Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JOL7rt0OdWcwAnFIdrl49HxNKi0.roa
File: JOL7rt0OdWcwAnFIdrl49HxNKi0.roa (raw, json)
Hash identifier: Ko98b7xY5jfKesbSK6diNLgNCpMBooTanPDh+PdJ96k=
Subject key identifier: 24:E2:FB:AE:DD:0E:75:67:30:02:71:48:76:B9:78:F4:7C:4D:2A:2D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1653
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JOL7rt0OdWcwAnFIdrl49HxNKi0.roa
Signing time: Sun 07 Feb 2021 12:09:43 +0000
ROA not before: Sun 07 Feb 2021 12:09:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5715 (0x1653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:09:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=24E2FBAEDD0E75673002714876B978F47C4D2A2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:f4:d0:66:d0:e2:91:e4:73:f7:9c:2a:57:
69:59:e3:7b:1b:65:4e:d6:79:73:4c:db:ab:e7:b1:
88:f1:7d:13:95:10:fb:ef:62:d4:00:98:5a:9f:7c:
47:ee:11:6b:3e:88:01:51:65:5d:71:6f:fd:66:19:
22:55:f0:f0:56:f2:f1:f6:54:c1:57:ef:a7:0e:50:
b7:2a:9d:9c:93:8a:96:58:9d:24:d1:1d:96:39:29:
95:77:d6:5e:10:a9:91:40:29:44:02:e8:a9:0f:d9:
b4:18:f6:7f:0a:e3:18:d7:0f:ae:35:13:ce:63:26:
76:c4:e4:3e:8e:25:a3:6b:55:39:11:ad:b8:9e:8b:
b1:ac:3a:bd:75:eb:50:7b:88:78:9c:54:9b:1a:79:
12:e1:af:59:c7:55:e7:dc:3e:0d:28:75:44:af:bc:
54:ab:97:43:e4:59:45:e9:e1:64:91:15:84:f4:0a:
9d:d0:8a:cd:69:2d:a6:ed:8f:b9:ca:2e:da:2a:29:
57:cd:45:f9:ed:ad:d7:e0:88:a1:9c:24:24:7d:e5:
37:c6:5b:e7:f2:c7:39:63:a3:8c:66:86:11:e5:f0:
cc:09:b6:a2:78:25:9a:3b:9f:19:71:ec:0a:e1:0e:
21:4f:fb:0c:e9:97:8a:8a:e2:6c:37:9e:ea:bf:6f:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E2:FB:AE:DD:0E:75:67:30:02:71:48:76:B9:78:F4:7C:4D:2A:2D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JOL7rt0OdWcwAnFIdrl49HxNKi0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.24.0/21
Signature Algorithm: sha256WithRSAEncryption
66:37:3c:5a:73:35:16:41:79:f8:1c:57:19:2b:c2:6d:43:c3:
27:b1:4f:a5:d3:b4:06:09:8f:b7:c1:6f:ec:c3:8c:42:e1:3b:
ef:b3:a4:c2:71:81:e9:51:c8:93:5e:b7:c1:e8:56:1c:f3:a6:
b7:b3:61:bc:b0:c4:d1:89:b8:00:1a:de:65:83:cc:47:d6:05:
78:a1:e2:70:db:21:2a:35:b8:6b:c1:a1:15:e8:5d:9f:07:15:
7d:46:92:c8:22:8f:85:5b:b0:df:80:38:34:f6:ae:63:32:d9:
25:d8:cd:45:4f:7c:01:75:a0:d9:9e:9b:40:e5:5f:69:f3:ff:
06:00:b2:66:0e:19:a2:c2:ba:54:48:a8:62:f6:fb:7e:30:1e:
01:dc:e2:72:5d:98:d0:72:11:4a:68:ff:a7:0d:88:92:2a:ae:
db:a5:fa:bd:24:f5:a7:79:ae:af:0f:fa:9d:5b:8f:5c:be:06:
68:10:ae:12:20:50:9e:9e:cb:cd:c7:9d:d6:40:14:77:b8:1f:
4a:40:d0:a1:d5:ad:71:51:8f:6c:a8:2a:be:f2:d4:58:dc:70:
dc:72:f3:c6:e0:59:87:69:ef:1f:50:a5:34:0c:16:56:30:00:
15:28:8b:06:8b:c0:a5:2b:4b:5e:67:ef:81:b5:a9:9e:ed:4f:
da:ed:b6:39
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFlMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjA5NDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDI0RTJGQkFFREQwRTc1
NjczMDAyNzE0ODc2Qjk3OEY0N0M0RDJBMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeVPTQZtDikeRz95wqV2lZ43sbZU7WeXNM26vnsYjxfROVEPvv
YtQAmFqffEfuEWs+iAFRZV1xb/1mGSJV8PBW8vH2VMFX76cOULcqnZyTipZYnSTR
HZY5KZV31l4QqZFAKUQC6KkP2bQY9n8K4xjXD641E85jJnbE5D6OJaNrVTkRrbie
i7GsOr1161B7iHicVJsaeRLhr1nHVefcPg0odUSvvFSrl0PkWUXp4WSRFYT0Cp3Q
is1pLabtj7nKLtoqKVfNRfntrdfgiKGcJCR95TfGW+fyxzljo4xmhhHl8MwJtqJ4
JZo7nxlx7ArhDiFP+wzpl4qK4mw3nuq/bxo/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUJOL7rt0OdWcwAnFIdrl49HxNKi0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pPTDdydDBPZFdjd0FuRklk
cmw0OUh4TktpMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wRgwDQYJKoZIhvcNAQELBQADggEBAGY3PFpzNRZBefgcVxkrwm1DwyexT6XTtAYJ
j7fBb+zDjELhO++zpMJxgelRyJNet8HoVhzzprezYbywxNGJuAAa3mWDzEfWBXih
4nDbISo1uGvBoRXoXZ8HFX1Gksgij4VbsN+AODT2rmMy2SXYzUVPfAF1oNmem0Dl
X2nz/wYAsmYOGaLCulRIqGL2+34wHgHc4nJdmNByEUpo/6cNiJIqrtul+r0k9ad5
rq8P+p1bj1y+BmgQrhIgUJ6ey83HndZAFHe4H0pA0KHVrXFRj2yoKr7y1FjccNxy
88bgWYdp7x9QpTQMFlYwABUoiwaLwKUrS15n74G1qZ7tT9rttjk=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:16 2023 by rpki-client on console-ams.rpki-client.org