Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RRE4epPUzpn1O3o8fMHC6qvrpzQ.roa
File: RRE4epPUzpn1O3o8fMHC6qvrpzQ.roa (raw, json)
Hash identifier: 5/cF4pLnGsx6VskjNUVQt+PbVkdVe5scXSYfRQaVJTs=
Subject key identifier: 45:11:38:7A:93:D4:CE:99:F5:3B:7A:3C:7C:C1:C2:EA:AB:EB:A7:34
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E29
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RRE4epPUzpn1O3o8fMHC6qvrpzQ.roa
Signing time: Tue 29 Sep 2020 09:55:24 +0000
ROA not before: Tue 29 Sep 2020 09:55:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3625 (0xe29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:24 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4511387A93D4CE99F53B7A3C7CC1C2EAABEBA734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:69:84:67:bf:c3:06:29:50:39:2b:3c:74:fa:
7e:5a:6a:1e:70:3b:75:e1:f4:26:ca:19:94:42:6f:
42:af:40:e3:4f:54:92:10:ba:98:79:47:a3:1e:1f:
50:e0:75:4b:77:28:51:50:05:30:dd:e5:bc:25:04:
33:fa:8b:4b:0f:96:46:a7:f4:19:0f:a6:62:4f:a7:
32:0d:41:f3:a0:00:64:2a:2e:49:51:18:3c:bb:2e:
a0:b1:15:74:66:a8:6d:c5:40:0d:c6:17:a7:15:27:
95:be:e1:6e:91:d4:bd:d9:05:b2:8a:9e:c3:be:a8:
0c:7f:25:f7:64:ec:58:c1:aa:3d:fa:64:4a:2f:0b:
22:ef:63:b7:e8:9b:2c:cc:da:e8:8f:33:b2:bc:f0:
36:38:c8:a7:72:2a:71:76:22:4d:89:b0:b0:02:08:
0a:5d:80:90:81:86:2d:60:24:2d:25:12:18:4d:70:
b2:86:6b:25:9c:bd:30:7a:de:84:06:19:1a:de:9c:
c9:3b:71:91:ac:79:c9:62:f2:c7:cb:70:18:6b:2f:
22:0e:e3:3d:f6:a7:4c:40:02:01:55:1d:30:4b:22:
c2:9d:55:88:9f:7a:ec:54:60:05:40:c5:55:41:b6:
0a:0b:66:2f:61:2f:b0:2c:f0:b5:08:db:ea:ed:dc:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:11:38:7A:93:D4:CE:99:F5:3B:7A:3C:7C:C1:C2:EA:AB:EB:A7:34
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RRE4epPUzpn1O3o8fMHC6qvrpzQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.136.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:bc:42:fb:65:b3:89:d4:17:a3:15:84:68:d8:34:2c:18:eb:
d4:5f:6c:e4:b7:9c:23:fb:02:e4:cf:c2:81:07:43:ea:8a:fd:
15:c3:bc:8c:42:0a:0f:c2:5a:d5:0e:e6:ca:f4:aa:7a:4e:b7:
ba:4f:11:de:f8:b2:eb:39:67:66:00:5f:cb:57:21:4d:ae:9f:
be:26:84:a1:76:8c:8d:28:1c:f3:e4:7a:6d:65:9f:b2:9e:7d:
71:76:5e:89:89:fc:e9:99:35:2f:4a:6d:99:32:cc:5f:fd:2a:
a4:28:52:0d:59:cd:4f:b5:2f:8c:7a:91:d4:cd:60:8b:6e:91:
35:1a:c9:3f:0b:c4:c5:6d:79:6b:5c:b6:0d:9a:09:b1:9c:c0:
af:1a:ba:0a:10:c8:0e:18:f6:37:59:33:f5:f6:50:6a:49:d3:
8c:3d:1c:a6:ec:c7:42:0b:e8:a5:4f:47:c1:10:31:87:50:9d:
c5:22:60:53:e6:92:66:6b:9f:35:41:3a:41:8f:13:c7:af:45:
9f:22:1e:24:4a:ed:14:12:6f:8f:a2:99:fd:01:07:a2:60:60:
60:ad:97:b7:d9:b1:09:fe:57:ae:03:fa:62:59:f6:7f:3b:84:
ac:23:c1:d0:f0:12:b3:de:dd:01:65:28:67:b4:8e:5b:40:88:
5d:d4:6d:c8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDikwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MjRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDQ1MTEzODdBOTNENENF
OTlGNTNCN0EzQzdDQzFDMkVBQUJFQkE3MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkaYRnv8MGKVA5Kzx0+n5aah5wO3Xh9CbKGZRCb0KvQONPVJIQ
uph5R6MeH1DgdUt3KFFQBTDd5bwlBDP6i0sPlkan9BkPpmJPpzINQfOgAGQqLklR
GDy7LqCxFXRmqG3FQA3GF6cVJ5W+4W6R1L3ZBbKKnsO+qAx/Jfdk7FjBqj36ZEov
CyLvY7fomyzM2uiPM7K88DY4yKdyKnF2Ik2JsLACCApdgJCBhi1gJC0lEhhNcLKG
ayWcvTB63oQGGRrenMk7cZGsecli8sfLcBhrLyIO4z32p0xAAgFVHTBLIsKdVYif
euxUYAVAxVVBtgoLZi9hL7As8LUI2+rt3FP9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQURRE4epPUzpn1O3o8fMHC6qvrpzQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1JSRTRlcFBVenBuMU8zbzhm
TUhDNnF2cnB6US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wogwDQYJKoZIhvcNAQELBQADggEBAEq8Qvtls4nUF6MVhGjYNCwY69RfbOS3nCP7
AuTPwoEHQ+qK/RXDvIxCCg/CWtUO5sr0qnpOt7pPEd74sus5Z2YAX8tXIU2un74m
hKF2jI0oHPPkem1ln7KefXF2XomJ/OmZNS9KbZkyzF/9KqQoUg1ZzU+1L4x6kdTN
YItukTUayT8LxMVteWtctg2aCbGcwK8augoQyA4Y9jdZM/X2UGpJ04w9HKbsx0IL
6KVPR8EQMYdQncUiYFPmkmZrnzVBOkGPE8evRZ8iHiRK7RQSb4+imf0BB6JgYGCt
l7fZsQn+V64D+mJZ9n87hKwjwdDwErPe3QFlKGe0jltAiF3Ubcg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:32 2025 by rpki-client