Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a8tnIkBs6Mzf8foO7E-_4pbZLNY.roa
File: a8tnIkBs6Mzf8foO7E-_4pbZLNY.roa (raw, json)
Hash identifier: R4R5IbbXGafkX1Ci6y2fpKVnlKQQDJlESphC6GXcsSU=
Subject key identifier: 6B:CB:67:22:40:6C:E8:CC:DF:F1:FA:0E:EC:4F:BF:E2:96:D9:2C:D6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F5D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a8tnIkBs6Mzf8foO7E-_4pbZLNY.roa
Signing time: Tue 29 Sep 2020 09:56:51 +0000
ROA not before: Tue 29 Sep 2020 09:56:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3933 (0xf5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:51 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6BCB6722406CE8CCDFF1FA0EEC4FBFE296D92CD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:80:6c:33:fe:8b:17:67:a8:23:ec:77:a4:
a3:f2:6e:62:f9:bc:a9:91:34:63:1e:97:b7:4b:34:
07:59:1f:7e:df:40:34:4a:f5:06:b3:b1:38:3f:28:
0e:8e:82:75:2c:52:a7:70:ab:b4:92:55:82:fe:b6:
c9:c1:07:9e:81:9c:07:36:e4:b1:40:e9:9f:91:76:
27:64:a6:7d:63:0f:c8:31:94:34:56:4c:d3:b9:5c:
63:2c:8e:2b:6a:f5:4f:72:9f:89:d8:cf:c6:74:80:
3d:ba:2d:05:2d:ad:bf:57:ee:5f:f2:e4:20:5f:0e:
17:4d:20:c6:73:c9:2c:99:86:ef:75:e8:4c:08:63:
97:4d:fd:c0:24:52:e9:b8:7f:84:e5:84:17:8b:4f:
61:dd:c8:ed:a5:aa:09:33:26:91:3f:c6:82:2f:0d:
bf:06:04:be:9d:bb:a8:77:50:9f:30:56:d0:39:35:
63:39:d3:29:41:b8:80:9c:c6:d9:9c:4c:b3:52:54:
d9:31:e9:d3:5c:0d:80:1c:3a:d4:3c:19:14:04:9f:
35:cb:d4:54:0c:90:19:d5:68:60:6a:55:ba:68:34:
33:d3:87:70:c9:82:6b:cd:5a:7c:3f:58:6d:21:ac:
9c:03:1a:f8:71:fb:ec:42:63:bb:2e:b2:8c:39:d3:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CB:67:22:40:6C:E8:CC:DF:F1:FA:0E:EC:4F:BF:E2:96:D9:2C:D6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a8tnIkBs6Mzf8foO7E-_4pbZLNY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.176.0/21
Signature Algorithm: sha256WithRSAEncryption
39:80:d8:f1:5a:47:9e:14:65:f1:9e:00:95:e6:dd:77:20:87:
cc:26:ec:51:ed:a5:6c:76:d4:d9:da:e6:7d:b4:ac:f2:20:e2:
d4:d5:89:9e:b2:a5:f6:8e:46:ed:17:6c:0d:2f:ed:f7:24:5b:
b2:fd:ad:92:60:e8:9d:d6:86:dc:25:88:70:63:6f:af:f3:ab:
50:c2:26:3c:8d:9b:13:be:c3:c7:1c:df:63:58:09:39:c4:c8:
10:67:49:3d:41:ba:85:3b:56:e1:88:91:98:a0:b9:8c:a0:f5:
ed:08:4d:e4:02:88:75:44:a8:d3:3b:1a:39:6a:02:51:06:e6:
d8:2f:9b:5a:9f:31:91:b0:d3:51:5a:20:2f:c5:be:fc:82:da:
9a:2b:78:e8:e6:4d:55:d5:d3:d0:57:ec:32:24:f1:e8:9b:f7:
91:34:52:04:7c:09:fa:52:2f:57:c1:cf:89:74:bc:d8:55:b0:
51:96:29:25:a1:9a:d1:ae:7a:ca:b0:14:0f:45:60:11:c9:59:
39:dd:36:28:66:56:23:08:84:77:f0:17:d9:74:37:10:ec:ec:
ea:78:3a:76:9b:4f:cd:15:0b:b6:50:17:26:ab:e0:2d:86:d3:
32:d2:3b:a4:e8:30:57:07:0f:d7:61:93:88:d0:1c:ed:b0:2e:
7b:4e:18:40
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD10wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2NTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDZCQ0I2NzIyNDA2Q0U4
Q0NERkYxRkEwRUVDNEZCRkUyOTZEOTJDRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLOYBsM/6LF2eoI+x3pKPybmL5vKmRNGMel7dLNAdZH37fQDRK
9QazsTg/KA6OgnUsUqdwq7SSVYL+tsnBB56BnAc25LFA6Z+Rdidkpn1jD8gxlDRW
TNO5XGMsjitq9U9yn4nYz8Z0gD26LQUtrb9X7l/y5CBfDhdNIMZzySyZhu916EwI
Y5dN/cAkUum4f4TlhBeLT2HdyO2lqgkzJpE/xoIvDb8GBL6du6h3UJ8wVtA5NWM5
0ylBuICcxtmcTLNSVNkx6dNcDYAcOtQ8GRQEnzXL1FQMkBnVaGBqVbpoNDPTh3DJ
gmvNWnw/WG0hrJwDGvhx++xCY7susow50/T7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUa8tnIkBs6Mzf8foO7E+/4pbZLNYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2E4dG5Ja0JzNk16Zjhmb083
RS1fNHBiWkxOWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w7AwDQYJKoZIhvcNAQELBQADggEBADmA2PFaR54UZfGeAJXm3Xcgh8wm7FHtpWx2
1Nna5n20rPIg4tTViZ6ypfaORu0XbA0v7fckW7L9rZJg6J3WhtwliHBjb6/zq1DC
JjyNmxO+w8cc32NYCTnEyBBnST1BuoU7VuGIkZiguYyg9e0ITeQCiHVEqNM7Gjlq
AlEG5tgvm1qfMZGw01FaIC/FvvyC2poreOjmTVXV09BX7DIk8eib95E0UgR8CfpS
L1fBz4l0vNhVsFGWKSWhmtGuesqwFA9FYBHJWTndNihmViMIhHfwF9l0NxDs7Op4
OnabT80VC7ZQFyar4C2G0zLSO6ToMFcHD9dhk4jQHO2wLntOGEA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org