Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AQcBGQMA8y7rkItJGyDe1DdDEOA.roa
File: AQcBGQMA8y7rkItJGyDe1DdDEOA.roa (raw, json)
Hash identifier: kq/PGTEspeABGlcV8JdfpZXQ+KvDwKa/QrqvtlacXDs=
Subject key identifier: 01:07:01:19:03:00:F3:2E:EB:90:8B:49:1B:20:DE:D4:37:43:10:E0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1407
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AQcBGQMA8y7rkItJGyDe1DdDEOA.roa
Signing time: Sun 07 Feb 2021 11:57:09 +0000
ROA not before: Sun 07 Feb 2021 11:57:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5127 (0x1407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:57:09 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=010701190300F32EEB908B491B20DED4374310E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:a8:90:32:8d:54:5f:c5:e7:a0:c3:3f:71:
ff:67:d3:a4:0e:c6:5b:22:0e:61:6a:d2:7b:38:dc:
77:05:08:4d:bb:4a:63:31:3d:0a:51:9a:05:86:a7:
94:6a:62:ca:03:2c:6a:80:fd:18:16:ee:a9:7f:7d:
15:67:ce:6e:04:e7:82:a1:fd:eb:94:cf:93:34:55:
a3:fd:05:06:0d:6b:30:6e:12:5d:18:ec:92:ec:8a:
b5:9c:41:b2:c5:78:3c:75:bc:ac:f6:0d:41:1c:33:
67:04:44:ef:12:3a:bb:65:d1:f7:e2:2c:bf:aa:eb:
8b:1a:cf:b3:46:f4:e1:79:f2:f1:1a:6f:9b:6b:84:
de:aa:49:e6:bb:84:1f:89:59:6c:b1:41:56:8a:af:
a4:2d:e2:2d:80:c4:f3:87:25:f6:df:a9:0b:06:a3:
4f:4b:2b:89:e9:c0:80:3a:e2:ba:02:40:c3:87:36:
0f:2f:7a:8d:db:cd:66:da:5f:ad:d9:ff:a2:31:94:
94:86:b5:a1:11:96:9f:19:6d:ce:bb:5f:20:cc:63:
a0:dc:74:62:03:d8:a3:c0:9c:c2:18:b5:4f:2d:98:
e8:53:18:5b:ad:3e:f0:fc:5c:05:f9:f7:61:3d:97:
ef:00:6f:0b:48:41:99:d3:98:3b:d9:e3:fc:b0:d7:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:07:01:19:03:00:F3:2E:EB:90:8B:49:1B:20:DE:D4:37:43:10:E0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AQcBGQMA8y7rkItJGyDe1DdDEOA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.64.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:ea:91:72:ad:ce:5d:df:b3:b3:0b:07:27:66:4c:ea:87:77:
80:b9:35:10:a9:2a:5e:05:f1:9e:24:ce:bf:f6:4c:0d:d1:ca:
a6:18:d6:7f:fa:bf:94:f4:54:07:4f:61:40:a7:eb:04:a4:7b:
1b:6b:a7:d5:4b:f5:3c:29:bc:cf:0e:4d:39:c9:93:f9:39:68:
28:af:95:50:fa:ef:ca:eb:e7:49:04:3f:a9:10:34:bd:0f:55:
b5:72:1d:8d:9c:75:c1:3c:7e:a0:2f:fb:7a:b6:98:3e:4a:db:
2f:0b:01:35:7e:bf:1a:3b:01:8a:52:48:71:13:95:67:ef:48:
6b:d6:6a:71:c4:d9:09:ac:b6:48:3b:8d:5f:91:c4:ea:72:88:
8a:f0:43:66:9c:6f:96:68:5b:5b:a1:2b:e7:1a:48:98:b4:1a:
3a:bf:81:11:af:21:19:f7:0b:b9:09:74:f3:c7:32:29:d8:f8:
43:3b:f7:1e:f4:92:e1:c6:fc:a5:aa:13:bb:8a:fd:5f:d8:86:
45:5a:81:39:e2:f4:1d:50:ef:69:ee:c5:4a:02:43:46:4e:76:
a4:ca:49:43:37:f2:da:30:b1:d8:25:ae:0b:25:90:79:c1:c5:
3c:0c:e2:78:33:34:6d:d4:0b:25:14:74:8f:2a:54:77:86:f0:
ac:7e:2a:db
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFAcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU3MDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDAxMDcwMTE5MDMwMEYz
MkVFQjkwOEI0OTFCMjBERUQ0Mzc0MzEwRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIkaiQMo1UX8XnoMM/cf9n06QOxlsiDmFq0ns43HcFCE27SmMx
PQpRmgWGp5RqYsoDLGqA/RgW7ql/fRVnzm4E54Kh/euUz5M0VaP9BQYNazBuEl0Y
7JLsirWcQbLFeDx1vKz2DUEcM2cERO8SOrtl0ffiLL+q64saz7NG9OF58vEab5tr
hN6qSea7hB+JWWyxQVaKr6Qt4i2AxPOHJfbfqQsGo09LK4npwIA64roCQMOHNg8v
eo3bzWbaX63Z/6IxlJSGtaERlp8Zbc67XyDMY6DcdGID2KPAnMIYtU8tmOhTGFut
PvD8XAX592E9l+8AbwtIQZnTmDvZ4/yw12ydAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAQcBGQMA8y7rkItJGyDe1DdDEOAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FRY0JHUU1BOHk3cmtJdEpH
eURlMURkREVPQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wEAwDQYJKoZIhvcNAQELBQADggEBAIvqkXKtzl3fs7MLBydmTOqHd4C5NRCpKl4F
8Z4kzr/2TA3RyqYY1n/6v5T0VAdPYUCn6wSkextrp9VL9TwpvM8OTTnJk/k5aCiv
lVD678rr50kEP6kQNL0PVbVyHY2cdcE8fqAv+3q2mD5K2y8LATV+vxo7AYpSSHET
lWfvSGvWanHE2Qmstkg7jV+RxOpyiIrwQ2acb5ZoW1uhK+caSJi0Gjq/gRGvIRn3
C7kJdPPHMinY+EM79x70kuHG/KWqE7uK/V/YhkVagTni9B1Q72nuxUoCQ0ZOdqTK
SUM38towsdglrgslkHnBxTwM4ngzNG3UCyUUdI8qVHeG8Kx+Kts=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org