Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VBtrsdpvkZkwfPPVzatXuVo_gbc.roa
File: VBtrsdpvkZkwfPPVzatXuVo_gbc.roa (raw, json)
Hash identifier: w90twsZfaBsnHR7OP14oQEinZwccdz8bYH0z7QxYubU=
Subject key identifier: 54:1B:6B:B1:DA:6F:91:99:30:7C:F3:D5:CD:AB:57:B9:5A:3F:81:B7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 217F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VBtrsdpvkZkwfPPVzatXuVo_gbc.roa
Signing time: Fri 25 Nov 2022 04:39:59 +0000
ROA not before: Fri 25 Nov 2022 04:39:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8575 (0x217f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=541B6BB1DA6F9199307CF3D5CDAB57B95A3F81B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:5e:70:9d:41:53:f4:c2:45:29:82:60:3d:
bd:27:45:84:e0:63:c6:9b:06:60:fe:59:d7:eb:71:
f9:4e:a5:da:28:53:f1:d5:84:de:78:8c:fc:95:a9:
8e:ee:02:e7:60:77:29:48:bb:98:37:88:ef:13:8e:
00:89:53:f6:5f:98:44:c5:69:fe:39:4b:08:7d:44:
22:3e:7d:ef:22:93:eb:02:b3:e7:e9:ac:f7:1e:2c:
e8:4d:a6:a6:98:ca:55:85:44:24:18:35:aa:ba:1b:
74:35:61:62:ba:1b:0e:e9:58:79:a2:99:9c:1b:ff:
1b:f5:72:97:fc:fa:62:96:c6:99:19:06:4e:be:3a:
44:17:97:ad:ba:a9:25:09:c6:49:41:48:2e:8d:93:
8c:33:a5:9c:77:1a:49:20:58:38:1b:88:e3:f8:2f:
ff:bc:c6:ce:b6:e3:0a:65:1c:18:85:dd:6a:17:d6:
87:c3:f9:47:84:ba:41:32:79:08:67:ed:9d:b7:f1:
80:b7:02:81:1b:3b:e2:62:ec:1e:e2:e9:53:db:dc:
41:78:10:a8:78:08:12:60:4e:a6:d9:ec:d7:94:74:
a1:ee:ef:61:83:4c:a9:4c:cb:5d:63:b9:52:c1:1f:
67:c9:75:66:ce:d9:5a:96:d9:73:91:0e:3d:c1:f4:
54:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1B:6B:B1:DA:6F:91:99:30:7C:F3:D5:CD:AB:57:B9:5A:3F:81:B7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VBtrsdpvkZkwfPPVzatXuVo_gbc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.16.0/21
Signature Algorithm: sha256WithRSAEncryption
75:69:6f:70:e6:44:b8:d0:83:e4:d8:dd:a9:41:28:ab:ce:dc:
45:83:3e:72:e5:f3:70:b9:92:77:7c:8a:f2:e0:78:e6:87:60:
f8:ff:e6:dd:6c:b2:2c:5d:c5:00:5a:13:34:b4:5d:48:f5:9b:
99:98:85:c0:a0:42:ff:89:4b:55:67:39:fa:6b:10:b4:50:fb:
8d:5e:49:5a:2a:6f:29:1d:36:15:7e:74:84:7e:84:0f:f0:2a:
32:28:17:89:61:6a:98:28:ba:87:53:34:3f:4f:4c:80:df:1d:
8f:e8:e0:4e:1c:89:66:86:e9:f6:22:05:bd:81:9c:10:b5:78:
48:ba:97:e8:2f:88:0a:31:c4:fb:cd:fb:ea:46:77:de:fa:d0:
2a:e1:5b:c7:2d:1a:d8:2c:49:a0:44:f8:0e:ec:bb:59:ab:cc:
be:82:56:74:54:63:4c:eb:c8:4c:04:6f:42:c6:19:e3:e5:f9:
a4:9f:46:86:aa:00:33:7e:a3:a1:35:3d:08:d8:e7:cb:0f:84:
3c:c4:83:d0:a5:58:ab:71:f3:e8:1b:10:11:88:4d:b3:53:43:
57:45:73:55:8f:fe:ec:b4:bf:e2:96:d7:fc:c3:dc:3c:fc:05:
bc:ce:4b:ce:3e:fe:93:89:35:a4:54:7d:61:bd:6d:7e:71:15:
4f:2c:b2:60
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIX8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5NTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU0MUI2QkIxREE2Rjkx
OTkzMDdDRjNENUNEQUI1N0I5NUEzRjgxQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC4V5wnUFT9MJFKYJgPb0nRYTgY8abBmD+WdfrcflOpdooU/HV
hN54jPyVqY7uAudgdylIu5g3iO8TjgCJU/ZfmETFaf45Swh9RCI+fe8ik+sCs+fp
rPceLOhNpqaYylWFRCQYNaq6G3Q1YWK6Gw7pWHmimZwb/xv1cpf8+mKWxpkZBk6+
OkQXl626qSUJxklBSC6Nk4wzpZx3GkkgWDgbiOP4L/+8xs624wplHBiF3WoX1ofD
+UeEukEyeQhn7Z238YC3AoEbO+Ji7B7i6VPb3EF4EKh4CBJgTqbZ7NeUdKHu72GD
TKlMy11juVLBH2fJdWbO2VqW2XORDj3B9FSpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVBtrsdpvkZkwfPPVzatXuVo/gbcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZCdHJzZHB2a1prd2ZQUFZ6
YXRYdVZvX2diYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wxAwDQYJKoZIhvcNAQELBQADggEBAHVpb3DmRLjQg+TY3alBKKvO3EWDPnLl83C5
knd8ivLgeOaHYPj/5t1ssixdxQBaEzS0XUj1m5mYhcCgQv+JS1VnOfprELRQ+41e
SVoqbykdNhV+dIR+hA/wKjIoF4lhapgouodTND9PTIDfHY/o4E4ciWaG6fYiBb2B
nBC1eEi6l+gviAoxxPvN++pGd9760CrhW8ctGtgsSaBE+A7su1mrzL6CVnRUY0zr
yEwEb0LGGePl+aSfRoaqADN+o6E1PQjY58sPhDzEg9ClWKtx8+gbEBGITbNTQ1dF
c1WP/uy0v+KW1/zD3Dz8BbzOS84+/pOJNaRUfWG9bX5xFU8ssmA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:02 2025 by rpki-client