Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UR9FVhm8x1kmnCFU2I2Mdi_oj9c.roa
File: UR9FVhm8x1kmnCFU2I2Mdi_oj9c.roa (raw, json)
Hash identifier: J6FJItFwWGHJmffPgvf/DMB3eLjfU4Qty2XaooX7CMI=
Subject key identifier: 51:1F:45:56:19:BC:C7:59:26:9C:21:54:D8:8D:8C:76:2F:E8:8F:D7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D26
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UR9FVhm8x1kmnCFU2I2Mdi_oj9c.roa
Signing time: Tue 29 Sep 2020 09:54:15 +0000
ROA not before: Tue 29 Sep 2020 09:54:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3366 (0xd26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:15 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=511F455619BCC759269C2154D88D8C762FE88FD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:fe:04:31:53:28:d7:d4:6e:b3:b7:77:1f:
ed:6b:38:03:1b:ef:57:33:e8:8a:9d:32:6c:93:6c:
3e:89:b7:d9:e5:0a:bc:1a:d2:6b:9c:73:51:8b:ad:
89:b9:c2:21:0b:a0:f9:6e:62:22:b0:d3:d3:ac:cd:
5a:ec:1d:86:5e:bf:7c:8b:ab:61:a7:bd:8b:0c:81:
47:64:1f:a6:d2:cd:c1:3f:49:ef:ad:f8:d0:f7:fb:
ee:b4:84:5a:91:78:b2:28:93:74:95:17:75:f7:ac:
5e:47:12:b8:3a:d1:7d:86:52:0f:db:7f:ee:a8:ea:
a2:f8:26:4d:1b:b3:c7:f9:01:27:d3:17:aa:8e:28:
f9:32:34:7a:6b:bb:08:03:e1:68:60:46:87:2b:8c:
96:4c:e4:a2:a5:e9:98:58:2c:1e:52:ac:a2:c4:7b:
ad:c6:3c:e7:43:89:71:4c:e0:bd:54:52:b9:3f:9b:
58:89:ba:ad:dc:ea:59:14:97:37:88:c5:ba:c1:da:
a0:b1:9a:af:7e:dc:5d:36:8d:e4:1c:db:8d:77:28:
94:47:b1:31:6b:44:97:3a:f2:44:e5:33:17:f3:2f:
24:05:7e:9c:a5:19:eb:78:5e:6e:fc:32:0d:15:db:
e9:4c:45:83:c3:c9:71:aa:63:6c:19:8c:c6:29:2b:
1a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1F:45:56:19:BC:C7:59:26:9C:21:54:D8:8D:8C:76:2F:E8:8F:D7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UR9FVhm8x1kmnCFU2I2Mdi_oj9c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.8.0/22
Signature Algorithm: sha256WithRSAEncryption
38:52:be:4a:ec:34:bd:9e:18:f9:9e:5f:29:0a:50:72:94:b0:
30:16:d4:09:7f:31:7f:11:e4:a2:d0:b9:6b:4b:c7:15:ff:ab:
6f:5c:c1:86:f6:ed:38:b1:b8:6a:56:8e:b7:82:62:ba:b4:20:
0d:fe:5b:95:53:78:90:13:dd:70:f5:db:2b:ba:55:83:ed:f2:
c7:1b:f7:47:92:8c:eb:0c:1b:01:de:8a:0a:32:fa:d1:4c:52:
4c:5e:ea:bf:f7:9d:fe:a0:1b:ab:ee:b9:a6:2c:b0:97:56:06:
5c:7a:76:9c:71:0c:ed:5f:e1:f2:79:bb:a9:1e:ee:ae:81:1b:
58:f9:52:94:1b:30:ec:60:e7:e8:57:bc:1c:90:73:49:97:ac:
c2:57:14:a7:df:b0:01:f2:25:e6:1b:5c:43:59:26:f5:ce:61:
48:49:15:1d:db:01:0e:df:48:be:6a:51:d7:fa:1d:58:48:14:
af:cc:01:5f:6f:68:9b:11:51:08:12:bb:44:7d:57:2f:7a:5d:
fa:04:cd:9d:15:ab:34:a4:92:a5:05:16:1c:41:25:23:e0:21:
c8:d9:7c:52:f0:ab:6d:ac:5f:b9:ac:a2:6c:00:13:0b:26:18:
1e:be:71:6b:db:fd:db:a8:1d:a7:33:58:89:14:27:59:9b:4b:
de:23:e3:dc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDSYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0MTVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDUxMUY0NTU2MTlCQ0M3
NTkyNjlDMjE1NEQ4OEQ4Qzc2MkZFODhGRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdM/4EMVMo19Rus7d3H+1rOAMb71cz6IqdMmyTbD6Jt9nlCrwa
0mucc1GLrYm5wiELoPluYiKw09OszVrsHYZev3yLq2GnvYsMgUdkH6bSzcE/Se+t
+ND3++60hFqReLIok3SVF3X3rF5HErg60X2GUg/bf+6o6qL4Jk0bs8f5ASfTF6qO
KPkyNHpruwgD4WhgRocrjJZM5KKl6ZhYLB5SrKLEe63GPOdDiXFM4L1UUrk/m1iJ
uq3c6lkUlzeIxbrB2qCxmq9+3F02jeQc2413KJRHsTFrRJc68kTlMxfzLyQFfpyl
Get4Xm78Mg0V2+lMRYPDyXGqY2wZjMYpKxr/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUUR9FVhm8x1kmnCFU2I2Mdi/oj9cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1VSOUZWaG04eDFrbW5DRlUy
STJNZGlfb2o5Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wwgwDQYJKoZIhvcNAQELBQADggEBADhSvkrsNL2eGPmeXykKUHKUsDAW1Al/MX8R
5KLQuWtLxxX/q29cwYb27TixuGpWjreCYrq0IA3+W5VTeJAT3XD12yu6VYPt8scb
90eSjOsMGwHeigoy+tFMUkxe6r/3nf6gG6vuuaYssJdWBlx6dpxxDO1f4fJ5u6ke
7q6BG1j5UpQbMOxg5+hXvByQc0mXrMJXFKffsAHyJeYbXENZJvXOYUhJFR3bAQ7f
SL5qUdf6HVhIFK/MAV9vaJsRUQgSu0R9Vy96XfoEzZ0VqzSkkqUFFhxBJSPgIcjZ
fFLwq22sX7msomwAEwsmGB6+cWvb/duoHaczWIkUJ1mbS94j49w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org