Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q8i1kHPvpNOCFCugjGD4saxlNJw.roa
File: Q8i1kHPvpNOCFCugjGD4saxlNJw.roa (raw, json)
Hash identifier: VSj4K2djwiWDlVYqaPBwKzEprDWwY2rhqqBXYwBlFZw=
Subject key identifier: 43:C8:B5:90:73:EF:A4:D3:82:14:2B:A0:8C:60:F8:B1:AC:65:34:9C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E6F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q8i1kHPvpNOCFCugjGD4saxlNJw.roa
Signing time: Tue 29 Sep 2020 09:55:43 +0000
ROA not before: Tue 29 Sep 2020 09:55:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3695 (0xe6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=43C8B59073EFA4D382142BA08C60F8B1AC65349C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:f0:f7:b2:8d:9f:b3:c4:5b:a1:9e:83:5b:
eb:1b:8d:20:da:a0:e4:f3:46:85:1c:3b:e8:a0:11:
9f:be:39:73:a6:e5:0e:7f:0c:7b:02:72:b8:3b:7d:
04:63:44:6b:6e:f0:ed:9b:4a:6a:28:d1:63:34:ac:
c9:e2:f9:db:9b:94:2a:b2:f2:c8:99:c6:f5:b7:11:
98:2a:5c:88:75:dc:0a:9f:12:aa:5e:26:1f:a5:00:
d7:5e:6f:71:db:43:64:7c:79:16:e5:eb:ed:d2:80:
01:6b:cc:f8:83:6c:fd:c9:54:4b:b0:1a:55:69:d1:
88:e5:40:ae:28:a1:80:3f:7d:9d:5b:fd:71:39:f6:
3a:82:d1:cf:00:32:70:b5:19:5d:46:21:de:9b:8a:
bb:bb:01:fa:75:31:14:fc:7b:16:ab:d0:f8:07:af:
e0:a8:45:a7:0e:8c:a9:e4:13:15:3c:a4:4d:70:d0:
27:96:1e:03:4c:91:b1:ce:78:ab:bf:b8:65:3d:d7:
0a:1e:b6:13:34:c7:bc:47:00:60:9a:4a:ae:8c:83:
3a:b1:eb:35:73:33:c2:53:d5:c8:01:cf:97:6e:d2:
eb:97:2e:5a:3b:07:0d:11:cb:7e:29:2e:0a:b4:ab:
57:f1:de:8b:e4:6d:4b:c0:db:f9:57:54:e7:8c:80:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C8:B5:90:73:EF:A4:D3:82:14:2B:A0:8C:60:F8:B1:AC:65:34:9C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q8i1kHPvpNOCFCugjGD4saxlNJw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.80.0/21
Signature Algorithm: sha256WithRSAEncryption
59:83:fc:c3:cd:df:f4:42:8b:f1:0d:a8:d8:b3:75:17:8c:78:
99:df:0d:9c:25:73:e8:95:89:94:f8:71:e7:a9:e7:37:24:73:
6d:6c:da:27:78:25:d5:75:ee:bc:1f:7d:56:a6:06:2c:5a:b5:
c8:bb:b9:5c:3e:f6:ca:70:b0:23:b8:04:59:8d:64:46:a3:83:
79:77:70:7d:4b:7b:3f:d6:1c:9b:1e:6f:75:8a:3b:38:af:db:
13:cb:db:03:fa:ad:9c:13:57:03:07:a7:cc:3d:0a:e3:0b:ac:
c0:57:b1:88:fa:df:06:72:0d:b7:4c:10:5f:16:e5:f8:90:59:
db:c9:1c:19:94:f7:e0:18:c0:7d:ca:25:10:84:6f:0f:52:a8:
a2:b9:a5:b6:93:17:1d:b1:a7:6f:f5:17:7a:68:7c:d4:06:22:
19:35:ba:2e:c6:45:b6:a8:7f:1a:86:ef:c0:51:e8:3f:7b:0e:
43:13:e4:5e:4f:74:c1:04:cf:3a:31:83:4b:ad:95:c4:2d:dc:
44:72:13:01:80:0d:eb:e4:88:cf:b7:e1:31:d0:63:da:73:95:
ef:35:ce:78:d7:f0:2d:f7:9a:69:29:00:b3:ff:a8:7c:03:2b:
37:53:27:54:22:e3:64:65:15:8a:b2:fb:6a:59:02:01:80:13:
40:90:8e:9a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1NDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDQzQzhCNTkwNzNFRkE0
RDM4MjE0MkJBMDhDNjBGOEIxQUM2NTM0OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5bfD3so2fs8RboZ6DW+sbjSDaoOTzRoUcO+igEZ++OXOm5Q5/
DHsCcrg7fQRjRGtu8O2bSmoo0WM0rMni+dublCqy8siZxvW3EZgqXIh13AqfEqpe
Jh+lANdeb3HbQ2R8eRbl6+3SgAFrzPiDbP3JVEuwGlVp0YjlQK4ooYA/fZ1b/XE5
9jqC0c8AMnC1GV1GId6biru7Afp1MRT8exar0PgHr+CoRacOjKnkExU8pE1w0CeW
HgNMkbHOeKu/uGU91woethM0x7xHAGCaSq6Mgzqx6zVzM8JT1cgBz5du0uuXLlo7
Bw0Ry34pLgq0q1fx3ovkbUvA2/lXVOeMgODtAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUQ8i1kHPvpNOCFCugjGD4saxlNJwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1E4aTFrSFB2cE5PQ0ZDdWdq
R0Q0c2F4bE5Kdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w1AwDQYJKoZIhvcNAQELBQADggEBAFmD/MPN3/RCi/ENqNizdReMeJnfDZwlc+iV
iZT4ceep5zckc21s2id4JdV17rwffVamBixatci7uVw+9spwsCO4BFmNZEajg3l3
cH1Lez/WHJseb3WKOziv2xPL2wP6rZwTVwMHp8w9CuMLrMBXsYj63wZyDbdMEF8W
5fiQWdvJHBmU9+AYwH3KJRCEbw9SqKK5pbaTFx2xp2/1F3pofNQGIhk1ui7GRbao
fxqG78BR6D97DkMT5F5PdMEEzzoxg0utlcQt3ERyEwGADevkiM+34THQY9pzle81
znjX8C33mmkpALP/qHwDKzdTJ1Qi42RlFYqy+2pZAgGAE0CQjpo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org