Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HoIkLQkNAz5mAquT0TST6BhpLqg.roa
File: HoIkLQkNAz5mAquT0TST6BhpLqg.roa (raw, json)
Hash identifier: 4uSUSteltO1GRQvJY5mZUVDLOyveHo3q1lQPUIxLQJ4=
Subject key identifier: 1E:82:24:2D:09:0D:03:3E:66:02:AB:93:D1:34:93:E8:18:69:2E:A8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B29
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HoIkLQkNAz5mAquT0TST6BhpLqg.roa
Signing time: Wed 29 Sep 2021 02:46:14 +0000
ROA not before: Wed 29 Sep 2021 02:46:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6953 (0x1b29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1E82242D090D033E6602AB93D13493E818692EA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:e6:30:f6:88:68:d6:59:a3:f1:fd:ac:68:
75:d1:57:12:57:7f:ac:0e:45:17:8f:32:14:5f:b1:
99:82:cb:61:88:e7:16:d6:89:04:7c:20:c0:99:c3:
a5:67:2f:eb:d0:fb:70:29:18:39:50:16:2b:93:0b:
e9:29:aa:e7:7d:b9:e3:a3:87:f9:a3:a2:b7:2b:fc:
bb:4e:a2:57:cb:71:6c:a3:a4:9d:0c:9c:69:dd:f7:
d0:79:98:23:56:cc:79:40:cb:53:58:33:e9:eb:81:
12:70:32:1a:dd:c0:ba:19:67:05:58:67:0c:77:8d:
82:58:79:0e:3d:03:d4:e4:8c:0c:a5:f9:19:57:e0:
cd:a3:70:ae:cd:2e:f4:57:85:48:b8:11:a7:e2:0c:
5f:2d:a6:a8:8d:32:47:aa:bf:f8:e0:cb:91:6d:b1:
a9:59:8e:18:3d:fa:22:42:cc:4e:d7:f8:64:cb:8d:
c8:1d:59:a7:86:5d:d9:9a:5f:73:76:4f:d8:e4:51:
c3:90:07:05:5f:a2:39:1c:ad:3a:c0:be:37:79:e8:
7b:ec:c0:c9:c9:24:16:70:d4:0a:10:2c:f0:b5:0f:
01:fd:5b:84:b2:44:69:fa:b8:53:c4:3a:bf:dc:61:
93:9b:04:6c:50:50:a5:23:6f:01:7c:29:dd:08:bb:
10:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:82:24:2D:09:0D:03:3E:66:02:AB:93:D1:34:93:E8:18:69:2E:A8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HoIkLQkNAz5mAquT0TST6BhpLqg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.32.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:14:58:80:6d:b3:24:67:3e:5a:bb:c6:7a:1c:0f:c3:e6:b8:
84:77:78:81:bb:ca:8e:52:7b:25:06:40:c5:f5:d4:39:88:3a:
b8:8d:74:12:b4:6e:3a:f8:1c:52:66:d4:c2:ff:a9:5f:fc:00:
da:08:d9:6e:c9:d5:c4:30:6e:77:99:df:58:ca:23:f2:7b:79:
77:3b:27:dd:b9:5a:57:3a:b0:45:b7:24:05:61:ae:e4:f5:77:
6c:dd:d0:0c:ec:3b:d6:8f:c4:3f:c3:c2:2d:61:55:9d:e0:55:
44:73:be:a9:62:9f:ba:16:ce:52:66:0b:8c:8a:fc:d3:c3:17:
1a:b5:1b:be:7a:c2:53:62:cc:87:0c:d7:84:e0:1a:5e:0a:05:
61:dd:af:08:15:14:3f:47:8d:f7:ac:7c:8b:ce:2c:e0:1d:ba:
d0:1b:9d:10:6b:bb:d2:5b:f4:76:9f:d1:00:10:15:a2:d5:f0:
b8:ad:d7:6f:12:07:8d:e9:bc:98:4f:17:f4:d3:d3:3f:52:67:
db:d5:e5:3d:d4:c3:da:08:a2:54:87:98:22:5d:5b:4d:7d:d6:
20:68:d0:b0:4a:a9:89:29:6b:9b:35:71:5f:f0:30:f1:43:2f:
5b:00:46:c8:68:c7:78:1f:9d:db:8c:56:17:cf:0f:d1:18:73:
27:60:fd:02
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGykwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2MTRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDFFODIyNDJEMDkwRDAz
M0U2NjAyQUI5M0QxMzQ5M0U4MTg2OTJFQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdFOYw9oho1lmj8f2saHXRVxJXf6wORRePMhRfsZmCy2GI5xbW
iQR8IMCZw6VnL+vQ+3ApGDlQFiuTC+kpqud9ueOjh/mjorcr/LtOolfLcWyjpJ0M
nGnd99B5mCNWzHlAy1NYM+nrgRJwMhrdwLoZZwVYZwx3jYJYeQ49A9TkjAyl+RlX
4M2jcK7NLvRXhUi4EafiDF8tpqiNMkeqv/jgy5FtsalZjhg9+iJCzE7X+GTLjcgd
WaeGXdmaX3N2T9jkUcOQBwVfojkcrTrAvjd56HvswMnJJBZw1AoQLPC1DwH9W4Sy
RGn6uFPEOr/cYZObBGxQUKUjbwF8Kd0IuxBhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUHoIkLQkNAz5mAquT0TST6BhpLqgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0hvSWtMUWtOQXo1bUFxdVQw
VFNUNkJocExxZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wSAwDQYJKoZIhvcNAQELBQADggEBAKoUWIBtsyRnPlq7xnocD8PmuIR3eIG7yo5S
eyUGQMX11DmIOriNdBK0bjr4HFJm1ML/qV/8ANoI2W7J1cQwbneZ31jKI/J7eXc7
J925Wlc6sEW3JAVhruT1d2zd0AzsO9aPxD/Dwi1hVZ3gVURzvqlin7oWzlJmC4yK
/NPDFxq1G756wlNizIcM14TgGl4KBWHdrwgVFD9HjfesfIvOLOAdutAbnRBru9Jb
9Haf0QAQFaLV8Lit128SB43pvJhPF/TT0z9SZ9vV5T3Uw9oIolSHmCJdW0191iBo
0LBKqYkpa5s1cV/wMPFDL1sARshox3gfnduMVhfPD9EYcydg/QI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org