Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EOIU6Tqryn4ZoVzhIxTVPUQgzUc.roa
File: EOIU6Tqryn4ZoVzhIxTVPUQgzUc.roa (raw, json)
Hash identifier: YsHhaUF6MpMLthqohd9BZl8QZJ6b69cS4VF59IgoniQ=
Subject key identifier: 10:E2:14:E9:3A:AB:CA:7E:19:A1:5C:E1:23:14:D5:3D:44:20:CD:47
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A6E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EOIU6Tqryn4ZoVzhIxTVPUQgzUc.roa
Signing time: Wed 29 Sep 2021 02:45:20 +0000
ROA not before: Wed 29 Sep 2021 02:45:20 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6766 (0x1a6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:20 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=10E214E93AABCA7E19A15CE12314D53D4420CD47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:00:9f:4e:82:f7:af:7a:75:43:36:89:b1:
dc:e7:6d:e0:c0:83:03:cd:71:a6:a9:74:34:ff:85:
a5:6f:af:62:83:61:63:3c:c8:55:49:4e:29:1d:d9:
83:63:98:a3:02:39:6a:39:0f:54:30:3a:15:aa:95:
e1:d5:cc:b7:49:9c:9d:7f:e8:d6:7e:1b:28:4c:eb:
4b:9e:6a:6b:00:0e:bc:1e:2d:bc:fb:bc:2a:51:7f:
1c:7b:19:80:6e:d2:2d:bc:8c:70:d6:22:b3:4e:47:
5d:89:22:37:3d:3e:e7:bd:98:5a:ef:18:32:85:97:
84:13:0d:09:d6:04:02:56:58:72:ba:e6:d3:68:4e:
41:26:15:86:12:03:56:b8:d1:28:8e:d0:77:26:53:
ff:e0:7d:1b:86:ae:69:9f:21:bb:60:ee:d3:71:5d:
fb:9c:24:8d:10:c0:a3:1d:e4:89:5a:08:26:b7:8e:
53:0b:f4:12:b9:a0:20:60:33:49:a9:8a:dd:de:81:
9b:2b:d2:c3:66:b1:5c:5a:8a:5a:ef:13:16:e8:c8:
32:de:ed:ab:a5:4c:a4:34:61:2b:56:fe:9d:44:af:
f8:10:66:a2:d9:dd:96:7a:74:d9:62:b6:1d:16:d7:
ff:85:27:3c:66:70:18:2a:e5:7b:f8:f4:03:64:82:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E2:14:E9:3A:AB:CA:7E:19:A1:5C:E1:23:14:D5:3D:44:20:CD:47
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EOIU6Tqryn4ZoVzhIxTVPUQgzUc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.200.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:2d:4a:6e:4c:02:45:bc:e6:4e:1e:21:b6:3f:a1:dd:56:be:
52:2f:48:dd:7c:32:4c:97:ae:63:62:37:55:24:a1:f3:33:21:
84:e0:ac:9e:62:77:ec:a7:da:94:f4:95:8a:33:93:3c:fb:f9:
99:f5:ae:cb:e1:b0:a8:95:2a:c9:87:ca:36:87:5e:1a:32:3d:
43:9d:42:28:da:3b:d0:7c:2d:28:8c:aa:e2:09:31:84:09:5b:
99:02:45:c2:b6:68:b1:7f:bc:1b:a1:f4:d9:dc:11:e3:77:d1:
5b:a0:76:95:c4:86:04:ca:d7:ad:0c:b6:8e:3f:a9:0c:09:d7:
a8:1c:41:5a:52:30:87:50:62:fe:e9:20:70:3c:c4:28:5a:91:
48:4b:6c:0a:bc:27:10:aa:1e:c4:eb:cc:b9:db:de:4e:a7:41:
c9:2e:59:d7:8a:17:08:14:6a:ae:db:54:59:d5:2d:4a:fc:30:
08:79:e1:25:8e:96:52:2a:98:68:30:ba:3f:c6:1f:ec:45:7f:
54:22:b1:d4:c5:1c:4c:18:09:78:24:95:81:31:a7:8f:38:e3:
dd:66:43:df:a1:d3:7d:b1:69:51:20:6f:1d:bc:ea:bf:78:32:
a6:82:ca:6a:98:65:8f:ec:c5:d8:c0:5c:71:91:b1:cc:57:39:
6b:55:86:b1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGm4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ1MjBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDEwRTIxNEU5M0FBQkNB
N0UxOUExNUNFMTIzMTRENTNENDQyMENENDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDb+wCfToL3r3p1QzaJsdznbeDAgwPNcaapdDT/haVvr2KDYWM8
yFVJTikd2YNjmKMCOWo5D1QwOhWqleHVzLdJnJ1/6NZ+GyhM60ueamsADrweLbz7
vCpRfxx7GYBu0i28jHDWIrNOR12JIjc9Pue9mFrvGDKFl4QTDQnWBAJWWHK65tNo
TkEmFYYSA1a40SiO0HcmU//gfRuGrmmfIbtg7tNxXfucJI0QwKMd5IlaCCa3jlML
9BK5oCBgM0mpit3egZsr0sNmsVxailrvExboyDLe7aulTKQ0YStW/p1Er/gQZqLZ
3ZZ6dNlith0W1/+FJzxmcBgq5Xv49ANkgpYrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEOIU6Tqryn4ZoVzhIxTVPUQgzUcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0VPSVU2VHFyeW40Wm9WemhJ
eFRWUFVRZ3pVYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w8gwDQYJKoZIhvcNAQELBQADggEBAH0tSm5MAkW85k4eIbY/od1WvlIvSN18MkyX
rmNiN1UkofMzIYTgrJ5id+yn2pT0lYozkzz7+Zn1rsvhsKiVKsmHyjaHXhoyPUOd
QijaO9B8LSiMquIJMYQJW5kCRcK2aLF/vBuh9NncEeN30VugdpXEhgTK160Mto4/
qQwJ16gcQVpSMIdQYv7pIHA8xChakUhLbAq8JxCqHsTrzLnb3k6nQckuWdeKFwgU
aq7bVFnVLUr8MAh54SWOllIqmGgwuj/GH+xFf1QisdTFHEwYCXgklYExp484491m
Q9+h032xaVEgbx286r94MqaCymqYZY/sxdjAXHGRscxXOWtVhrE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org