Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HNC-jBb6uNtSlm0cRfX1A7Te7aY.roa
File: HNC-jBb6uNtSlm0cRfX1A7Te7aY.roa (raw, json)
Hash identifier: D5vuff4mw2jqh823MCMNoYk8z0NpC2yFWkb9xqXphj8=
Subject key identifier: 1C:D0:BE:8C:16:FA:B8:DB:52:96:6D:1C:45:F5:F5:03:B4:DE:ED:A6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1573
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HNC-jBb6uNtSlm0cRfX1A7Te7aY.roa
Signing time: Sun 07 Feb 2021 12:04:42 +0000
ROA not before: Sun 07 Feb 2021 12:04:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5491 (0x1573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:04:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1CD0BE8C16FAB8DB52966D1C45F5F503B4DEEDA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:42:f2:d2:05:4e:8a:1a:af:a6:91:53:24:
ed:b4:df:99:b4:b7:8b:8f:17:9c:04:67:dc:ae:a0:
41:e3:b4:04:0b:0e:cd:1e:e9:bf:1c:ef:3f:6a:69:
1a:2c:65:cd:4c:5e:65:4f:c5:c8:1e:02:47:80:cb:
14:b3:1c:59:39:8e:c3:09:75:a3:0a:fd:42:9e:e3:
63:e4:b1:aa:72:e7:e8:4a:ce:dc:59:72:3e:cb:f0:
0a:3d:f1:28:39:32:88:ab:34:c7:30:58:cc:39:13:
19:93:ab:96:6a:8e:b6:77:15:b9:db:04:93:79:fa:
b8:2a:48:af:6e:c6:8a:8b:64:1a:83:57:0b:9f:ad:
3d:f7:80:cb:46:a8:e0:ae:f5:7d:2e:ac:a3:b7:f5:
73:f2:bf:fe:90:2d:d1:e1:df:9a:c1:6b:dc:e2:91:
ad:d9:ea:73:bf:29:73:7c:7b:5b:10:47:2f:1f:48:
76:36:28:07:9e:4d:56:7c:57:69:c5:bd:9d:eb:9d:
25:44:a7:8f:f1:b4:a6:0c:6d:b0:d7:0f:5f:05:27:
d9:86:23:90:5a:1e:56:6c:41:1e:15:12:80:10:83:
72:52:3f:cf:b4:e4:17:22:ce:e9:7f:ad:07:7c:92:
63:81:b2:2c:34:0c:00:b1:39:f7:9c:08:94:fb:9f:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D0:BE:8C:16:FA:B8:DB:52:96:6D:1C:45:F5:F5:03:B4:DE:ED:A6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HNC-jBb6uNtSlm0cRfX1A7Te7aY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.48.0/21
Signature Algorithm: sha256WithRSAEncryption
31:43:6b:1a:9b:87:5e:86:db:c9:66:b4:e7:4f:e8:dd:83:22:
d6:ae:af:b8:10:96:05:bb:30:ee:e4:a6:ad:3e:1d:fd:22:1a:
db:cd:8f:07:68:35:a4:65:93:df:20:71:07:f5:23:92:82:96:
3a:5c:41:ca:b6:7d:4d:17:49:61:8d:de:be:66:cc:6c:45:4b:
2f:e6:5b:cf:93:e3:86:1a:a8:c4:57:f5:9d:66:27:da:e5:75:
f4:81:de:70:4f:da:48:06:c6:68:d4:2c:5f:6d:5d:8a:dd:4e:
91:d3:92:d6:5b:4a:fe:b1:13:f7:40:8a:31:d9:52:ec:a2:20:
e3:e0:de:c6:2a:3b:37:2c:f6:e2:90:7c:47:16:87:7c:4b:35:
84:d1:50:f0:d0:27:23:ad:a0:63:5a:10:57:a1:43:58:9e:c6:
0c:a3:95:06:0f:cf:8e:a0:69:2f:ba:b4:e4:72:49:ce:38:33:
72:27:20:12:69:76:49:e1:c5:25:50:37:0c:fe:f3:00:d8:d6:
1c:c9:c9:3b:84:af:db:c4:85:be:45:ac:4d:a4:96:b8:bc:33:
9f:fb:b0:6d:63:f9:49:16:61:5b:19:5c:7e:8c:10:eb:f8:ff:
4d:c6:3d:6a:2a:b2:5e:26:26:c7:dc:f1:0a:98:5e:e3:16:5b:
27:cb:6a:6e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFXMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjA0NDJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDFDRDBCRThDMTZGQUI4
REI1Mjk2NkQxQzQ1RjVGNTAzQjRERUVEQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCt9ELy0gVOihqvppFTJO2035m0t4uPF5wEZ9yuoEHjtAQLDs0e
6b8c7z9qaRosZc1MXmVPxcgeAkeAyxSzHFk5jsMJdaMK/UKe42Pksapy5+hKztxZ
cj7L8Ao98Sg5MoirNMcwWMw5ExmTq5ZqjrZ3FbnbBJN5+rgqSK9uxoqLZBqDVwuf
rT33gMtGqOCu9X0urKO39XPyv/6QLdHh35rBa9zika3Z6nO/KXN8e1sQRy8fSHY2
KAeeTVZ8V2nFvZ3rnSVEp4/xtKYMbbDXD18FJ9mGI5BaHlZsQR4VEoAQg3JSP8+0
5Bcizul/rQd8kmOBsiw0DACxOfecCJT7n79bAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUHNC+jBb6uNtSlm0cRfX1A7Te7aYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0hOQy1qQmI2dU50U2xtMGNS
ZlgxQTdUZTdhWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wjAwDQYJKoZIhvcNAQELBQADggEBADFDaxqbh16G28lmtOdP6N2DItaur7gQlgW7
MO7kpq0+Hf0iGtvNjwdoNaRlk98gcQf1I5KCljpcQcq2fU0XSWGN3r5mzGxFSy/m
W8+T44YaqMRX9Z1mJ9rldfSB3nBP2kgGxmjULF9tXYrdTpHTktZbSv6xE/dAijHZ
UuyiIOPg3sYqOzcs9uKQfEcWh3xLNYTRUPDQJyOtoGNaEFehQ1iexgyjlQYPz46g
aS+6tORySc44M3InIBJpdknhxSVQNwz+8wDY1hzJyTuEr9vEhb5FrE2klri8M5/7
sG1j+UkWYVsZXH6MEOv4/03GPWoqsl4mJsfc8QqYXuMWWyfLam4=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:15 2023 by rpki-client on console-ams.rpki-client.org