Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DMo5nSBcoOtr5l3zWrjnowKxidg.roa
File: DMo5nSBcoOtr5l3zWrjnowKxidg.roa (raw, json)
Hash identifier: X1RuMc24DimsAwEl2401Wbp1IWorM0U4xGzmp6qh5ew=
Subject key identifier: 0C:CA:39:9D:20:5C:A0:EB:6B:E6:5D:F3:5A:B8:E7:A3:02:B1:89:D8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E9B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DMo5nSBcoOtr5l3zWrjnowKxidg.roa
Signing time: Tue 29 Sep 2020 09:55:56 +0000
ROA not before: Tue 29 Sep 2020 09:55:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3739 (0xe9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:56 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0CCA399D205CA0EB6BE65DF35AB8E7A302B189D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a8:71:5f:bd:a3:ba:c7:d0:42:23:cc:34:23:
3e:c1:91:62:2e:03:c9:d4:e9:07:f4:8d:e4:2b:d3:
fb:97:37:75:a9:12:92:63:23:aa:d6:e8:b5:10:8f:
59:cd:cc:11:36:c0:b4:e9:d0:51:c9:f8:cf:f5:a6:
5f:38:e9:3b:73:63:e5:c0:4f:e2:64:85:fa:e9:43:
13:ec:bf:bc:9e:a0:27:dc:27:37:03:d1:0c:bf:1e:
18:31:a6:9c:0f:84:93:e3:03:88:12:f4:c1:46:4c:
06:b6:21:39:90:a0:16:52:c8:57:11:90:9c:f7:a1:
ed:31:f4:c3:56:9d:1f:96:0b:df:17:c2:2e:b3:4c:
70:d8:05:4f:82:7b:43:da:30:dc:82:cc:aa:b1:c0:
5d:04:f9:6c:4c:2b:b1:d0:e5:4c:0a:9a:7f:1f:55:
a9:ed:c4:13:22:31:fd:55:b0:7d:31:c8:6b:5c:81:
65:4d:d6:9a:9b:fc:aa:ed:ef:b6:5d:cb:2f:6f:d2:
11:92:b9:16:77:53:cd:4e:a4:9f:96:ff:f9:68:9e:
ba:9d:ac:c7:61:42:c5:ec:21:62:45:ea:63:cc:01:
32:79:89:d5:19:6f:33:43:e7:34:24:2a:9b:ca:40:
1c:6a:78:3f:c7:d4:cc:30:d9:89:fd:c2:a1:fd:3c:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CA:39:9D:20:5C:A0:EB:6B:E6:5D:F3:5A:B8:E7:A3:02:B1:89:D8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DMo5nSBcoOtr5l3zWrjnowKxidg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.152.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:cb:06:63:91:dd:0b:17:21:40:e3:c4:c1:bd:a2:0a:f6:81:
46:4b:26:4d:c5:f2:f9:4d:08:ee:6c:5b:7b:1b:80:94:23:14:
30:6f:ff:c2:10:48:9f:2f:57:81:f2:24:c9:87:5d:cc:89:e1:
3d:6a:93:07:48:c9:e7:b9:43:61:86:d6:a5:b5:49:2e:61:a5:
25:1a:62:96:27:7d:97:58:dd:fd:80:64:d1:dc:99:31:0d:b2:
d8:8b:4a:3a:90:1e:2c:46:c1:21:06:e0:2b:68:fc:7e:6d:ba:
37:6f:b0:16:1b:ad:8e:30:c6:96:0c:e8:ed:79:ca:30:d6:3d:
c7:ac:46:7b:2f:47:3d:6b:be:fc:cc:c3:11:3e:3c:90:c8:a9:
36:e0:c5:3d:a9:2c:1b:ac:5b:97:f1:7d:a6:0a:96:df:be:c8:
86:04:a2:bd:38:4b:10:e8:1e:3e:e3:62:19:e5:89:bd:bd:8c:
53:55:03:4a:da:0b:20:1b:70:6a:44:9a:63:72:ac:45:7f:80:
c7:63:ed:2f:35:b2:d9:e7:2a:70:32:00:a4:d7:c5:82:73:9d:
30:48:df:c1:f0:a2:90:4e:19:0e:5d:a2:f4:75:8c:4f:7e:6a:
69:ae:63:07:8a:22:1f:ec:17:34:4a:4d:22:eb:a8:2c:bc:64:
95:84:b5:1f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDpswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1NTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDBDQ0EzOTlEMjA1Q0Ew
RUI2QkU2NURGMzVBQjhFN0EzMDJCMTg5RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnqHFfvaO6x9BCI8w0Iz7BkWIuA8nU6Qf0jeQr0/uXN3WpEpJj
I6rW6LUQj1nNzBE2wLTp0FHJ+M/1pl846TtzY+XAT+JkhfrpQxPsv7yeoCfcJzcD
0Qy/HhgxppwPhJPjA4gS9MFGTAa2ITmQoBZSyFcRkJz3oe0x9MNWnR+WC98Xwi6z
THDYBU+Ce0PaMNyCzKqxwF0E+WxMK7HQ5UwKmn8fVantxBMiMf1VsH0xyGtcgWVN
1pqb/Krt77Zdyy9v0hGSuRZ3U81OpJ+W//lonrqdrMdhQsXsIWJF6mPMATJ5idUZ
bzND5zQkKpvKQBxqeD/H1Mww2Yn9wqH9PMYZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUDMo5nSBcoOtr5l3zWrjnowKxidgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RNbzVuU0Jjb090cjVsM3pX
cmpub3dLeGlkZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wpgwDQYJKoZIhvcNAQELBQADggEBAB7LBmOR3QsXIUDjxMG9ogr2gUZLJk3F8vlN
CO5sW3sbgJQjFDBv/8IQSJ8vV4HyJMmHXcyJ4T1qkwdIyee5Q2GG1qW1SS5hpSUa
YpYnfZdY3f2AZNHcmTENstiLSjqQHixGwSEG4Cto/H5tujdvsBYbrY4wxpYM6O15
yjDWPcesRnsvRz1rvvzMwxE+PJDIqTbgxT2pLBusW5fxfaYKlt++yIYEor04SxDo
Hj7jYhnlib29jFNVA0raCyAbcGpEmmNyrEV/gMdj7S81stnnKnAyAKTXxYJznTBI
38HwopBOGQ5dovR1jE9+ammuYweKIh/sFzRKTSLrqCy8ZJWEtR8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:43 2025 by rpki-client