Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CmkL7cx6qsGeE6zeurabMyEyfN0.roa
File: CmkL7cx6qsGeE6zeurabMyEyfN0.roa (raw, json)
Hash identifier: Otdr5uwkQAl6yPsg91Ql37cZbBBtj/y4zgtj48v2F1Q=
Subject key identifier: 0A:69:0B:ED:CC:7A:AA:C1:9E:13:AC:DE:BA:B6:9B:33:21:32:7C:DD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 171B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CmkL7cx6qsGeE6zeurabMyEyfN0.roa
Signing time: Sun 07 Feb 2021 12:16:42 +0000
ROA not before: Sun 07 Feb 2021 12:16:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.144.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5915 (0x171b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:16:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0A690BEDCC7AAAC19E13ACDEBAB69B3321327CDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:36:e8:44:0a:9e:93:91:f0:b4:16:c5:c9:97:
49:f6:57:39:9d:c0:d3:3c:fc:ed:4c:9b:ae:d8:ad:
f4:8c:27:12:31:33:53:5f:c8:b5:47:80:71:64:82:
35:ff:09:e0:01:17:22:b0:80:2d:6f:ba:14:63:63:
c7:1e:63:a9:bb:fc:f2:f8:88:93:ff:b5:e0:4c:02:
a2:4d:63:5f:01:47:86:8d:5e:31:71:98:04:06:56:
af:d0:97:91:91:86:7d:57:ba:d1:8e:d8:f3:e7:99:
d5:f9:c0:6b:c2:73:ce:52:26:1d:0d:9e:a6:49:08:
9b:fe:a6:42:82:4d:9f:33:2a:b1:97:98:8c:7f:93:
7b:59:1a:94:6a:ee:4e:68:24:cb:52:a8:4e:dd:45:
a0:2b:92:96:c6:9d:ab:13:97:71:b7:45:69:7a:cb:
01:cf:71:2f:81:65:ed:e6:1a:cb:c5:ed:05:7d:77:
cf:fb:87:e9:b6:98:2b:00:10:61:0d:da:a3:c3:41:
00:bc:25:e7:77:cb:00:03:91:d7:36:e9:8c:56:81:
53:99:99:43:c8:8c:b1:ba:e8:7f:4d:3f:61:6d:25:
e3:f9:b1:e8:f1:d0:ed:14:19:8e:6e:6c:5d:9b:07:
6e:25:c6:4c:d4:2e:78:be:c1:fa:47:3d:19:97:54:
8a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:69:0B:ED:CC:7A:AA:C1:9E:13:AC:DE:BA:B6:9B:33:21:32:7C:DD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CmkL7cx6qsGeE6zeurabMyEyfN0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.144.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:a7:f7:fc:e3:98:0a:c6:0b:53:7e:25:99:ca:0c:b1:43:b6:
36:7f:c1:9f:a9:a8:eb:f0:eb:cf:5c:7b:79:33:77:71:30:a6:
2e:0c:fb:ac:9e:df:ce:a0:f5:37:1b:86:e5:4a:ff:81:22:71:
d1:7e:c4:72:94:8d:9b:01:36:1e:da:c8:d2:60:9c:f6:c8:bb:
22:7d:9c:16:cb:f0:de:45:49:b4:ce:98:65:51:6b:d7:bd:70:
5f:3f:ac:4a:bb:01:a6:ae:08:d3:12:cc:ff:73:c9:d6:b0:80:
a8:c4:66:9a:a9:33:50:89:02:d8:75:ad:49:d4:94:ad:1e:75:
d8:5a:e7:ca:3c:3c:54:5c:ef:77:af:07:79:a5:f1:a6:3c:87:
44:15:af:64:3d:b9:f6:db:10:1b:b8:90:4d:c1:0d:51:ab:d4:
07:d1:af:9a:f7:04:ae:d9:7d:64:3a:af:71:bb:61:13:df:87:
3a:fa:ab:98:46:7d:10:89:e7:75:cd:ad:ed:4f:2d:33:3b:c5:
ca:26:3f:37:7a:f7:61:96:c9:35:b8:12:1f:67:97:84:32:63:
0f:af:ea:3e:65:6d:ab:e9:6a:76:0e:79:07:7c:02:92:23:5e:
f8:0b:11:b9:56:e8:56:8a:bd:dd:94:bf:e8:c3:6e:07:74:2f:
75:3d:3f:2a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFxswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjE2NDJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDBBNjkwQkVEQ0M3QUFB
QzE5RTEzQUNERUJBQjY5QjMzMjEzMjdDREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDsNuhECp6TkfC0FsXJl0n2VzmdwNM8/O1Mm67YrfSMJxIxM1Nf
yLVHgHFkgjX/CeABFyKwgC1vuhRjY8ceY6m7/PL4iJP/teBMAqJNY18BR4aNXjFx
mAQGVq/Ql5GRhn1XutGO2PPnmdX5wGvCc85SJh0NnqZJCJv+pkKCTZ8zKrGXmIx/
k3tZGpRq7k5oJMtSqE7dRaArkpbGnasTl3G3RWl6ywHPcS+BZe3mGsvF7QV9d8/7
h+m2mCsAEGEN2qPDQQC8Jed3ywADkdc26YxWgVOZmUPIjLG66H9NP2FtJeP5sejx
0O0UGY5ubF2bB24lxkzULni+wfpHPRmXVIrlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUCmkL7cx6qsGeE6zeurabMyEyfN0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0Nta0w3Y3g2cXNHZUU2emV1
cmFiTXlFeWZOMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wZAwDQYJKoZIhvcNAQELBQADggEBAGyn9/zjmArGC1N+JZnKDLFDtjZ/wZ+pqOvw
689ce3kzd3Ewpi4M+6ye386g9TcbhuVK/4EicdF+xHKUjZsBNh7ayNJgnPbIuyJ9
nBbL8N5FSbTOmGVRa9e9cF8/rEq7AaauCNMSzP9zydawgKjEZpqpM1CJAth1rUnU
lK0eddha58o8PFRc73evB3ml8aY8h0QVr2Q9ufbbEBu4kE3BDVGr1AfRr5r3BK7Z
fWQ6r3G7YRPfhzr6q5hGfRCJ53XNre1PLTM7xcomPzd692GWyTW4Eh9nl4QyYw+v
6j5lbavpanYOeQd8ApIjXvgLEblW6FaKvd2Uv+jDbgd0L3U9Pyo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org