Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D97Vwa3gnB7OOgzLoBSmJvC1F1I.roa
File: D97Vwa3gnB7OOgzLoBSmJvC1F1I.roa (raw, json)
Hash identifier: Xoiky1E5ZF5dJoDyW8TNmwnM6/ZDNL9xIE9thGn7WsQ=
Subject key identifier: 0F:DE:D5:C1:AD:E0:9C:1E:CE:3A:0C:CB:A0:14:A6:26:F0:B5:17:52
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F30
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D97Vwa3gnB7OOgzLoBSmJvC1F1I.roa
Signing time: Tue 29 Sep 2020 09:56:37 +0000
ROA not before: Tue 29 Sep 2020 09:56:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 45.64.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3888 (0xf30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0FDED5C1ADE09C1ECE3A0CCBA014A626F0B51752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:86:f3:d6:c3:07:98:53:4d:b9:bf:e2:83:
b1:b9:e4:70:44:d2:5d:f4:5b:5d:da:f8:66:80:1b:
e6:84:9f:46:9e:32:0c:07:64:71:e3:2b:9b:db:68:
a6:3b:a7:1a:44:73:04:ca:11:d3:31:e1:e2:3d:b8:
ad:40:b6:df:53:b2:0d:54:04:8c:60:27:b3:fa:be:
5a:3c:a3:4d:82:9f:32:4b:25:21:ab:e0:8a:67:13:
21:df:6b:41:6c:8c:35:7f:93:ee:01:32:cc:61:0a:
ba:39:29:1c:34:f9:1e:96:a8:ff:8a:c9:66:ed:a5:
87:cb:6c:c9:78:ea:0e:6f:a9:1c:39:6a:9d:c1:63:
32:83:81:c0:22:1f:fc:c1:8d:f7:d7:52:aa:52:77:
26:de:44:f0:cd:b3:31:9d:4b:fd:42:c9:bd:56:3f:
a5:2d:25:9c:4e:23:bb:5a:c8:26:77:3c:90:06:34:
c4:c5:51:ab:34:2f:62:b5:f0:60:ed:d4:cb:bc:43:
66:00:c2:74:d1:0f:47:2e:e1:15:f5:00:a2:18:e3:
13:59:0c:3a:79:25:98:47:65:12:21:ca:4b:76:55:
73:4b:11:a0:4a:17:60:98:4a:36:0e:6d:2b:cb:d4:
e6:96:5f:e2:28:bb:65:df:18:55:fa:b1:f7:e9:d5:
8d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DE:D5:C1:AD:E0:9C:1E:CE:3A:0C:CB:A0:14:A6:26:F0:B5:17:52
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D97Vwa3gnB7OOgzLoBSmJvC1F1I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.28.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:00:01:01:d5:92:64:43:e2:d5:9e:a9:52:31:4a:23:3f:d5:
88:62:34:1b:fa:84:24:41:c3:e2:02:70:15:64:7e:f0:1c:11:
5d:f8:f8:d4:7f:08:cf:8f:1f:3e:91:c9:7d:cb:9d:f4:7a:a0:
74:21:8b:7c:9b:dc:9d:3d:de:50:b7:86:88:a8:1f:ea:cc:92:
01:f8:8d:3a:5c:20:c5:82:39:19:6c:7d:20:02:30:aa:c4:a6:
12:96:fc:a0:0b:47:1e:9b:be:16:f7:da:f7:56:df:f9:bf:13:
f8:ae:29:c4:d1:8d:49:ee:62:4a:75:d2:cd:3e:a9:14:43:3b:
da:f1:62:cf:a6:af:e2:0a:ab:d6:20:7f:13:99:8f:19:35:71:
04:0f:3b:3d:b5:6d:08:bb:b2:7a:59:c5:fa:38:eb:71:5e:a8:
fd:68:8b:5d:12:64:8d:66:ff:8a:91:48:fc:e2:d2:8b:82:ac:
fd:1e:4e:40:30:70:76:87:25:59:f8:c5:2c:80:4b:0e:6d:82:
d2:7e:d2:fb:5f:3b:d9:a1:f8:f1:b7:78:bd:92:a2:90:a5:7f:
6a:e0:a6:ca:97:90:da:93:0e:39:ed:a0:84:50:c0:78:c2:f2:
b4:80:8b:b2:46:2f:65:b8:be:0a:e3:9d:c1:74:94:a5:5e:7a:
dc:68:98:12
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDzAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MzdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDBGREVENUMxQURFMDlD
MUVDRTNBMENDQkEwMTRBNjI2RjBCNTE3NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC93Ybz1sMHmFNNub/ig7G55HBE0l30W13a+GaAG+aEn0aeMgwH
ZHHjK5vbaKY7pxpEcwTKEdMx4eI9uK1Att9Tsg1UBIxgJ7P6vlo8o02CnzJLJSGr
4IpnEyHfa0FsjDV/k+4BMsxhCro5KRw0+R6WqP+KyWbtpYfLbMl46g5vqRw5ap3B
YzKDgcAiH/zBjffXUqpSdybeRPDNszGdS/1Cyb1WP6UtJZxOI7tayCZ3PJAGNMTF
Uas0L2K18GDt1Mu8Q2YAwnTRD0cu4RX1AKIY4xNZDDp5JZhHZRIhykt2VXNLEaBK
F2CYSjYObSvL1OaWX+Iou2XfGFX6sffp1Y0nAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUD97Vwa3gnB7OOgzLoBSmJvC1F1IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0Q5N1Z3YTNnbkI3T09nekxv
QlNtSnZDMUYxSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt
QBwwDQYJKoZIhvcNAQELBQADggEBAG4AAQHVkmRD4tWeqVIxSiM/1YhiNBv6hCRB
w+ICcBVkfvAcEV34+NR/CM+PHz6RyX3LnfR6oHQhi3yb3J093lC3hoioH+rMkgH4
jTpcIMWCORlsfSACMKrEphKW/KALRx6bvhb32vdW3/m/E/iuKcTRjUnuYkp10s0+
qRRDO9rxYs+mr+IKq9YgfxOZjxk1cQQPOz21bQi7snpZxfo463FeqP1oi10SZI1m
/4qRSPzi0ouCrP0eTkAwcHaHJVn4xSyASw5tgtJ+0vtfO9mh+PG3eL2SopClf2rg
psqXkNqTDjntoIRQwHjC8rSAi7JGL2W4vgrjncF0lKVeetxomBI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org