Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VbJJFtsRRMpsJPnulDhRL8SCzzc.roa
File: VbJJFtsRRMpsJPnulDhRL8SCzzc.roa (raw, json)
Hash identifier: L1RoK37twICdsZrXvbeOEyMT9qFq96UC/woIjoTQYds=
Subject key identifier: 55:B2:49:16:DB:11:44:CA:6C:24:F9:EE:94:38:51:2F:C4:82:CF:37
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 166F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VbJJFtsRRMpsJPnulDhRL8SCzzc.roa
Signing time: Sun 07 Feb 2021 12:10:26 +0000
ROA not before: Sun 07 Feb 2021 12:10:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5743 (0x166f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:10:26 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=55B24916DB1144CA6C24F9EE9438512FC482CF37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:fd:82:18:37:16:1e:85:00:18:fb:f4:94:
79:b3:41:68:5f:3c:0b:33:f0:0c:6a:04:28:66:2d:
70:45:e0:23:cc:34:85:c2:1e:2c:8d:69:a4:fb:c5:
11:b5:27:b9:fa:69:cb:20:05:97:72:a0:65:5f:c3:
1a:41:0d:18:c2:f8:de:50:af:fb:63:09:15:34:d6:
7d:a8:be:0b:25:5b:b7:1d:e6:d4:b5:34:00:4e:20:
18:df:6a:bf:95:a5:8b:4e:b3:0b:79:92:e0:89:57:
ff:0c:6a:4c:a8:fa:79:c4:ae:b8:b2:33:13:75:6c:
5f:55:a2:51:f3:1a:df:c5:78:9e:17:51:29:bc:67:
34:62:13:dd:b5:e7:af:f3:a7:8c:98:49:f2:a7:b2:
88:d4:4a:ac:fc:ee:3c:20:69:ca:5d:55:86:55:f6:
a2:d1:a7:3b:69:7d:fa:b8:a7:a3:2e:91:c2:a2:9e:
25:94:1c:e3:ae:2e:e9:c8:d2:6d:77:b7:cb:0e:45:
65:cf:ac:d0:99:16:3c:e7:d4:6a:c0:48:d5:0a:1d:
04:f5:f5:6a:ac:33:c8:3a:b7:5e:45:e7:4c:b1:6c:
84:19:19:ef:72:7d:a3:1f:75:23:ac:0e:94:75:af:
cc:17:69:1e:2a:4a:04:de:03:46:f7:b4:a4:da:28:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B2:49:16:DB:11:44:CA:6C:24:F9:EE:94:38:51:2F:C4:82:CF:37
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VbJJFtsRRMpsJPnulDhRL8SCzzc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.172.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:9d:2b:2a:f4:72:37:ad:67:56:67:da:83:a7:e9:bd:bb:65:
5d:55:1a:0f:59:51:a7:9c:8f:42:de:26:b5:44:f0:08:ac:7c:
df:67:35:ce:53:34:ba:b8:f3:fc:7c:c2:fb:af:f2:f3:f5:64:
76:fc:9e:4f:36:ba:6f:83:25:ee:b6:3a:f5:26:65:62:44:4b:
65:70:88:e5:d0:8e:02:f7:9d:92:a7:16:9b:2d:5a:a9:a4:45:
2f:65:42:00:12:17:53:35:69:7d:74:76:17:0f:48:95:46:31:
b0:08:43:10:d8:c5:bb:3d:15:a4:34:fe:d5:e2:29:f4:23:94:
d3:4b:20:02:0d:1d:d9:20:e8:04:57:44:5c:33:9a:9e:68:c3:
0b:f6:96:74:32:64:57:90:00:1e:15:cd:7f:b5:a9:19:a1:40:
ea:6e:d5:be:31:9c:0c:38:c9:d8:c6:35:7d:88:95:51:e7:5b:
83:de:6b:8e:dc:bc:47:24:5b:e9:16:e7:94:2b:51:50:82:42:
46:6a:ed:ee:42:70:40:8b:f7:ec:6a:27:79:6a:dc:a7:a5:c4:
d7:43:a5:ac:b7:0d:38:bd:66:2f:50:a0:ac:67:b0:41:a9:43:
8e:01:c3:c8:9d:ef:c3:2a:a9:fc:c4:35:4a:dc:f4:34:b9:df:
f1:42:10:c4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjEwMjZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU1QjI0OTE2REIxMTQ0
Q0E2QzI0RjlFRTk0Mzg1MTJGQzQ4MkNGMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGQ/2CGDcWHoUAGPv0lHmzQWhfPAsz8AxqBChmLXBF4CPMNIXC
HiyNaaT7xRG1J7n6acsgBZdyoGVfwxpBDRjC+N5Qr/tjCRU01n2ovgslW7cd5tS1
NABOIBjfar+VpYtOswt5kuCJV/8Makyo+nnErriyMxN1bF9VolHzGt/FeJ4XUSm8
ZzRiE92156/zp4yYSfKnsojUSqz87jwgacpdVYZV9qLRpztpffq4p6MukcKiniWU
HOOuLunI0m13t8sORWXPrNCZFjzn1GrASNUKHQT19WqsM8g6t15F50yxbIQZGe9y
faMfdSOsDpR1r8wXaR4qSgTeA0b3tKTaKBBjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVbJJFtsRRMpsJPnulDhRL8SCzzcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZiSkpGdHNSUk1wc0pQbnVs
RGhSTDhTQ3p6Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
w6wwDQYJKoZIhvcNAQELBQADggEBALqdKyr0cjetZ1Zn2oOn6b27ZV1VGg9ZUaec
j0LeJrVE8AisfN9nNc5TNLq48/x8wvuv8vP1ZHb8nk82um+DJe62OvUmZWJES2Vw
iOXQjgL3nZKnFpstWqmkRS9lQgASF1M1aX10dhcPSJVGMbAIQxDYxbs9FaQ0/tXi
KfQjlNNLIAINHdkg6ARXRFwzmp5owwv2lnQyZFeQAB4VzX+1qRmhQOpu1b4xnAw4
ydjGNX2IlVHnW4Pea47cvEckW+kW55QrUVCCQkZq7e5CcECL9+xqJ3lq3KelxNdD
pay3DTi9Zi9QoKxnsEGpQ44Bw8id78MqqfzENUrc9DS53/FCEMQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org