Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U6ivCbRMBLIGNqpWIkoOYtMu9uw.roa
File: U6ivCbRMBLIGNqpWIkoOYtMu9uw.roa (raw, json)
Hash identifier: OGkPqg8i9YA26lCtJ4PhZa3+UxXFMGIIlmkFtIoC/RQ=
Subject key identifier: 53:A8:AF:09:B4:4C:04:B2:06:36:AA:56:22:4A:0E:62:D3:2E:F6:EC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 167D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U6ivCbRMBLIGNqpWIkoOYtMu9uw.roa
Signing time: Sun 07 Feb 2021 12:10:48 +0000
ROA not before: Sun 07 Feb 2021 12:10:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5757 (0x167d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:10:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=53A8AF09B44C04B20636AA56224A0E62D32EF6EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:15:f3:d4:24:db:e7:c4:97:31:00:dd:91:
d6:a4:df:8e:24:5c:47:f2:bf:05:7e:f5:05:b9:0b:
5f:df:2a:9e:88:13:e4:6e:60:5b:0c:d5:fc:a9:e3:
e8:d6:a9:b4:9c:74:a5:36:9c:2e:ff:fa:08:5a:52:
6d:58:1d:ad:bc:fd:18:e4:44:da:c6:8a:68:a8:70:
8b:37:2b:c7:54:b8:da:51:dd:24:02:09:3c:d9:16:
90:a8:e6:db:43:e4:6d:92:a6:2e:06:5a:12:f8:9c:
22:90:a9:54:84:bc:22:a0:99:bf:c7:fe:1a:59:6d:
18:3f:f2:45:52:78:2a:a1:9c:82:5e:54:bb:fb:7a:
6a:c2:82:41:10:b0:19:25:c4:71:2e:68:56:43:ef:
cb:6c:3a:c8:cb:85:2e:97:6c:76:b8:a7:1d:22:0c:
de:26:6a:6c:c1:56:ea:84:23:3c:9b:1d:58:5e:0a:
4a:59:79:92:68:d2:e4:78:da:6c:db:3d:ba:93:6e:
64:23:d2:81:31:ac:ef:26:5f:db:53:75:08:be:80:
53:89:ad:82:18:e0:1e:9b:fe:cc:1e:9a:ee:a2:ff:
e6:44:62:d1:39:32:7f:82:b3:da:bd:7c:fb:58:c1:
76:e5:47:6c:55:43:e0:b0:a0:26:01:2d:6a:86:32:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A8:AF:09:B4:4C:04:B2:06:36:AA:56:22:4A:0E:62:D3:2E:F6:EC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U6ivCbRMBLIGNqpWIkoOYtMu9uw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.182.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:6a:26:ab:12:2d:07:72:f8:ef:36:30:b0:f2:9a:55:76:da:
37:e7:9a:71:93:89:07:85:75:08:71:38:27:12:63:9e:dd:04:
97:7f:f3:c7:c6:00:fc:c1:1d:07:1d:5a:11:a3:4c:8d:20:9e:
d3:e6:df:2e:4e:5f:35:2f:64:47:43:8d:24:2c:66:cf:e2:e1:
7f:57:ec:4e:93:12:e7:d1:d6:ee:89:56:9e:77:40:df:3d:fa:
49:eb:f1:dd:b6:3e:43:4e:0d:b5:4c:32:e5:6d:13:8c:c4:3b:
72:1e:5c:22:87:3f:29:17:61:f1:cd:4e:9e:4d:df:41:5d:4b:
e1:2d:99:f3:aa:ad:04:96:f6:e0:b4:5a:66:d8:a0:19:b7:1f:
ac:39:a0:a5:14:c1:0c:98:32:6a:4f:ee:1b:b0:6d:1c:89:32:
ac:46:52:66:a0:17:ee:5e:77:42:90:07:bb:ef:36:2b:9d:2f:
6e:cc:24:3b:33:b6:7a:83:e7:4d:49:42:eb:4f:a6:51:ac:b4:
56:a0:93:1c:b6:de:4f:1c:b9:d4:c1:11:d7:3d:b0:e2:62:4c:
d6:bc:6f:7f:c9:5a:6d:47:e0:1d:7a:02:3f:19:82:33:66:25:
a4:ae:b9:4f:fd:78:01:2a:39:cc:79:6a:6e:d4:f7:e6:e1:a8:
b0:b3:1d:d1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFn0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjEwNDhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDUzQThBRjA5QjQ0QzA0
QjIwNjM2QUE1NjIyNEEwRTYyRDMyRUY2RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOTBXz1CTb58SXMQDdkdak344kXEfyvwV+9QW5C1/fKp6IE+Ru
YFsM1fyp4+jWqbScdKU2nC7/+ghaUm1YHa28/RjkRNrGimiocIs3K8dUuNpR3SQC
CTzZFpCo5ttD5G2Spi4GWhL4nCKQqVSEvCKgmb/H/hpZbRg/8kVSeCqhnIJeVLv7
emrCgkEQsBklxHEuaFZD78tsOsjLhS6XbHa4px0iDN4mamzBVuqEIzybHVheCkpZ
eZJo0uR42mzbPbqTbmQj0oExrO8mX9tTdQi+gFOJrYIY4B6b/swemu6i/+ZEYtE5
Mn+Cs9q9fPtYwXblR2xVQ+CwoCYBLWqGMgH1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUU6ivCbRMBLIGNqpWIkoOYtMu9uwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1U2aXZDYlJNQkxJR05xcFdJ
a29PWXRNdTl1dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
w7YwDQYJKoZIhvcNAQELBQADggEBAItqJqsSLQdy+O82MLDymlV22jfnmnGTiQeF
dQhxOCcSY57dBJd/88fGAPzBHQcdWhGjTI0gntPm3y5OXzUvZEdDjSQsZs/i4X9X
7E6TEufR1u6JVp53QN89+knr8d22PkNODbVMMuVtE4zEO3IeXCKHPykXYfHNTp5N
30FdS+EtmfOqrQSW9uC0WmbYoBm3H6w5oKUUwQyYMmpP7huwbRyJMqxGUmagF+5e
d0KQB7vvNiudL27MJDsztnqD501JQutPplGstFagkxy23k8cudTBEdc9sOJiTNa8
b3/JWm1H4B16Aj8ZgjNmJaSuuU/9eAEqOcx5am7U9+bhqLCzHdE=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:30 2023 by rpki-client on console-fra.rpki-client.org