Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Zhl2WiLyLS84ie1rWCCCjS2hS4.roa
File: _Zhl2WiLyLS84ie1rWCCCjS2hS4.roa (raw, json)
Hash identifier: seMy0NwxYXaObX3rG8ng2zp5GaVDW/eAUzVKXS6GPtE=
Subject key identifier: FD:98:65:D9:68:8B:C8:B4:BC:E2:27:B5:AD:60:82:0A:34:B6:85:2E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EDD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Zhl2WiLyLS84ie1rWCCCjS2hS4.roa
Signing time: Tue 29 Sep 2020 09:56:13 +0000
ROA not before: Tue 29 Sep 2020 09:56:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3805 (0xedd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:13 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FD9865D9688BC8B4BCE227B5AD60820A34B6852E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:28:3a:bf:56:5f:27:1c:5e:72:89:4d:ca:
63:8b:1a:fe:a1:cb:c3:02:d9:36:f1:e1:66:63:f5:
a0:5d:93:9c:ba:68:df:9f:5d:60:31:e8:37:00:e2:
02:39:ef:34:da:c6:f3:aa:6e:7b:be:57:46:71:ea:
29:35:89:e4:74:6f:18:15:c0:a2:57:81:57:f0:f0:
e8:a5:44:1b:8c:b8:01:fe:6b:91:47:49:d7:55:ae:
c5:0f:0d:fc:44:b9:03:08:56:68:62:34:50:78:dd:
09:61:98:34:09:fa:85:f5:c1:e2:5a:c8:71:22:49:
0a:ea:cb:24:f9:05:16:20:19:29:65:b4:7d:d9:ba:
f9:4e:9f:25:b1:28:8d:ce:38:d3:f5:e2:72:fc:7b:
7c:03:ad:05:08:b6:f1:30:bb:7e:5b:a0:dd:10:d5:
6d:e9:b8:d1:23:34:b6:33:c9:f0:76:87:b7:38:73:
43:bf:a3:9b:ef:b3:ed:5b:b4:46:b6:89:fc:f5:7d:
2b:b6:4e:ce:b8:8c:9c:a4:27:00:f9:e9:d4:aa:6f:
f0:38:b4:6b:cb:86:f2:1b:24:1b:91:18:fe:6c:5d:
e5:82:91:58:7c:8d:ce:df:52:be:39:e7:ba:92:ee:
8d:69:b2:9b:a7:1c:32:ca:c2:ec:d7:90:f6:dc:6b:
61:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:98:65:D9:68:8B:C8:B4:BC:E2:27:B5:AD:60:82:0A:34:B6:85:2E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Zhl2WiLyLS84ie1rWCCCjS2hS4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.144.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:fb:d6:52:de:a1:15:ea:08:af:f3:cb:00:b6:bc:2c:26:b7:
69:30:82:27:7d:83:4a:d6:20:94:b6:b5:a8:07:88:81:34:57:
e5:7f:43:bc:8f:da:c5:ce:e2:40:12:cd:17:a2:63:c7:40:b2:
af:82:4d:53:c0:d7:79:4e:65:6c:a2:4a:15:de:67:2f:68:f6:
1c:43:df:61:11:1c:91:7f:25:80:21:99:de:17:5f:5c:5c:13:
14:78:49:b1:bf:6c:b6:16:b2:ec:f2:09:7f:25:d9:e0:90:c9:
2c:12:b4:8e:f5:ba:48:76:bd:3f:3a:36:0e:54:7e:57:34:4b:
a5:c0:b6:06:bc:a9:46:c7:8e:6f:0d:73:1b:28:d2:7b:8a:74:
b5:86:43:8f:e5:57:a9:2f:e3:e3:bc:e9:80:e6:8b:c0:94:66:
cf:b9:d0:14:f5:be:c9:ac:30:27:88:55:ab:2f:43:46:a3:c3:
9a:b3:c3:f6:02:27:a6:d3:67:16:4d:95:9d:b4:fa:21:8a:3e:
b2:34:c3:00:bc:b4:ef:ce:5b:11:13:60:fc:8c:52:b9:ff:db:
a0:2f:a7:0e:cc:b4:c9:89:bd:5a:70:32:d0:1e:67:c1:d1:2c:
f9:62:35:04:83:55:72:93:df:d5:d4:5f:58:f9:7f:ad:60:5c:
bf:03:9a:1f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDt0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZEOTg2NUQ5Njg4QkM4
QjRCQ0UyMjdCNUFENjA4MjBBMzRCNjg1MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGOCg6v1ZfJxxecolNymOLGv6hy8MC2Tbx4WZj9aBdk5y6aN+f
XWAx6DcA4gI57zTaxvOqbnu+V0Zx6ik1ieR0bxgVwKJXgVfw8OilRBuMuAH+a5FH
SddVrsUPDfxEuQMIVmhiNFB43QlhmDQJ+oX1weJayHEiSQrqyyT5BRYgGSlltH3Z
uvlOnyWxKI3OONP14nL8e3wDrQUItvEwu35boN0Q1W3puNEjNLYzyfB2h7c4c0O/
o5vvs+1btEa2ifz1fSu2Ts64jJykJwD56dSqb/A4tGvLhvIbJBuRGP5sXeWCkVh8
jc7fUr4557qS7o1pspunHDLKwuzXkPbca2HxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/Zhl2WiLyLS84ie1rWCCCjS2hS4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19aaGwyV2lMeUxTODRpZTFy
V0NDQ2pTMmhTNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
w5AwDQYJKoZIhvcNAQELBQADggEBAD771lLeoRXqCK/zywC2vCwmt2kwgid9g0rW
IJS2tagHiIE0V+V/Q7yP2sXO4kASzReiY8dAsq+CTVPA13lOZWyiShXeZy9o9hxD
32ERHJF/JYAhmd4XX1xcExR4SbG/bLYWsuzyCX8l2eCQySwStI71ukh2vT86Ng5U
flc0S6XAtga8qUbHjm8Ncxso0nuKdLWGQ4/lV6kv4+O86YDmi8CUZs+50BT1vsms
MCeIVasvQ0ajw5qzw/YCJ6bTZxZNlZ20+iGKPrI0wwC8tO/OWxETYPyMUrn/26Av
pw7MtMmJvVpwMtAeZ8HRLPliNQSDVXKT39XUX1j5f61gXL8Dmh8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org