reKl8SBoAmu4uHH9c9zqxF3bkp
j4U4IG6/i0cjq5vEf0Zj5ztP6wjjh6qtEt4tAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8ijM3pTt21e30bp0GV7UCI81vYEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhpak0zcFR0MjFlMzBicDBH
VjdVQ0k4MXZZRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w8gwDQYJKoZIhvcNAQELBQADggEBAIf+rt+KoVuvi2+akZgfVL76RI1oNrC1crXn
oxtdwKuHrOrjE3YWLFeWE0byrfYpfv0pg6bU1e/axWh2RMc9ZCPiaA4kTwODEHXF
QuyjKL7t8UunojuOpayRHZDnUFt4oR6qxO3wLm5kjvS5plFmzhE3mRkGs5VENYpO
RkwxMZ3ld6Vi5BfcKECOKqvGwLArruvp0u7tea0AJTOJUee+yChQmsEx/C/fPQ7w
9c1ib/OVth15Zv5/unPZYqCdcXAvPGpBV0eb1y7/U9wukQcK45192dOD6HvcKDr7
0+ssyjw515IXW/sJ9ejptxot+H23tlTK4qoiM9w6twPgH35bUgo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org