Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QdSMLoEibvdaNjhjAUGLwFbVnDU.roa
File: QdSMLoEibvdaNjhjAUGLwFbVnDU.roa (raw, json)
Hash identifier: Fg5BwVqAcyV22kNGB+yUaEPU7U1xjCx+5lzCX2yxpgI=
Subject key identifier: 41:D4:8C:2E:81:22:6E:F7:5A:36:38:63:01:41:8B:C0:56:D5:9C:35
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F50
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QdSMLoEibvdaNjhjAUGLwFbVnDU.roa
Signing time: Tue 29 Sep 2020 09:56:47 +0000
ROA not before: Tue 29 Sep 2020 09:56:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3920 (0xf50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:47 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=41D48C2E81226EF75A36386301418BC056D59C35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d4:f8:d7:71:12:a4:1d:7d:a0:7e:63:52:ab:
3d:1b:f6:a4:3e:22:62:3d:18:52:ee:da:20:3a:04:
6f:e3:a6:aa:ac:4e:32:c4:99:16:77:f2:5d:5f:a0:
1b:20:61:fe:1e:2c:1a:74:2f:40:b9:5b:b7:df:0c:
3d:e7:ad:a3:df:25:f6:82:bf:40:ad:03:ea:ba:19:
38:d7:98:c5:36:77:df:48:8f:e0:62:51:60:4f:a1:
1c:28:4f:e1:a3:79:aa:8f:7f:04:d7:e3:4a:6e:17:
e4:aa:68:6f:52:19:03:fe:ce:cf:b2:69:1b:85:19:
cc:78:7f:b9:31:f4:db:a4:41:c0:f0:88:f0:63:c4:
e7:e3:e4:e6:ed:f3:e9:66:5a:7f:61:32:20:87:0e:
e1:6d:54:b4:f3:28:77:f8:4e:f8:9a:ad:2b:60:ae:
5d:3d:10:26:5d:bc:f8:18:61:f4:e5:a2:39:f4:08:
b6:9b:b4:9e:5e:bd:29:5a:d5:38:be:25:b6:9a:d9:
72:f8:24:bf:fc:4f:3f:a7:da:c8:ca:5b:c0:1a:c1:
a5:66:fa:a6:22:18:f6:be:7c:7d:6f:50:0c:f8:d2:
01:26:80:76:a1:fe:da:19:fb:50:e7:d8:41:b1:ef:
a8:4e:6e:81:90:ec:bb:62:40:51:8d:f5:f3:8a:9e:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D4:8C:2E:81:22:6E:F7:5A:36:38:63:01:41:8B:C0:56:D5:9C:35
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QdSMLoEibvdaNjhjAUGLwFbVnDU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.168.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:9d:b2:85:b0:5f:b2:f3:19:a5:2b:a0:16:68:79:fd:99:f5:
1f:5d:66:6a:0e:e4:9f:70:cd:30:75:e6:4c:fa:51:66:85:b7:
3a:6c:7c:ef:ee:83:de:c7:24:04:6b:9f:28:6f:8b:2d:0b:97:
c8:64:da:04:fc:a8:99:26:cd:f4:fa:82:27:5d:c0:87:f1:3c:
45:fe:d5:27:af:b7:75:21:1e:dc:ce:eb:9f:61:a5:f2:be:be:
e6:24:e1:35:e5:98:7c:47:9a:ae:21:2c:9c:6b:36:3f:cb:59:
9d:df:56:f2:4e:d6:1e:59:7b:d5:7e:d9:0a:e1:94:a7:39:0b:
b2:0e:e4:ea:e7:4d:64:5e:96:3a:5d:2d:e2:8a:4b:10:27:f8:
e8:89:c5:5a:85:e8:ab:b2:95:1d:24:60:df:d5:6a:60:2b:c1:
32:69:15:09:7b:7a:4d:1f:9c:97:9f:39:d6:fd:60:b0:d2:c0:
a0:e7:9c:f7:3d:e4:f2:60:3a:4f:22:0a:ff:4f:97:53:56:d8:
b6:73:e5:3f:fd:c4:bd:9a:dc:29:c1:05:e0:22:75:80:df:3d:
af:30:e3:14:4d:83:69:42:2a:2c:94:45:5f:3d:17:f7:68:1a:
4e:24:d6:a0:81:e6:38:39:c5:b4:f2:b9:82:b1:dd:3f:e5:e6:
fc:b1:94:e1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD1AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2NDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDQxRDQ4QzJFODEyMjZF
Rjc1QTM2Mzg2MzAxNDE4QkMwNTZENTlDMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDc1PjXcRKkHX2gfmNSqz0b9qQ+ImI9GFLu2iA6BG/jpqqsTjLE
mRZ38l1foBsgYf4eLBp0L0C5W7ffDD3nraPfJfaCv0CtA+q6GTjXmMU2d99Ij+Bi
UWBPoRwoT+GjeaqPfwTX40puF+SqaG9SGQP+zs+yaRuFGcx4f7kx9NukQcDwiPBj
xOfj5Obt8+lmWn9hMiCHDuFtVLTzKHf4TviarStgrl09ECZdvPgYYfTlojn0CLab
tJ5evSla1Ti+Jbaa2XL4JL/8Tz+n2sjKW8AawaVm+qYiGPa+fH1vUAz40gEmgHah
/toZ+1Dn2EGx76hOboGQ7LtiQFGN9fOKnhfjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUQdSMLoEibvdaNjhjAUGLwFbVnDUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FkU01Mb0VpYnZkYU5qaGpB
VUdMd0ZiVm5EVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
w6gwDQYJKoZIhvcNAQELBQADggEBAG+dsoWwX7LzGaUroBZoef2Z9R9dZmoO5J9w
zTB15kz6UWaFtzpsfO/ug97HJARrnyhviy0Ll8hk2gT8qJkmzfT6giddwIfxPEX+
1Sevt3UhHtzO659hpfK+vuYk4TXlmHxHmq4hLJxrNj/LWZ3fVvJO1h5Ze9V+2Qrh
lKc5C7IO5OrnTWReljpdLeKKSxAn+OiJxVqF6KuylR0kYN/VamArwTJpFQl7ek0f
nJefOdb9YLDSwKDnnPc95PJgOk8iCv9Pl1NW2LZz5T/9xL2a3CnBBeAidYDfPa8w
4xRNg2lCKiyURV89F/doGk4k1qCB5jg5xbTyuYKx3T/l5vyxlOE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org