Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OJnLVm4pIlWOpKBBFByQjpwHPbQ.roa
File: OJnLVm4pIlWOpKBBFByQjpwHPbQ.roa (raw, json)
Hash identifier: aiJiCfg9R6cqPKVJO6O3ye54NjLn87PO9I/3VVIv+fQ=
Subject key identifier: 38:99:CB:56:6E:29:22:55:8E:A4:A0:41:14:1C:90:8E:9C:07:3D:B4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F02
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OJnLVm4pIlWOpKBBFByQjpwHPbQ.roa
Signing time: Tue 29 Sep 2020 09:56:24 +0000
ROA not before: Tue 29 Sep 2020 09:56:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3842 (0xf02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:24 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3899CB566E2922558EA4A041141C908E9C073DB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:6f:20:5f:7e:10:d5:f1:90:d0:6b:96:9c:
9b:6b:41:95:95:37:43:85:9b:8c:e6:f0:38:1c:0e:
1f:7b:98:7d:bf:bb:d2:e4:a0:38:4b:bf:31:7a:56:
66:37:06:3d:2d:83:4a:91:af:8a:74:57:f4:a4:6b:
85:34:92:de:98:1d:3d:f7:5c:e5:d9:6c:84:3b:24:
27:f9:f9:49:39:86:6d:45:24:9f:de:fd:25:26:c2:
2f:d0:c1:80:4a:08:dd:cb:69:f2:ae:66:8f:c1:ef:
a2:60:24:ad:17:29:f0:3c:48:8b:36:89:2f:13:49:
a1:f8:47:94:f8:71:39:f7:74:7c:0f:59:0d:36:15:
9b:4c:b1:b9:7b:6d:a4:c6:8d:d3:1c:e4:59:86:29:
e1:d6:d0:64:62:53:c6:23:dc:7a:c2:bf:aa:60:78:
79:e7:8f:12:7e:ac:54:9b:57:95:b7:49:a8:e2:26:
9e:d7:8f:ff:1b:10:1b:be:79:3c:f1:69:cb:71:f5:
3e:23:1a:77:06:f5:b5:59:ad:42:30:f8:26:4c:48:
dc:d2:f2:da:31:02:e4:48:10:11:98:52:87:ec:c4:
7e:76:5e:bd:8f:79:75:a8:62:68:68:3e:5f:99:0d:
29:f0:b0:6f:38:ba:b8:9a:21:a4:e0:0f:4c:a6:6d:
03:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:99:CB:56:6E:29:22:55:8E:A4:A0:41:14:1C:90:8E:9C:07:3D:B4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OJnLVm4pIlWOpKBBFByQjpwHPbQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.96.0/21
Signature Algorithm: sha256WithRSAEncryption
67:40:0d:ff:16:a3:84:b7:83:60:82:32:13:31:a7:d5:8f:d4:
d0:e8:7c:60:1b:79:ae:07:bc:6c:c7:51:92:8d:bb:c2:b6:94:
20:a3:8c:bd:ab:e7:b0:5b:fa:d0:2a:c3:62:6d:06:4e:3a:e7:
2c:8a:84:2e:b6:53:1c:2a:a3:b2:93:4f:58:54:a3:df:24:bd:
c6:28:31:6f:2b:54:b1:45:f0:52:03:d9:b1:97:67:ab:ed:92:
33:a1:97:61:f7:11:bc:4b:31:c9:54:5b:52:34:94:99:ed:71:
50:f9:9d:1f:98:59:c0:2c:5c:51:29:d6:5d:46:c1:8b:3c:b4:
61:0a:74:76:03:3c:e7:dd:fe:f6:14:d2:fb:5f:0a:b9:0f:60:
57:6f:20:4e:34:1e:4b:2f:3e:8c:04:e9:3a:ca:65:ac:62:a7:
9b:f3:9c:77:a5:27:fc:f0:61:7b:aa:41:6f:88:f4:b1:d4:b4:
cb:95:f9:b4:56:13:21:f1:4a:83:8c:45:15:2d:a1:78:1f:4f:
30:f6:b6:16:e2:26:a9:10:3b:64:49:28:20:e3:bb:dc:55:77:
68:18:16:c9:e1:5a:8a:05:5f:eb:c8:3b:d0:99:52:be:57:cc:
8c:1f:d1:9d:59:f9:b1:23:5d:c4:a9:3c:ba:69:29:ef:47:ce:
8c:b7:91:ea
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDwIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MjRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM4OTlDQjU2NkUyOTIy
NTU4RUE0QTA0MTE0MUM5MDhFOUMwNzNEQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrxW8gX34Q1fGQ0GuWnJtrQZWVN0OFm4zm8DgcDh97mH2/u9Lk
oDhLvzF6VmY3Bj0tg0qRr4p0V/Ska4U0kt6YHT33XOXZbIQ7JCf5+Uk5hm1FJJ/e
/SUmwi/QwYBKCN3LafKuZo/B76JgJK0XKfA8SIs2iS8TSaH4R5T4cTn3dHwPWQ02
FZtMsbl7baTGjdMc5FmGKeHW0GRiU8Yj3HrCv6pgeHnnjxJ+rFSbV5W3SajiJp7X
j/8bEBu+eTzxactx9T4jGncG9bVZrUIw+CZMSNzS8toxAuRIEBGYUofsxH52Xr2P
eXWoYmhoPl+ZDSnwsG84uriaIaTgD0ymbQPbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUOJnLVm4pIlWOpKBBFByQjpwHPbQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09KbkxWbTRwSWxXT3BLQkJG
QnlRanB3SFBiUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wmAwDQYJKoZIhvcNAQELBQADggEBAGdADf8Wo4S3g2CCMhMxp9WP1NDofGAbea4H
vGzHUZKNu8K2lCCjjL2r57Bb+tAqw2JtBk465yyKhC62Uxwqo7KTT1hUo98kvcYo
MW8rVLFF8FID2bGXZ6vtkjOhl2H3EbxLMclUW1I0lJntcVD5nR+YWcAsXFEp1l1G
wYs8tGEKdHYDPOfd/vYU0vtfCrkPYFdvIE40HksvPowE6TrKZaxip5vznHelJ/zw
YXuqQW+I9LHUtMuV+bRWEyHxSoOMRRUtoXgfTzD2thbiJqkQO2RJKCDju9xVd2gY
FsnhWooFX+vIO9CZUr5XzIwf0Z1Z+bEjXcSpPLppKe9Hzoy3keo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org