Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G8Qdq2KgaEyeLN_phyqJ0eq-uTI.roa
File: G8Qdq2KgaEyeLN_phyqJ0eq-uTI.roa (raw, json)
Hash identifier: H1yivzw8JaqaP6Ci9fj11Em8YMmXnuVMzCMknbCDsLw=
Subject key identifier: 1B:C4:1D:AB:62:A0:68:4C:9E:2C:DF:E9:87:2A:89:D1:EA:BE:B9:32
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18D7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G8Qdq2KgaEyeLN_phyqJ0eq-uTI.roa
Signing time: Sun 07 Feb 2021 12:54:19 +0000
ROA not before: Sun 07 Feb 2021 12:54:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.193.218.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6359 (0x18d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:54:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1BC41DAB62A0684C9E2CDFE9872A89D1EABEB932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:2e:7b:90:8d:5d:c2:fd:bc:fa:4c:2a:2b:
14:83:96:f2:37:e7:4c:18:f7:01:59:57:41:29:78:
d4:47:f7:75:e5:78:24:6a:2a:6d:29:cc:bc:7a:de:
e9:4a:ab:72:e6:9b:8e:70:db:9d:ac:6c:98:f5:b7:
b4:40:36:a1:a4:d5:fe:3e:8c:35:84:17:f8:c0:60:
d9:a4:db:59:3d:e9:48:9f:76:e5:de:23:53:28:54:
69:67:40:a0:c0:00:01:7c:6d:de:ef:b6:d3:07:31:
14:3b:b8:cb:75:c0:c2:60:2b:c5:13:86:ce:69:44:
21:b7:7b:48:d6:47:8b:85:c9:f6:b4:53:a2:9b:e0:
7b:a0:66:9d:48:d3:60:0c:6f:a7:1b:b8:e9:98:54:
b1:e3:ab:e2:23:3b:98:31:01:2a:3b:9f:71:a6:2f:
26:09:12:9d:0b:91:27:0c:1c:f5:15:ef:20:6e:17:
ce:99:24:8e:cb:7e:fc:11:24:70:91:66:7b:01:6e:
d7:2d:6b:58:55:3a:cd:0e:55:37:87:ec:e7:39:38:
59:7f:1b:b4:20:75:e2:96:cd:da:a6:b4:ba:ad:bc:
8f:8f:67:3c:f3:e9:05:19:96:81:1b:83:34:de:49:
e8:ec:8f:e1:38:c4:19:67:c3:55:5b:3a:45:46:ae:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C4:1D:AB:62:A0:68:4C:9E:2C:DF:E9:87:2A:89:D1:EA:BE:B9:32
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G8Qdq2KgaEyeLN_phyqJ0eq-uTI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.218.0/23
Signature Algorithm: sha256WithRSAEncryption
48:e5:1b:44:a7:39:b8:5e:25:72:f1:d5:db:21:42:d1:58:48:
c4:f2:6f:69:68:d5:fb:cd:e9:31:ac:fd:1f:54:51:50:91:91:
59:41:5d:ff:ff:e7:58:3b:34:2a:de:e7:9c:de:f2:f4:da:be:
f2:6a:ba:06:0b:d1:e5:38:24:ed:f8:a6:8f:79:01:b7:48:dc:
11:93:c5:04:d2:3a:3b:ab:35:3a:3d:67:90:69:53:1d:5e:f4:
1f:83:20:32:1a:3d:9f:a6:c7:3c:ef:be:7a:c4:4d:5f:01:13:
85:12:56:cf:c0:53:b8:47:5e:b1:98:15:49:1b:c0:82:88:14:
43:d1:e5:4b:d6:34:03:3c:f2:8e:c8:c9:9b:30:d5:c1:c0:0b:
f7:da:c6:0e:19:8c:2b:39:ea:d2:be:a9:c5:29:8e:2b:7b:52:
22:b6:4a:85:62:ef:a8:d4:b5:a2:7e:af:13:ec:da:21:f1:10:
6c:0b:ec:84:8a:8c:cf:f4:69:63:ca:31:19:04:fe:a6:04:2d:
89:f6:83:a3:45:1b:04:3c:31:c8:bd:df:a1:1f:79:dc:51:04:
25:6d:ac:7a:fb:bc:d1:72:b3:53:ff:10:7f:55:6a:c2:f3:03:
18:24:42:40:4a:fb:87:fc:77:ef:dd:a0:9b:99:67:66:42:cc:
f9:9e:73:54
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGNcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjU0MTlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDFCQzQxREFCNjJBMDY4
NEM5RTJDREZFOTg3MkE4OUQxRUFCRUI5MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmQS57kI1dwv28+kwqKxSDlvI350wY9wFZV0EpeNRH93XleCRq
Km0pzLx63ulKq3Lmm45w252sbJj1t7RANqGk1f4+jDWEF/jAYNmk21k96UifduXe
I1MoVGlnQKDAAAF8bd7vttMHMRQ7uMt1wMJgK8UThs5pRCG3e0jWR4uFyfa0U6Kb
4HugZp1I02AMb6cbuOmYVLHjq+IjO5gxASo7n3GmLyYJEp0LkScMHPUV7yBuF86Z
JI7LfvwRJHCRZnsBbtcta1hVOs0OVTeH7Oc5OFl/G7QgdeKWzdqmtLqtvI+PZzzz
6QUZloEbgzTeSejsj+E4xBlnw1VbOkVGriuLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUG8Qdq2KgaEyeLN/phyqJ0eq+uTIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0c4UWRxMktnYUV5ZUxOX3Bo
eXFKMGVxLXVUSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7
wdowDQYJKoZIhvcNAQELBQADggEBAEjlG0SnObheJXLx1dshQtFYSMTyb2lo1fvN
6TGs/R9UUVCRkVlBXf//51g7NCre55ze8vTavvJqugYL0eU4JO34po95AbdI3BGT
xQTSOjurNTo9Z5BpUx1e9B+DIDIaPZ+mxzzvvnrETV8BE4USVs/AU7hHXrGYFUkb
wIKIFEPR5UvWNAM88o7IyZsw1cHAC/faxg4ZjCs56tK+qcUpjit7UiK2SoVi76jU
taJ+rxPs2iHxEGwL7ISKjM/0aWPKMRkE/qYELYn2g6NFGwQ8Mci936EfedxRBCVt
rHr7vNFys1P/EH9VasLzAxgkQkBK+4f8d+/doJuZZ2ZCzPmec1Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org