Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EPFZyTDY83K72VPz1kC4uXJjPT0.roa
File: EPFZyTDY83K72VPz1kC4uXJjPT0.roa (raw, json)
Hash identifier: cMcNDC/mx9/N/Xk3v3LlffFB5e6hxEpkasOD4yWJBAo=
Subject key identifier: 10:F1:59:C9:30:D8:F3:72:BB:D9:53:F3:D6:40:B8:B9:72:63:3D:3D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D91
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EPFZyTDY83K72VPz1kC4uXJjPT0.roa
Signing time: Tue 29 Sep 2020 09:54:43 +0000
ROA not before: Tue 29 Sep 2020 09:54:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3473 (0xd91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=10F159C930D8F372BBD953F3D640B8B972633D3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:2c:c2:a9:af:73:37:b7:c5:27:c9:90:1e:
b4:e4:ab:20:98:10:a1:58:22:89:63:cd:80:5e:f3:
23:f0:6e:fc:5a:78:34:0d:34:d2:b2:2b:dd:0f:b5:
ca:fc:93:9b:45:d3:ec:36:ae:c4:23:3b:6b:98:b2:
48:e2:98:d8:d2:b7:72:e4:82:a0:5f:97:6f:08:b5:
36:a2:17:b4:58:04:b2:b0:32:29:e4:42:36:c9:71:
7c:e6:64:8c:35:f2:79:e8:21:32:34:d0:dc:e0:83:
08:da:3b:5e:39:49:69:d3:b0:74:48:31:b5:7c:1d:
98:60:a4:9e:98:34:21:c7:e1:1d:df:de:fc:f6:80:
c7:8b:76:f9:09:3e:64:a1:85:38:09:d5:dd:4f:1c:
8a:33:f4:55:7d:cf:20:07:b1:4e:1d:26:3d:61:e4:
a7:2d:d4:9b:37:2f:b4:01:19:0f:17:80:1d:35:55:
2c:8b:44:78:e4:a7:c6:54:de:e4:03:27:55:75:bd:
d4:ae:93:1e:b6:01:48:c9:5e:e5:38:af:a0:83:e0:
fa:dd:e0:62:75:4d:c4:61:9c:c6:4c:e8:89:c7:80:
ca:2d:9c:4f:28:9d:5b:92:dc:f5:18:27:48:85:a4:
49:b3:8c:de:d1:00:86:ca:c3:bf:cb:89:ca:22:5c:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F1:59:C9:30:D8:F3:72:BB:D9:53:F3:D6:40:B8:B9:72:63:3D:3D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EPFZyTDY83K72VPz1kC4uXJjPT0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.224.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:cc:0b:88:57:24:92:ce:6e:cc:61:3a:ab:37:4f:68:3d:f8:
10:58:14:9d:39:00:7c:fe:3d:f8:b6:29:bf:eb:2b:b5:36:3f:
46:ca:fa:6f:54:8f:06:cd:96:ab:f3:25:b5:42:e6:72:5a:6b:
ed:e0:cf:34:fc:c1:d7:b6:b6:ff:6a:41:cb:61:9b:31:e1:79:
1f:bc:19:f4:a0:15:17:28:ae:9f:7c:a2:7c:50:e5:8d:86:04:
f5:e3:3b:eb:f8:ac:a4:ea:64:55:f6:a8:d5:16:09:ec:c0:e5:
e5:08:31:fb:64:00:34:09:cd:e5:69:6b:30:a9:97:b5:3b:59:
96:d3:e0:e5:30:ff:9b:8f:67:0d:3c:71:c0:e5:cd:76:d3:d6:
9b:a2:ad:55:88:5a:3e:47:1e:dd:eb:f2:31:10:3c:0a:6c:28:
39:e4:21:31:9f:aa:48:2d:c4:81:b5:a8:5b:bb:82:df:aa:58:
63:93:a6:f8:84:b1:db:50:f7:94:46:f7:0c:d5:d4:c1:e1:ee:
58:be:88:5f:15:0c:df:de:ae:15:da:fa:92:f7:e2:ea:1e:00:
e8:17:6b:a2:4f:5f:31:5a:39:36:ab:ba:9c:9e:c4:47:d8:16:
94:89:4e:75:07:79:ea:70:48:88:2d:44:e4:a5:c9:d3:0d:0a:
cc:87:f1:c6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDZEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0NDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDEwRjE1OUM5MzBEOEYz
NzJCQkQ5NTNGM0Q2NDBCOEI5NzI2MzNEM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4ryzCqa9zN7fFJ8mQHrTkqyCYEKFYIoljzYBe8yPwbvxaeDQN
NNKyK90Ptcr8k5tF0+w2rsQjO2uYskjimNjSt3LkgqBfl28ItTaiF7RYBLKwMink
QjbJcXzmZIw18nnoITI00NzggwjaO145SWnTsHRIMbV8HZhgpJ6YNCHH4R3f3vz2
gMeLdvkJPmShhTgJ1d1PHIoz9FV9zyAHsU4dJj1h5Kct1Js3L7QBGQ8XgB01VSyL
RHjkp8ZU3uQDJ1V1vdSukx62AUjJXuU4r6CD4Prd4GJ1TcRhnMZM6InHgMotnE8o
nVuS3PUYJ0iFpEmzjN7RAIbKw7/LicoiXPczAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEPFZyTDY83K72VPz1kC4uXJjPT0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0VQRlp5VERZODNLNzJWUHox
a0M0dVhKalBUMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w+AwDQYJKoZIhvcNAQELBQADggEBAKTMC4hXJJLObsxhOqs3T2g9+BBYFJ05AHz+
Pfi2Kb/rK7U2P0bK+m9UjwbNlqvzJbVC5nJaa+3gzzT8wde2tv9qQcthmzHheR+8
GfSgFRcorp98onxQ5Y2GBPXjO+v4rKTqZFX2qNUWCezA5eUIMftkADQJzeVpazCp
l7U7WZbT4OUw/5uPZw08ccDlzXbT1puirVWIWj5HHt3r8jEQPApsKDnkITGfqkgt
xIG1qFu7gt+qWGOTpviEsdtQ95RG9wzV1MHh7li+iF8VDN/erhXa+pL34uoeAOgX
a6JPXzFaOTarupyexEfYFpSJTnUHeepwSIgtROSlydMNCsyH8cY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org