Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bdxeQ5hjNE1xpsySrv-HRQ8h9kw.roa
File: bdxeQ5hjNE1xpsySrv-HRQ8h9kw.roa (raw, json)
Hash identifier: AZAZzp+E2iW2XCQpEeHT792rIeLBrUrSLyaO0PpmoE0=
Subject key identifier: 6D:DC:5E:43:98:63:34:4D:71:A6:CC:92:AE:FF:87:45:0F:21:F6:4C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AD6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bdxeQ5hjNE1xpsySrv-HRQ8h9kw.roa
Signing time: Wed 29 Sep 2021 02:45:48 +0000
ROA not before: Wed 29 Sep 2021 02:45:48 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6870 (0x1ad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:48 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6DDC5E439863344D71A6CC92AEFF87450F21F64C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3d:60:64:e8:3e:b3:fa:fb:f2:d9:c1:d3:f9:
8f:38:a0:01:be:eb:09:b2:5b:f7:c0:f1:13:cf:4c:
97:54:76:83:36:f6:64:8e:a4:17:ca:a7:fd:7e:ac:
5c:1c:6b:91:cd:0f:31:26:f1:da:f7:1c:b4:e8:0a:
2a:63:0f:79:7d:61:75:7d:87:d6:3d:20:8b:a5:7c:
04:c2:4a:1e:f6:13:9d:21:a1:eb:8c:ff:99:60:be:
63:50:4f:34:80:c6:07:36:3c:41:f2:22:d7:da:c1:
dc:f5:67:34:93:c9:87:c0:07:c3:b2:15:6c:1f:61:
3d:0a:3f:24:34:88:6e:b8:b1:ea:6b:5d:be:d7:4d:
3f:2b:b1:1c:0d:db:ba:1c:73:72:bb:88:e0:a3:9c:
73:fb:86:4d:e2:00:e3:43:aa:a1:38:e7:10:fd:8b:
f9:26:af:9d:6c:73:a3:59:a8:c9:04:6b:05:83:a8:
4f:56:18:76:fa:58:44:23:eb:92:d6:d0:85:9e:eb:
a6:43:fb:14:e8:d0:58:9b:f6:5a:7b:a6:97:e9:67:
fa:73:b2:24:82:7e:15:55:fc:8b:89:f0:1f:f9:a0:
c8:88:26:8b:80:a1:93:f6:81:2e:7a:34:78:18:c2:
5b:42:8c:28:8b:0c:be:d6:b8:dd:d1:eb:d1:9d:a3:
2d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DC:5E:43:98:63:34:4D:71:A6:CC:92:AE:FF:87:45:0F:21:F6:4C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bdxeQ5hjNE1xpsySrv-HRQ8h9kw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.128.0/20
Signature Algorithm: sha256WithRSAEncryption
63:ec:f6:6d:d2:06:03:a4:c1:fa:2e:a1:41:ef:e4:66:91:84:
58:cc:1b:94:73:09:eb:a5:3e:e5:89:ce:64:e3:f6:a6:a5:68:
51:44:78:e5:2f:7d:15:1a:97:fe:39:15:8a:fe:ac:cd:7c:ef:
71:1a:9c:d7:a6:35:93:23:90:82:5f:b8:40:25:5b:d5:e9:ed:
7f:e0:b8:dc:65:86:8f:2e:4e:44:65:53:1c:23:da:43:ca:74:
70:2a:ca:92:2b:f2:c3:40:84:a6:59:9f:ac:da:fd:33:89:ea:
04:b1:8a:ae:9d:fd:02:20:03:bd:57:12:24:1c:e8:a5:73:d7:
82:0c:57:8c:53:0e:d7:ee:d0:3f:ac:50:7e:1d:97:fe:cb:48:
91:63:8a:68:ad:5a:71:b8:52:9e:f6:9e:b7:4d:7a:57:85:f5:
7f:f5:33:c2:6a:78:f5:6e:8d:f6:53:51:87:a9:b6:76:ef:ea:
22:37:52:1a:f3:e0:54:91:68:66:16:d7:75:e2:e7:d2:81:30:
86:6c:eb:1b:39:39:49:a1:93:98:34:b8:34:10:64:1d:22:1c:
d6:c9:5d:b6:16:9a:c7:17:83:87:03:6c:ea:76:8f:05:a8:e3:
5b:a2:54:7a:36:92:03:2a:84:fa:b9:e5:6b:7e:0d:a5:89:70:
d9:d6:da:d9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGtYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ1NDhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDZEREM1RTQzOTg2MzM0
NEQ3MUE2Q0M5MkFFRkY4NzQ1MEYyMUY2NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSPWBk6D6z+vvy2cHT+Y84oAG+6wmyW/fA8RPPTJdUdoM29mSO
pBfKp/1+rFwca5HNDzEm8dr3HLToCipjD3l9YXV9h9Y9IIulfATCSh72E50hoeuM
/5lgvmNQTzSAxgc2PEHyItfawdz1ZzSTyYfAB8OyFWwfYT0KPyQ0iG64seprXb7X
TT8rsRwN27occ3K7iOCjnHP7hk3iAONDqqE45xD9i/kmr51sc6NZqMkEawWDqE9W
GHb6WEQj65LW0IWe66ZD+xTo0Fib9lp7ppfpZ/pzsiSCfhVV/IuJ8B/5oMiIJouA
oZP2gS56NHgYwltCjCiLDL7WuN3R69Gdoy2dAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUbdxeQ5hjNE1xpsySrv+HRQ8h9kwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JkeGVRNWhqTkUxeHBzeVNy
di1IUlE4aDlrdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
woAwDQYJKoZIhvcNAQELBQADggEBAGPs9m3SBgOkwfouoUHv5GaRhFjMG5RzCeul
PuWJzmTj9qalaFFEeOUvfRUal/45FYr+rM1873EanNemNZMjkIJfuEAlW9Xp7X/g
uNxlho8uTkRlUxwj2kPKdHAqypIr8sNAhKZZn6za/TOJ6gSxiq6d/QIgA71XEiQc
6KVz14IMV4xTDtfu0D+sUH4dl/7LSJFjimitWnG4Up72nrdNeleF9X/1M8JqePVu
jfZTUYeptnbv6iI3Uhrz4FSRaGYW13Xi59KBMIZs6xs5OUmhk5g0uDQQZB0iHNbJ
XbYWmscXg4cDbOp2jwWo41uiVHo2kgMqhPq55Wt+DaWJcNnW2tk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:13 2025 by rpki-client