Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IWgwkX6LkeMa3h5I6cUW1Ukf2KY.roa
File: IWgwkX6LkeMa3h5I6cUW1Ukf2KY.roa (raw, json)
Hash identifier: krPveemVJOLV1rmjrEj764FYprPjVaKI1jEd6Y0vWTM=
Subject key identifier: 21:68:30:91:7E:8B:91:E3:1A:DE:1E:48:E9:C5:16:D5:49:1F:D8:A6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D1C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IWgwkX6LkeMa3h5I6cUW1Ukf2KY.roa
Signing time: Tue 29 Sep 2020 09:54:12 +0000
ROA not before: Tue 29 Sep 2020 09:54:12 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3356 (0xd1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:12 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=216830917E8B91E31ADE1E48E9C516D5491FD8A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:40:e2:0b:da:c2:05:55:4a:8c:87:f0:47:
0e:75:58:84:af:0d:f9:ca:a4:56:37:56:88:3c:f7:
b4:d2:67:f2:d8:62:15:cc:ca:b0:a0:4d:86:51:84:
90:9c:bf:3d:ca:d5:20:71:89:4b:55:2d:c1:4a:d9:
a4:f2:97:96:8a:98:67:7c:4d:7d:1e:64:40:b9:69:
d8:25:e6:36:ec:3f:73:0d:60:ac:ec:81:44:3d:00:
d4:22:86:ec:7c:09:cc:21:30:5d:eb:1c:1a:46:b3:
98:10:f1:9e:cd:b9:26:ae:b0:f9:a5:1b:6d:39:bd:
5e:26:46:7d:1d:75:79:a6:cb:47:c8:a1:24:69:17:
9b:ee:9e:61:6d:c1:3c:a2:2b:d7:e5:44:7e:60:54:
90:29:b0:b6:a6:ef:30:a8:eb:42:d0:52:17:83:5c:
05:c5:79:e4:48:14:48:67:00:7e:b3:97:b8:31:85:
5e:f0:02:be:3f:1e:10:fa:f2:01:85:8c:93:ad:04:
e4:75:45:eb:18:69:0f:15:3d:50:ed:bc:be:bb:bb:
6c:93:c6:a8:95:57:f1:e0:89:99:16:ef:32:45:16:
04:45:c4:e0:0e:05:c3:1a:3e:64:d4:c6:95:58:14:
f6:80:67:31:70:1f:95:7d:d9:34:3d:6e:e6:f2:0f:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:68:30:91:7E:8B:91:E3:1A:DE:1E:48:E9:C5:16:D5:49:1F:D8:A6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IWgwkX6LkeMa3h5I6cUW1Ukf2KY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.188.0/22
Signature Algorithm: sha256WithRSAEncryption
17:03:12:70:28:e5:a6:71:da:cc:c9:f1:2e:44:3b:f2:ed:b6:
2e:47:7a:4f:5b:69:ee:57:d3:30:1d:8b:a0:e4:6f:5d:44:26:
40:12:04:48:44:00:ea:5b:cf:44:e0:d3:4c:09:95:76:ec:ad:
35:b1:73:78:3a:ad:ad:95:c5:91:85:3d:fb:90:7f:d2:06:94:
48:4b:0e:3c:01:69:b3:c3:e0:87:7c:4a:f2:d4:4d:e6:d8:63:
e0:15:a6:e6:15:ff:79:bc:0f:8a:4f:64:78:fe:4e:b4:25:9e:
fa:60:f9:24:59:58:e8:7f:7a:a1:08:90:aa:76:81:59:02:25:
fe:4d:69:45:ec:a5:58:f6:9e:c8:95:89:1a:b2:d3:c4:37:a0:
98:99:93:52:b1:f4:e0:f7:c0:52:8f:49:6d:9b:52:c3:de:1d:
2b:74:e0:3e:76:50:7f:f4:93:3f:cf:a1:09:86:b9:34:21:3f:
0d:9f:cd:3a:e2:aa:3f:a0:71:ca:02:0a:b3:a9:2a:2e:89:03:
b2:60:91:bd:e1:86:3e:0e:07:76:ac:42:16:0a:f0:99:57:95:
b6:17:b0:39:3d:2b:23:93:06:db:82:55:a0:20:50:40:95:16:
45:59:c6:4d:5d:06:12:57:fb:9f:43:74:2a:8d:b3:d9:1a:bc:
ad:63:02:ef
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0MTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDIxNjgzMDkxN0U4Qjkx
RTMxQURFMUU0OEU5QzUxNkQ1NDkxRkQ4QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpyEDiC9rCBVVKjIfwRw51WISvDfnKpFY3Vog897TSZ/LYYhXM
yrCgTYZRhJCcvz3K1SBxiUtVLcFK2aTyl5aKmGd8TX0eZEC5adgl5jbsP3MNYKzs
gUQ9ANQihux8CcwhMF3rHBpGs5gQ8Z7NuSausPmlG205vV4mRn0ddXmmy0fIoSRp
F5vunmFtwTyiK9flRH5gVJApsLam7zCo60LQUheDXAXFeeRIFEhnAH6zl7gxhV7w
Ar4/HhD68gGFjJOtBOR1ResYaQ8VPVDtvL67u2yTxqiVV/HgiZkW7zJFFgRFxOAO
BcMaPmTUxpVYFPaAZzFwH5V92TQ9bubyDxPVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUIWgwkX6LkeMa3h5I6cUW1Ukf2KYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lXZ3drWDZMa2VNYTNoNUk2
Y1VXMVVrZjJLWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
w7wwDQYJKoZIhvcNAQELBQADggEBABcDEnAo5aZx2szJ8S5EO/Ltti5Hek9bae5X
0zAdi6Dkb11EJkASBEhEAOpbz0Tg00wJlXbsrTWxc3g6ra2VxZGFPfuQf9IGlEhL
DjwBabPD4Id8SvLUTebYY+AVpuYV/3m8D4pPZHj+TrQlnvpg+SRZWOh/eqEIkKp2
gVkCJf5NaUXspVj2nsiViRqy08Q3oJiZk1Kx9OD3wFKPSW2bUsPeHSt04D52UH/0
kz/PoQmGuTQhPw2fzTriqj+gccoCCrOpKi6JA7Jgkb3hhj4OB3asQhYK8JlXlbYX
sDk9KyOTBtuCVaAgUECVFkVZxk1dBhJX+59DdCqNs9kavK1jAu8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:35 2025 by rpki-client