Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AD56GYoeKTpc7RB_WeYmMc6hJV8.roa
File: AD56GYoeKTpc7RB_WeYmMc6hJV8.roa (raw, json)
Hash identifier: b1E3DHiB4w1/hNWAg6tgaRNtXzBe09HNjyTZA8lRrYU=
Subject key identifier: 00:3E:7A:19:8A:1E:29:3A:5C:ED:10:7F:59:E6:26:31:CE:A1:25:5F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1665
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AD56GYoeKTpc7RB_WeYmMc6hJV8.roa
Signing time: Sun 07 Feb 2021 12:10:11 +0000
ROA not before: Sun 07 Feb 2021 12:10:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5733 (0x1665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:10:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=003E7A198A1E293A5CED107F59E62631CEA1255F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:af:e1:63:7c:cb:ea:d6:30:2e:d1:27:74:
64:eb:20:7b:7f:c7:3c:e6:6f:e7:8f:0d:c4:27:10:
ea:a6:7c:d5:15:32:23:24:b6:6e:92:d5:e1:84:f1:
0f:14:8b:0a:2e:94:4b:bb:8e:3f:d7:14:66:3b:14:
ac:2c:77:1f:da:b5:be:ab:17:43:0a:c9:dc:a9:26:
53:24:84:c1:3a:a9:52:c4:9d:82:9c:25:3c:45:8c:
09:04:a4:70:e0:69:c5:40:c6:6f:2d:c3:12:8c:0f:
2c:b6:0f:02:8d:07:c6:df:77:bc:2b:2a:b6:87:de:
1f:6e:b1:06:ce:7b:d1:30:6c:5f:e3:ca:85:9a:b8:
62:5f:14:59:51:56:c6:ce:b1:2d:4a:f0:19:de:e7:
0c:9c:e7:b8:23:9c:80:f9:57:ec:a4:b9:c8:f4:7f:
6e:68:d8:a6:67:00:f6:93:50:fa:9e:c3:1a:7c:99:
3f:60:69:aa:4a:3f:c7:27:3b:e5:e3:10:26:3c:8f:
fd:c2:be:69:f4:cd:27:48:45:c7:f7:4e:60:b2:65:
9e:6a:d3:18:1c:9b:01:e1:ab:79:df:31:c7:b4:a7:
4b:78:3a:94:3d:3d:2e:c3:81:df:23:09:77:d3:13:
fe:26:04:b9:fe:44:49:46:c2:c9:89:e2:91:f3:dd:
40:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3E:7A:19:8A:1E:29:3A:5C:ED:10:7F:59:E6:26:31:CE:A1:25:5F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AD56GYoeKTpc7RB_WeYmMc6hJV8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:da:fe:d6:36:7a:4b:7b:39:6d:35:ec:43:f0:08:89:95:cb:
77:d0:d8:aa:2d:8f:1f:76:68:68:94:6d:cf:bf:23:09:ac:de:
d6:6a:98:77:58:9d:d2:87:e7:07:a5:91:56:10:1e:7e:9a:65:
1b:1b:45:77:80:15:c0:be:72:b8:e6:4a:8b:97:90:36:05:33:
2e:2e:d9:cb:4d:62:d8:9f:a2:53:cf:b6:13:98:41:9b:f0:1d:
dc:79:a5:aa:e3:fc:d9:bc:e4:56:41:f5:5f:28:73:1c:0c:e8:
52:cc:81:97:5c:95:1e:f3:d2:98:68:1b:fd:46:3b:f0:5e:54:
c4:e5:5e:3f:f4:11:6e:f9:05:78:34:d3:0a:1a:6c:b1:81:c4:
af:c2:36:77:51:47:fd:5b:78:98:b1:92:2d:a5:c0:ab:f1:c2:
0e:ea:00:a1:0e:fe:45:f8:d1:67:2f:e5:9a:9b:2c:83:5b:1b:
f2:90:b5:fc:0f:e5:9a:85:f2:88:c4:c2:15:37:d0:9f:cf:53:
7e:58:dc:b4:99:1c:54:53:6d:8b:b3:58:7f:06:c6:8f:5f:13:
e1:99:cd:51:3d:cd:e0:e2:32:ca:10:c5:37:de:e7:6b:a3:62:
da:d6:1d:c5:80:4a:70:0a:d5:b5:aa:6e:55:bc:21:8f:25:16:
d0:7a:d5:8d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjEwMTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDAwM0U3QTE5OEExRTI5
M0E1Q0VEMTA3RjU5RTYyNjMxQ0VBMTI1NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClq6/hY3zL6tYwLtEndGTrIHt/xzzmb+ePDcQnEOqmfNUVMiMk
tm6S1eGE8Q8UiwoulEu7jj/XFGY7FKwsdx/atb6rF0MKydypJlMkhME6qVLEnYKc
JTxFjAkEpHDgacVAxm8twxKMDyy2DwKNB8bfd7wrKraH3h9usQbOe9EwbF/jyoWa
uGJfFFlRVsbOsS1K8Bne5wyc57gjnID5V+ykucj0f25o2KZnAPaTUPqewxp8mT9g
aapKP8cnO+XjECY8j/3Cvmn0zSdIRcf3TmCyZZ5q0xgcmwHhq3nfMce0p0t4OpQ9
PS7Dgd8jCXfTE/4mBLn+RElGwsmJ4pHz3UDVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAD56GYoeKTpc7RB/WeYmMc6hJV8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FENTZHWW9lS1RwYzdSQl9X
ZVltTWM2aEpWOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
w5cwDQYJKoZIhvcNAQELBQADggEBAEza/tY2ekt7OW017EPwCImVy3fQ2Kotjx92
aGiUbc+/Iwms3tZqmHdYndKH5welkVYQHn6aZRsbRXeAFcC+crjmSouXkDYFMy4u
2ctNYtifolPPthOYQZvwHdx5parj/Nm85FZB9V8ocxwM6FLMgZdclR7z0phoG/1G
O/BeVMTlXj/0EW75BXg00woabLGBxK/CNndRR/1beJixki2lwKvxwg7qAKEO/kX4
0Wcv5ZqbLINbG/KQtfwP5ZqF8ojEwhU30J/PU35Y3LSZHFRTbYuzWH8Gxo9fE+GZ
zVE9zeDiMsoQxTfe52ujYtrWHcWASnAK1bWqblW8IY8lFtB61Y0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org