Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G7KCZuuawNF8BHJYpqDL1j_rgl8.roa
File: G7KCZuuawNF8BHJYpqDL1j_rgl8.roa (raw, json)
Hash identifier: IXELeKLuTAQ+yGaRgH1VPfxzYSxsUjD27XESYtjodzk=
Subject key identifier: 1B:B2:82:66:EB:9A:C0:D1:7C:04:72:58:A6:A0:CB:D6:3F:EB:82:5F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D47
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G7KCZuuawNF8BHJYpqDL1j_rgl8.roa
Signing time: Wed 29 Sep 2021 02:48:49 +0000
ROA not before: Wed 29 Sep 2021 02:48:49 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.195.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7495 (0x1d47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:49 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1BB28266EB9AC0D17C047258A6A0CBD63FEB825F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:b8:56:49:08:e1:ba:fb:23:da:a6:17:9d:
24:15:b5:47:6b:a6:b4:29:be:ba:11:ee:80:60:89:
44:27:8d:7c:ae:10:b9:3b:4d:6b:fc:3a:40:74:8a:
7a:aa:57:f5:c2:81:9d:40:c3:3b:60:3f:45:14:cc:
7e:5a:06:34:e6:96:75:4c:d8:e8:9c:fd:1d:8e:20:
1d:b7:0f:2d:a6:10:98:5f:6c:0f:44:80:75:c5:dd:
09:d2:4d:65:b1:5e:6d:6e:3a:b1:8e:9a:3f:a6:9e:
5d:a2:e9:5e:4b:63:58:8e:a4:4f:28:73:83:50:4b:
6b:19:68:7e:61:54:ca:aa:98:b8:eb:fb:96:cb:87:
f7:22:6b:fa:3e:28:b0:4a:c9:d6:f3:81:4c:75:a4:
f9:9a:a5:00:d7:13:7e:10:82:a8:cb:e8:5a:73:3e:
34:95:40:00:99:ab:40:b2:56:a3:08:07:76:db:f7:
ec:72:6a:6f:a9:e4:ca:3f:8f:66:71:85:8c:f4:4b:
bf:b9:0f:f3:4f:bb:d7:05:26:75:57:47:21:6d:5f:
58:0f:24:4b:03:85:40:a4:ae:91:03:2b:42:95:cd:
c2:dc:38:0a:45:05:68:01:de:7b:62:0f:96:29:41:
c0:b2:f7:ad:85:ce:15:1c:44:d7:87:40:8e:1b:4c:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B2:82:66:EB:9A:C0:D1:7C:04:72:58:A6:A0:CB:D6:3F:EB:82:5F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G7KCZuuawNF8BHJYpqDL1j_rgl8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.128.0/19
Signature Algorithm: sha256WithRSAEncryption
b9:8d:91:0c:5e:35:07:0c:0e:85:c6:b1:3d:75:e9:47:de:8f:
e9:bc:28:ed:99:be:10:77:c7:45:4a:ae:63:e9:4b:f7:17:c7:
c1:73:c1:e4:3b:bb:1f:0a:6d:b7:0f:42:6c:89:e9:33:68:de:
1d:c3:00:78:a2:78:6b:0f:e3:b9:6f:b0:bd:d1:82:61:36:4d:
1a:24:3b:ca:41:f2:94:a9:e4:03:f3:09:da:2e:fc:8d:f7:0b:
10:bf:dd:06:10:37:15:5e:67:10:44:16:9d:b6:b4:5c:ba:10:
57:9a:37:38:16:4e:cc:64:f9:9d:ac:55:83:7d:15:94:ed:98:
ee:05:6e:72:3b:ca:b2:48:c1:2c:dc:82:cb:84:5c:25:d7:1f:
65:8d:a8:fd:41:07:31:ee:de:f6:56:0d:74:f0:68:52:03:d9:
f3:ef:3f:66:a7:88:fd:6e:eb:b2:de:72:e1:5f:ac:60:34:2a:
bd:4f:44:db:07:33:a0:39:a0:fc:6f:2e:b6:6c:c9:e5:96:69:
6e:c0:6d:bc:e3:30:24:a3:dc:6d:d0:b2:4c:8f:96:da:72:4e:
be:9e:c9:ca:66:25:4a:8c:60:83:f6:84:86:b4:bf:01:89:3a:
dd:72:b9:19:bd:01:ba:1e:1e:c6:26:5c:a9:8c:a6:cf:9a:b5:
2e:94:b8:14
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHUcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4NDlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDFCQjI4MjY2RUI5QUMw
RDE3QzA0NzI1OEE2QTBDQkQ2M0ZFQjgyNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6MbhWSQjhuvsj2qYXnSQVtUdrprQpvroR7oBgiUQnjXyuELk7
TWv8OkB0inqqV/XCgZ1AwztgP0UUzH5aBjTmlnVM2Oic/R2OIB23Dy2mEJhfbA9E
gHXF3QnSTWWxXm1uOrGOmj+mnl2i6V5LY1iOpE8oc4NQS2sZaH5hVMqqmLjr+5bL
h/cia/o+KLBKydbzgUx1pPmapQDXE34QgqjL6FpzPjSVQACZq0CyVqMIB3bb9+xy
am+p5Mo/j2ZxhYz0S7+5D/NPu9cFJnVXRyFtX1gPJEsDhUCkrpEDK0KVzcLcOApF
BWgB3ntiD5YpQcCy962FzhUcRNeHQI4bTBx7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUG7KCZuuawNF8BHJYpqDL1j/rgl8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0c3S0NadXVhd05GOEJISllw
cURMMWpfcmdsOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
w4AwDQYJKoZIhvcNAQELBQADggEBALmNkQxeNQcMDoXGsT116Ufej+m8KO2ZvhB3
x0VKrmPpS/cXx8FzweQ7ux8KbbcPQmyJ6TNo3h3DAHiieGsP47lvsL3RgmE2TRok
O8pB8pSp5APzCdou/I33CxC/3QYQNxVeZxBEFp22tFy6EFeaNzgWTsxk+Z2sVYN9
FZTtmO4FbnI7yrJIwSzcgsuEXCXXH2WNqP1BBzHu3vZWDXTwaFID2fPvP2aniP1u
67LecuFfrGA0Kr1PRNsHM6A5oPxvLrZsyeWWaW7AbbzjMCSj3G3QskyPltpyTr6e
ycpmJUqMYIP2hIa0vwGJOt1yuRm9AboeHsYmXKmMps+atS6UuBQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:25 2023 by rpki-client on console-fra.rpki-client.org