Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZHopeZB4M-cJxyfMzSh65ioNc20.roa
File: ZHopeZB4M-cJxyfMzSh65ioNc20.roa (raw, json)
Hash identifier: 3Alqm/6kb3jsVPDiL7bmD4PbDflJaEaasi0MQAcNT8g=
Subject key identifier: 64:7A:29:79:90:78:33:E7:09:C7:27:CC:CD:28:7A:E6:2A:0D:73:6D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 179D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZHopeZB4M-cJxyfMzSh65ioNc20.roa
Signing time: Sun 07 Feb 2021 12:20:43 +0000
ROA not before: Sun 07 Feb 2021 12:20:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 45.64.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6045 (0x179d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:20:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=647A2979907833E709C727CCCD287AE62A0D736D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:6c:61:04:94:27:45:bf:28:3f:56:c6:3b:
17:53:e2:24:99:6b:7e:f1:99:ed:5d:5d:21:0f:4f:
8f:f9:c8:f3:19:d3:97:1d:c8:4d:ad:37:66:6d:b4:
fc:e4:bc:8f:b4:36:88:b2:4e:04:14:54:6d:4d:d8:
9f:15:cf:6d:7c:3f:ef:12:80:4f:f1:60:5f:e4:67:
bb:74:47:c1:7a:e2:f3:23:3a:b9:93:54:20:9c:d4:
e1:7f:0c:6b:55:a2:e0:02:40:fc:19:38:e3:c4:a2:
a8:ab:e3:18:65:ee:bf:61:25:9f:7e:b2:df:98:fa:
2c:1b:9e:9b:4e:2f:46:f4:67:c4:5a:ff:92:0c:73:
ba:2d:73:23:eb:cb:44:58:85:e5:fd:04:0f:0c:5e:
d2:c0:d6:8f:2f:05:94:06:49:98:41:33:ab:30:7a:
5f:17:50:5c:69:8e:3b:8c:6f:3d:ba:9e:48:5b:b9:
e8:66:c2:92:93:05:cd:c8:74:aa:70:5b:d8:51:29:
0b:6d:6d:ec:c8:20:35:67:a5:38:c4:8c:f2:80:12:
68:9a:01:9b:8f:0c:a6:c9:90:82:c4:81:5a:6a:52:
b7:94:ac:ed:10:a6:26:80:32:a4:06:92:f7:f2:98:
5f:93:e8:7f:b1:7c:54:41:7f:52:ba:99:09:84:8e:
94:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7A:29:79:90:78:33:E7:09:C7:27:CC:CD:28:7A:E6:2A:0D:73:6D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZHopeZB4M-cJxyfMzSh65ioNc20.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.31.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:17:1c:07:e2:72:70:cb:a9:74:46:7b:2c:1f:e9:2d:ab:4a:
4d:c0:e6:1d:1a:1c:f6:ac:29:6c:d1:73:39:94:09:fa:19:e2:
03:d2:2f:14:dc:6d:f3:62:9b:ac:c7:f9:21:88:8e:2b:19:2c:
02:d9:50:a5:ed:00:2c:1c:bc:4d:a0:3b:f0:c9:bb:dc:83:fc:
e8:81:10:8d:92:3d:67:37:40:e1:c3:c4:e7:2a:5b:76:79:85:
c4:6f:e8:c1:ce:e5:6f:ef:bd:09:3b:68:ef:b1:31:d8:a8:34:
16:36:98:f1:fd:cb:cd:d1:5d:3b:9c:77:2e:cd:af:95:03:a8:
c2:d3:0e:6d:07:80:86:19:97:c8:8a:2f:d3:ad:65:c3:b2:e6:
77:fe:ea:ed:4a:ee:79:4b:17:7a:be:c5:76:d7:43:ae:c6:80:
45:b4:f8:43:41:4e:99:b5:12:50:ee:91:4a:a6:fa:be:68:f6:
23:ba:09:5b:7a:80:0d:18:03:9b:2f:a2:5f:22:e1:a6:cf:ed:
49:c6:22:9e:2e:00:d2:09:a9:76:58:27:ca:58:27:1c:48:9f:
b8:af:50:40:2c:d0:4c:cc:e9:e3:fb:e0:71:21:2b:4a:78:f4:
a9:55:98:28:d1:66:29:18:ee:8f:5a:ef:b0:7f:cc:91:74:d7:
a4:b9:be:d1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF50wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjIwNDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDY0N0EyOTc5OTA3ODMz
RTcwOUM3MjdDQ0NEMjg3QUU2MkEwRDczNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrPGxhBJQnRb8oP1bGOxdT4iSZa37xme1dXSEPT4/5yPMZ05cd
yE2tN2ZttPzkvI+0NoiyTgQUVG1N2J8Vz218P+8SgE/xYF/kZ7t0R8F64vMjOrmT
VCCc1OF/DGtVouACQPwZOOPEoqir4xhl7r9hJZ9+st+Y+iwbnptOL0b0Z8Ra/5IM
c7otcyPry0RYheX9BA8MXtLA1o8vBZQGSZhBM6swel8XUFxpjjuMbz26nkhbuehm
wpKTBc3IdKpwW9hRKQttbezIIDVnpTjEjPKAEmiaAZuPDKbJkILEgVpqUreUrO0Q
piaAMqQGkvfymF+T6H+xfFRBf1K6mQmEjpTTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZHopeZB4M+cJxyfMzSh65ioNc20wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pIb3BlWkI0TS1jSnh5Zk16
U2g2NWlvTmMyMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt
QB8wDQYJKoZIhvcNAQELBQADggEBAG4XHAficnDLqXRGeywf6S2rSk3A5h0aHPas
KWzRczmUCfoZ4gPSLxTcbfNim6zH+SGIjisZLALZUKXtACwcvE2gO/DJu9yD/OiB
EI2SPWc3QOHDxOcqW3Z5hcRv6MHO5W/vvQk7aO+xMdioNBY2mPH9y83RXTucdy7N
r5UDqMLTDm0HgIYZl8iKL9OtZcOy5nf+6u1K7nlLF3q+xXbXQ67GgEW0+ENBTpm1
ElDukUqm+r5o9iO6CVt6gA0YA5svol8i4abP7UnGIp4uANIJqXZYJ8pYJxxIn7iv
UEAs0EzM6eP74HEhK0p49KlVmCjRZikY7o9a77B/zJF016S5vtE=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:34 2023 by rpki-client on console-fra.rpki-client.org