Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L-8HERRbvzZiPXlFGyGTNJZZKFc.roa
File: L-8HERRbvzZiPXlFGyGTNJZZKFc.roa (raw, json)
Hash identifier: 3HdXMBoG66vh6hUWZbbTA5BozpNiQF37eu1L5U+N4l8=
Subject key identifier: 2F:EF:07:11:14:5B:BF:36:62:3D:79:45:1B:21:93:34:96:59:28:57
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18F1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L-8HERRbvzZiPXlFGyGTNJZZKFc.roa
Signing time: Sun 07 Feb 2021 12:55:24 +0000
ROA not before: Sun 07 Feb 2021 12:55:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.8.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6385 (0x18f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:55:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2FEF0711145BBF36623D79451B21933496592857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:c9:8c:96:e4:6a:c2:92:d4:48:c4:fb:d8:
2f:2e:d6:a9:17:39:d5:35:67:e9:2c:26:64:6d:61:
6b:ef:fe:16:6c:9b:8c:cc:81:88:c9:67:83:e5:7e:
23:e0:4e:11:8b:6d:71:24:49:d3:3d:01:60:b6:28:
b5:63:05:1d:11:c2:3c:27:3a:e7:ae:16:b6:4e:76:
ad:f6:fb:94:80:93:38:e6:ec:c9:7c:3f:f7:e1:91:
b3:c1:db:f8:81:2b:0d:49:34:15:26:85:00:96:b3:
22:47:ea:63:4b:ee:ea:75:cc:ce:e3:08:04:b0:14:
d8:90:40:4c:c2:7f:6e:6f:0d:b9:bc:0c:0e:c6:ca:
49:02:a2:8f:95:3a:a3:64:28:d4:3e:ee:8e:c6:42:
b7:cd:70:fa:cd:c5:ea:87:89:65:12:3a:45:43:c3:
c1:ae:b3:d0:c3:41:c8:17:f0:55:a6:06:24:d0:5b:
2d:25:11:83:d3:25:00:5e:bf:29:dd:a0:66:ef:7b:
9e:8a:ad:da:ef:48:f3:13:5b:4a:69:d1:53:70:bc:
20:2e:7f:01:d3:8e:07:36:8f:23:91:bf:46:62:72:
45:5c:cc:27:91:31:7d:f7:d2:b2:c6:b9:f8:cd:ba:
7a:36:cf:76:e1:00:60:b7:57:82:ed:45:6a:cb:15:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EF:07:11:14:5B:BF:36:62:3D:79:45:1B:21:93:34:96:59:28:57
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L-8HERRbvzZiPXlFGyGTNJZZKFc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.8.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:ed:8c:ae:54:0d:1c:4b:ae:02:70:81:59:4c:75:bd:a5:49:
46:08:e4:5b:68:3f:61:61:78:31:a9:85:7c:9f:39:e2:ad:b0:
aa:34:40:42:7b:df:da:64:8e:77:55:b7:bb:3f:91:8d:60:05:
66:13:a3:0f:40:f3:71:3b:0e:b3:4a:bc:ee:77:47:76:64:d7:
60:93:2a:77:8d:2e:12:03:2f:e1:30:f2:3b:2e:79:11:c7:e7:
39:2f:f3:ce:8f:a6:f2:4b:8b:d4:5b:10:f9:97:48:aa:69:ed:
06:0d:6f:83:b4:62:f2:3f:f9:68:b8:80:2f:5c:c0:c8:b8:0e:
dc:fb:29:71:37:4b:2e:f5:79:1e:17:e5:0e:3b:48:87:70:6a:
00:a9:55:c3:57:35:81:36:de:5b:e6:ac:b8:92:ab:97:89:62:
d2:03:4e:01:7f:55:0c:1f:13:54:f9:ef:a2:20:a3:a6:81:96:
e6:2a:b9:cf:0a:f9:b1:6d:ca:42:7d:a8:4e:82:41:a9:49:74:
cd:2d:eb:cc:cd:34:1c:e1:02:a9:6e:d4:84:07:8d:ef:5d:a0:
78:24:be:a5:e2:c8:32:39:00:fa:ad:36:c2:55:3f:39:b1:7b:
ae:96:2c:68:65:ce:57:40:61:c4:38:15:bd:64:e4:26:39:b0:
be:67:ef:e7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjU1MjRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDJGRUYwNzExMTQ1QkJG
MzY2MjNENzk0NTFCMjE5MzM0OTY1OTI4NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFFMmMluRqwpLUSMT72C8u1qkXOdU1Z+ksJmRtYWvv/hZsm4zM
gYjJZ4PlfiPgThGLbXEkSdM9AWC2KLVjBR0RwjwnOueuFrZOdq32+5SAkzjm7Ml8
P/fhkbPB2/iBKw1JNBUmhQCWsyJH6mNL7up1zM7jCASwFNiQQEzCf25vDbm8DA7G
ykkCoo+VOqNkKNQ+7o7GQrfNcPrNxeqHiWUSOkVDw8Gus9DDQcgX8FWmBiTQWy0l
EYPTJQBevyndoGbve56KrdrvSPMTW0pp0VNwvCAufwHTjgc2jyORv0ZickVczCeR
MX330rLGufjNuno2z3bhAGC3V4LtRWrLFaTZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUL+8HERRbvzZiPXlFGyGTNJZZKFcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0wtOEhFUlJidnpaaVBYbEZH
eUdUTkpaWktGYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7
wwgwDQYJKoZIhvcNAQELBQADggEBAEvtjK5UDRxLrgJwgVlMdb2lSUYI5FtoP2Fh
eDGphXyfOeKtsKo0QEJ739pkjndVt7s/kY1gBWYTow9A83E7DrNKvO53R3Zk12CT
KneNLhIDL+Ew8jsueRHH5zkv886PpvJLi9RbEPmXSKpp7QYNb4O0YvI/+Wi4gC9c
wMi4Dtz7KXE3Sy71eR4X5Q47SIdwagCpVcNXNYE23lvmrLiSq5eJYtIDTgF/VQwf
E1T576Igo6aBluYquc8K+bFtykJ9qE6CQalJdM0t68zNNBzhAqlu1IQHje9doHgk
vqXiyDI5APqtNsJVPzmxe66WLGhlzldAYcQ4Fb1k5CY5sL5n7+c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org