Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X1rrI_9nJ1eJJgD13BGUn537f64.roa
File: X1rrI_9nJ1eJJgD13BGUn537f64.roa (raw, json)
Hash identifier: kbo2675BXxaH/YjklUoGjsgV5uBWJHLChenRqBjLK+k=
Subject key identifier: 5F:5A:EB:23:FF:67:27:57:89:26:00:F5:DC:11:94:9F:9D:FB:7F:AE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18C7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X1rrI_9nJ1eJJgD13BGUn537f64.roa
Signing time: Sun 07 Feb 2021 12:53:38 +0000
ROA not before: Sun 07 Feb 2021 12:53:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.193.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6343 (0x18c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:53:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5F5AEB23FF672757892600F5DC11949F9DFB7FAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:3f:85:8d:d3:f7:78:b9:a1:19:90:4e:d7:
9a:42:96:a4:12:5a:4d:32:4b:e6:9c:0e:cd:3d:02:
b1:13:0d:1b:7d:b8:9b:69:df:3b:c9:45:3f:fa:f8:
16:b2:70:48:f2:c5:3b:95:cb:10:55:05:30:47:07:
50:be:f9:f3:d0:ee:ea:e6:84:ca:57:d7:62:12:7d:
66:9f:6f:19:41:bb:44:a1:78:d2:a5:70:33:3d:9e:
1d:6a:8e:4f:15:4c:e2:70:1f:73:39:6b:e1:49:29:
9c:aa:bd:f3:06:92:45:01:dc:79:0b:9d:29:b8:71:
37:a3:c0:aa:b2:bb:6a:15:6a:09:18:15:66:a0:c7:
47:19:77:0b:2d:3c:2b:07:01:c4:bd:44:91:8b:8c:
e3:d3:01:66:11:44:5b:59:e8:07:3d:c6:b2:6d:6d:
00:2d:0a:df:0d:c8:55:2b:78:90:cd:8b:b9:b9:1e:
ef:00:c7:d3:d0:92:23:20:32:0b:11:49:37:b7:14:
6e:a0:5d:d4:c5:a4:94:72:01:ce:79:94:5e:19:75:
61:be:52:c0:e0:54:bb:85:93:a8:2d:4c:32:90:93:
38:5e:42:46:ff:7a:b9:35:ef:1c:d9:89:99:b2:d8:
f2:2b:90:66:34:89:b1:e8:71:a6:a8:7c:46:a9:a6:
28:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5A:EB:23:FF:67:27:57:89:26:00:F5:DC:11:94:9F:9D:FB:7F:AE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X1rrI_9nJ1eJJgD13BGUn537f64.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.96.0/21
Signature Algorithm: sha256WithRSAEncryption
54:25:da:e9:dd:04:9d:7a:6d:e8:9d:f5:ab:4f:ce:e6:1a:64:
83:d2:ee:cb:68:19:e0:6d:a1:42:61:ee:81:dc:bc:cc:40:f2:
f8:36:13:a8:4b:5b:46:8b:67:78:07:7a:5c:06:32:88:73:58:
7a:79:2e:42:af:4f:79:90:39:a4:54:c0:c9:3c:21:03:09:1f:
2c:1a:0b:ba:53:50:55:5a:35:d4:7e:5b:ff:c2:7f:cb:a1:f6:
23:da:c3:7f:54:12:77:e9:1b:aa:9d:b3:4e:e5:79:bf:05:9d:
5d:6c:07:4f:0d:90:53:6b:b4:8b:56:ac:7b:77:d0:6d:61:ad:
42:8a:8f:e4:8f:fa:61:5a:e0:e5:98:27:52:3a:d4:72:80:06:
f1:bc:c6:ba:96:2e:ba:1c:14:d9:9c:f0:52:f2:00:a4:b8:38:
46:95:4c:56:3e:cf:3e:1f:dd:86:17:86:9d:e3:c9:ed:16:f8:
f1:01:fa:a7:a8:05:73:09:ab:12:67:22:41:9e:ea:4c:0c:7e:
61:a3:12:2c:89:bc:ac:4e:c4:ae:95:e3:c1:1e:2e:58:61:cd:
f0:00:cc:57:8e:bb:73:6a:32:79:2c:59:8c:85:dd:48:2d:84:
25:b5:5b:28:84:9a:24:a6:0c:97:ed:88:86:ee:eb:0a:32:77:
5d:2f:fa:bd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGMcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjUzMzhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVGNUFFQjIzRkY2NzI3
NTc4OTI2MDBGNURDMTE5NDlGOURGQjdGQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCe2D+FjdP3eLmhGZBO15pClqQSWk0yS+acDs09ArETDRt9uJtp
3zvJRT/6+BaycEjyxTuVyxBVBTBHB1C++fPQ7urmhMpX12ISfWafbxlBu0SheNKl
cDM9nh1qjk8VTOJwH3M5a+FJKZyqvfMGkkUB3HkLnSm4cTejwKqyu2oVagkYFWag
x0cZdwstPCsHAcS9RJGLjOPTAWYRRFtZ6Ac9xrJtbQAtCt8NyFUreJDNi7m5Hu8A
x9PQkiMgMgsRSTe3FG6gXdTFpJRyAc55lF4ZdWG+UsDgVLuFk6gtTDKQkzheQkb/
erk17xzZiZmy2PIrkGY0ibHocaaofEappij/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUX1rrI/9nJ1eJJgD13BGUn537f64wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1gxcnJJXzluSjFlSkpnRDEz
QkdVbjUzN2Y2NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wWAwDQYJKoZIhvcNAQELBQADggEBAFQl2undBJ16beid9atPzuYaZIPS7stoGeBt
oUJh7oHcvMxA8vg2E6hLW0aLZ3gHelwGMohzWHp5LkKvT3mQOaRUwMk8IQMJHywa
C7pTUFVaNdR+W//Cf8uh9iPaw39UEnfpG6qds07leb8FnV1sB08NkFNrtItWrHt3
0G1hrUKKj+SP+mFa4OWYJ1I61HKABvG8xrqWLrocFNmc8FLyAKS4OEaVTFY+zz4f
3YYXhp3jye0W+PEB+qeoBXMJqxJnIkGe6kwMfmGjEiyJvKxOxK6V48EeLlhhzfAA
zFeOu3NqMnksWYyF3UgthCW1WyiEmiSmDJftiIbu6woyd10v+r0=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:31 2023 by rpki-client on console-fra.rpki-client.org