Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aTOqZp6nw3S-psANeunSyAm5GJg.roa
File: aTOqZp6nw3S-psANeunSyAm5GJg.roa (raw, json)
Hash identifier: HGCS0p5R8zQ+yeqP+f1WMdmxq7Gad3Blm1AOZjbKTcI=
Subject key identifier: 69:33:AA:66:9E:A7:C3:74:BE:A6:C0:0D:7A:E9:D2:C8:09:B9:18:98
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1675
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aTOqZp6nw3S-psANeunSyAm5GJg.roa
Signing time: Sun 07 Feb 2021 12:10:36 +0000
ROA not before: Sun 07 Feb 2021 12:10:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5749 (0x1675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:10:36 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6933AA669EA7C374BEA6C00D7AE9D2C809B91898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:0d:44:19:0d:39:58:3b:36:7e:5f:16:99:
9a:04:7b:07:0b:47:18:23:b0:d0:3b:87:0f:4f:59:
c6:51:67:53:9b:9d:29:c2:74:00:d4:19:71:d8:c5:
88:be:6c:94:1f:70:4b:24:cd:66:b8:f7:30:28:2d:
ce:19:5d:18:1d:71:61:76:08:f3:b1:80:de:c7:8c:
55:3e:0b:7a:66:78:51:4e:e0:be:f4:b2:26:37:47:
8b:25:90:43:43:07:62:2f:ff:a8:e8:5d:a7:be:1e:
0e:58:2e:98:4e:c9:4d:f1:47:be:f2:75:b9:cb:2b:
02:6a:84:6b:d8:64:36:e3:4a:f8:a5:be:a5:d0:7d:
bb:3d:16:3b:9d:9a:a7:71:99:48:86:ea:e6:58:21:
67:c8:03:2b:81:92:b0:42:bc:41:9d:cf:ae:75:87:
ce:c6:a1:85:e2:1a:62:2b:43:75:44:4a:77:ff:8c:
6f:a2:0d:83:c2:99:2b:8d:b8:c9:fc:f4:ea:3c:b5:
11:98:94:6c:9b:67:4e:1c:79:b8:b6:6e:0a:b3:9a:
e9:41:94:a2:03:3e:02:27:9a:f4:dd:b1:ea:f4:f1:
de:18:d4:78:4e:e1:fd:8a:eb:9b:74:5e:37:45:57:
9a:aa:ad:0e:d9:3a:b4:f8:a2:30:c0:b8:7b:f7:4b:
32:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:33:AA:66:9E:A7:C3:74:BE:A6:C0:0D:7A:E9:D2:C8:09:B9:18:98
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aTOqZp6nw3S-psANeunSyAm5GJg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.177.0/24
Signature Algorithm: sha256WithRSAEncryption
34:dd:b8:99:d1:44:9e:2c:b2:5b:94:07:13:d5:1d:81:0d:90:
1e:70:12:da:84:ed:ad:77:aa:c1:8a:b9:25:f7:d6:c0:5b:34:
cf:14:18:bb:66:78:ac:22:46:72:84:a4:5d:17:29:3c:1c:7b:
30:f8:f6:bb:4d:34:1c:b4:da:3a:ac:ad:a3:30:3c:12:91:c9:
ef:31:5b:a3:ad:2d:27:00:b0:d3:7a:e7:08:b5:bd:10:4f:fc:
76:f9:9d:4c:c2:db:d6:3e:f0:1b:ed:b2:a0:ac:d2:d1:96:ef:
eb:58:41:7d:10:f9:8c:ed:d6:8b:b2:c8:83:98:1b:28:bd:1c:
9f:5c:a7:eb:97:cb:03:ec:a4:ad:c1:02:47:37:c5:3e:f8:ea:
bb:d2:3b:70:2f:43:03:9d:40:8c:82:fe:af:04:e9:eb:3d:16:
32:e7:a1:ee:ba:4b:1b:75:bf:eb:7b:32:9e:12:74:e9:23:fe:
bb:a9:be:ab:ff:e9:6b:77:07:31:75:e7:27:29:9a:58:91:3e:
dc:f2:57:d1:20:01:4c:2f:38:ed:ff:6a:89:37:9a:e3:7d:3c:
7e:4b:98:a3:ac:5b:1f:6f:1a:68:93:65:ed:82:3a:00:34:ac:
fc:f5:4a:c6:3f:18:6f:53:f9:80:bc:b5:a6:79:40:49:e3:ef:
6e:d4:c5:b9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFnUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjEwMzZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDY5MzNBQTY2OUVBN0Mz
NzRCRUE2QzAwRDdBRTlEMkM4MDlCOTE4OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCVdQ1EGQ05WDs2fl8WmZoEewcLRxgjsNA7hw9PWcZRZ1ObnSnC
dADUGXHYxYi+bJQfcEskzWa49zAoLc4ZXRgdcWF2CPOxgN7HjFU+C3pmeFFO4L70
siY3R4slkENDB2Iv/6joXae+Hg5YLphOyU3xR77ydbnLKwJqhGvYZDbjSvilvqXQ
fbs9FjudmqdxmUiG6uZYIWfIAyuBkrBCvEGdz651h87GoYXiGmIrQ3VESnf/jG+i
DYPCmSuNuMn89Oo8tRGYlGybZ04cebi2bgqzmulBlKIDPgInmvTdser08d4Y1HhO
4f2K65t0XjdFV5qqrQ7ZOrT4ojDAuHv3SzJjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUaTOqZp6nw3S+psANeunSyAm5GJgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FUT3FacDZudzNTLXBzQU5l
dW5TeUFtNUdKZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
w7EwDQYJKoZIhvcNAQELBQADggEBADTduJnRRJ4ssluUBxPVHYENkB5wEtqE7a13
qsGKuSX31sBbNM8UGLtmeKwiRnKEpF0XKTwcezD49rtNNBy02jqsraMwPBKRye8x
W6OtLScAsNN65wi1vRBP/Hb5nUzC29Y+8BvtsqCs0tGW7+tYQX0Q+Yzt1ouyyIOY
Gyi9HJ9cp+uXywPspK3BAkc3xT746rvSO3AvQwOdQIyC/q8E6es9FjLnoe66Sxt1
v+t7Mp4SdOkj/rupvqv/6Wt3BzF15ycpmliRPtzyV9EgAUwvOO3/aok3muN9PH5L
mKOsWx9vGmiTZe2COgA0rPz1SsY/GG9T+YC8taZ5QEnj727Uxbk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org