Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ErnLsE3YJpKWrQfg5jj3hMvb_-s.roa
File: ErnLsE3YJpKWrQfg5jj3hMvb_-s.roa (raw, json)
Hash identifier: s6oGwTgiMyzjCzrQVDHtuPVGmesZNOPZ7SFezPeGH3U=
Subject key identifier: 12:B9:CB:B0:4D:D8:26:92:96:AD:07:E0:E6:38:F7:84:CB:DB:FF:EB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 192B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ErnLsE3YJpKWrQfg5jj3hMvb_-s.roa
Signing time: Sun 07 Feb 2021 13:03:39 +0000
ROA not before: Sun 07 Feb 2021 13:03:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6443 (0x192b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 13:03:39 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=12B9CBB04DD8269296AD07E0E638F784CBDBFFEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:6b:93:84:6c:0c:af:a9:2a:6c:a8:00:c7:
18:79:b0:c9:b6:a6:10:a2:a8:bb:79:14:78:f8:19:
f4:8a:a0:93:f0:97:57:ba:7c:5d:6f:38:3c:00:84:
39:2e:a9:60:b1:35:e3:c5:f5:3b:e0:4a:94:dd:fa:
9b:69:be:73:68:8f:d4:63:3b:d8:fc:e3:0f:7d:d4:
0f:1a:ce:d0:62:86:ef:84:19:f8:3c:b1:8b:cb:e2:
c3:31:bc:85:33:38:b7:88:0c:6b:dc:d0:41:ce:a0:
dd:78:4f:bb:b0:73:22:4a:b4:1a:e9:88:1f:ab:54:
08:68:40:ed:d8:9c:97:b3:59:6d:ad:f8:39:fc:54:
48:83:49:a8:2c:5f:a5:50:c8:33:dd:70:ef:d6:22:
e2:c9:cc:cc:2e:10:21:01:75:ee:2d:a8:35:86:3d:
32:2c:e5:6c:2a:26:4e:5a:cf:2d:2f:37:41:b2:a4:
e0:76:01:17:ae:2b:af:4f:83:71:76:33:0a:c7:3f:
dd:17:a0:e3:8d:af:af:e9:43:2a:9c:e5:31:c5:b8:
f5:2a:80:55:e9:d1:65:f3:83:51:38:08:f0:ad:57:
74:87:8b:ca:92:c5:3b:20:77:e6:a3:64:b0:4f:42:
70:b4:ff:2f:c8:64:95:20:5f:a2:2a:a8:a7:44:60:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B9:CB:B0:4D:D8:26:92:96:AD:07:E0:E6:38:F7:84:CB:DB:FF:EB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ErnLsE3YJpKWrQfg5jj3hMvb_-s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.120.0/21
Signature Algorithm: sha256WithRSAEncryption
22:77:22:9e:d6:07:0a:60:f1:03:6c:c7:92:87:95:98:6b:00:
7b:33:34:f1:6b:62:fa:43:03:3e:51:80:6a:b7:80:e9:86:1b:
48:49:2c:48:38:d8:a8:77:03:41:d3:17:27:60:70:39:65:a6:
d4:59:e2:73:19:7e:1a:d5:26:c6:07:dd:a0:6b:d0:ab:47:4b:
d5:21:01:f8:40:57:db:f1:e3:a7:d7:fd:cf:b3:d3:4f:7b:64:
54:d8:35:47:58:66:9a:4e:62:07:c3:de:ce:4f:bd:93:35:2a:
64:e2:fa:e7:9a:3e:ad:f4:a3:aa:98:ab:41:44:d9:4e:7c:ac:
f3:05:15:9d:52:bc:b7:78:f2:8d:9b:82:df:9a:75:a4:72:6f:
c0:32:7d:9f:05:58:93:35:57:bb:6e:57:d0:43:76:77:03:e8:
a7:82:ab:5b:44:ca:ff:a3:52:17:d5:35:db:0b:53:27:0e:06:
1b:53:a2:c8:c7:aa:98:63:0f:aa:10:6e:5c:7b:d4:72:08:6d:
e3:e3:9a:42:73:a3:b9:a3:ac:3d:51:fb:1b:85:93:3a:a4:c6:
2b:20:1f:73:60:b4:d7:1c:34:74:61:3c:54:84:02:45:c0:d4:
5b:2e:2e:96:64:d6:a0:c6:81:7d:28:90:5e:30:c9:ee:42:d8:
2d:f8:37:8b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGSswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MzAzMzlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDEyQjlDQkIwNEREODI2
OTI5NkFEMDdFMEU2MzhGNzg0Q0JEQkZGRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3NGuThGwMr6kqbKgAxxh5sMm2phCiqLt5FHj4GfSKoJPwl1e6
fF1vODwAhDkuqWCxNePF9TvgSpTd+ptpvnNoj9RjO9j84w991A8aztBihu+EGfg8
sYvL4sMxvIUzOLeIDGvc0EHOoN14T7uwcyJKtBrpiB+rVAhoQO3YnJezWW2t+Dn8
VEiDSagsX6VQyDPdcO/WIuLJzMwuECEBde4tqDWGPTIs5WwqJk5azy0vN0GypOB2
AReuK69Pg3F2MwrHP90XoOONr6/pQyqc5THFuPUqgFXp0WXzg1E4CPCtV3SHi8qS
xTsgd+ajZLBPQnC0/y/IZJUgX6IqqKdEYGURAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUErnLsE3YJpKWrQfg5jj3hMvb/+swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0VybkxzRTNZSnBLV3JRZmc1
amozaE12Yl8tcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wngwDQYJKoZIhvcNAQELBQADggEBACJ3Ip7WBwpg8QNsx5KHlZhrAHszNPFrYvpD
Az5RgGq3gOmGG0hJLEg42Kh3A0HTFydgcDllptRZ4nMZfhrVJsYH3aBr0KtHS9Uh
AfhAV9vx46fX/c+z0097ZFTYNUdYZppOYgfD3s5PvZM1KmTi+ueaPq30o6qYq0FE
2U58rPMFFZ1SvLd48o2bgt+adaRyb8AyfZ8FWJM1V7tuV9BDdncD6KeCq1tEyv+j
UhfVNdsLUycOBhtTosjHqphjD6oQblx71HIIbePjmkJzo7mjrD1R+xuFkzqkxisg
H3NgtNccNHRhPFSEAkXA1FsuLpZk1qDGgX0okF4wye5C2C34N4s=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:24 2023 by rpki-client on console-fra.rpki-client.org