Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c_8BpSrVaoadZ4y24J79CUbLAxE.roa
File: c_8BpSrVaoadZ4y24J79CUbLAxE.roa (raw, json)
Hash identifier: C2VyyaduTSN8xibAoSIvx1OxC9+MXt9NRsTkIeBjikE=
Subject key identifier: 73:FF:01:A5:2A:D5:6A:86:9D:67:8C:B6:E0:9E:FD:09:46:CB:03:11
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 13F1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c_8BpSrVaoadZ4y24J79CUbLAxE.roa
Signing time: Sun 07 Feb 2021 11:56:44 +0000
ROA not before: Sun 07 Feb 2021 11:56:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5105 (0x13f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:56:44 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=73FF01A52AD56A869D678CB6E09EFD0946CB0311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c8:82:f8:ca:ce:31:01:0e:ce:72:e8:5d:6e:
98:c8:5e:54:84:79:f4:03:2f:2e:be:96:c0:bb:f6:
56:c8:73:4b:67:3e:8b:13:74:1b:c0:69:83:21:98:
a6:d5:f0:c7:ac:85:7f:a9:58:49:0d:90:54:f2:b6:
c2:9c:aa:29:2a:dd:5c:49:5e:ea:b3:08:b1:4e:10:
bc:95:69:54:a0:c1:1d:e9:77:76:4f:24:f4:29:73:
9c:ee:ec:f4:2a:53:b1:96:b6:c0:f4:49:16:c4:c0:
e2:6b:e9:fe:e1:18:49:2b:7d:58:69:c5:55:9c:37:
6c:33:e5:5a:a3:ed:8b:7c:f1:b0:88:6d:36:4d:9d:
97:2b:eb:96:5b:69:26:5d:3f:87:3c:8e:b1:8b:18:
3a:93:54:5c:0a:d8:05:83:10:eb:ae:71:fc:ad:df:
f0:3e:ca:1f:48:89:98:33:53:c7:f2:da:4c:b0:20:
83:9c:02:c3:19:02:53:a3:6a:6d:39:42:1b:ee:2a:
4d:ea:ea:4c:69:bb:6e:cd:58:95:bb:4d:5b:57:55:
12:e3:7f:d2:be:fe:1b:f2:73:7c:ab:1d:17:6a:25:
9c:a6:78:f1:9e:b4:14:c2:19:69:85:24:10:54:30:
59:3f:50:4a:e7:a0:d3:e0:4f:b6:bf:b3:88:36:a0:
99:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FF:01:A5:2A:D5:6A:86:9D:67:8C:B6:E0:9E:FD:09:46:CB:03:11
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c_8BpSrVaoadZ4y24J79CUbLAxE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.136.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:73:9b:aa:f2:da:96:36:c3:59:0a:79:6a:87:a6:93:81:17:
d9:80:9c:78:a3:94:7c:be:dd:6e:17:62:2b:8f:2d:90:78:88:
88:72:17:25:3d:b9:41:58:04:d6:b7:36:93:c4:9d:45:4f:93:
e8:7c:54:dc:4e:ac:bc:62:28:fb:53:83:94:8d:63:64:01:95:
63:35:6e:54:ee:5e:d3:ed:c8:c3:ea:2c:60:2a:a0:1c:07:7e:
9a:f8:16:b8:f7:76:66:03:91:33:2d:b9:70:83:9a:9a:1d:1e:
d1:16:e7:a5:8b:2e:ba:8f:89:a5:ae:1e:9a:0a:b1:49:06:e4:
9c:d8:2f:ed:65:5e:f0:c2:b3:91:71:44:cc:a8:1e:3b:78:56:
29:91:ca:7a:69:e6:22:b1:65:65:91:60:a5:39:8d:fc:77:27:
f6:87:6f:1f:65:06:c7:65:f6:e4:e4:93:0a:d1:07:06:f0:67:
06:5a:48:3c:da:d5:3b:11:23:5f:2b:3d:2b:68:59:07:ba:25:
c4:fe:76:e5:c3:ba:11:20:51:14:d7:c8:6d:b2:65:7a:e6:81:
d3:e7:48:31:95:3a:93:2d:c2:49:08:5a:65:d1:5b:37:b5:92:
89:37:64:d7:aa:6c:b5:42:dd:5b:ed:b7:55:3e:40:17:1a:8c:
c3:4a:2b:cf
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE/EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU2NDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDczRkYwMUE1MkFENTZB
ODY5RDY3OENCNkUwOUVGRDA5NDZDQjAzMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgyIL4ys4xAQ7OcuhdbpjIXlSEefQDLy6+lsC79lbIc0tnPosT
dBvAaYMhmKbV8MeshX+pWEkNkFTytsKcqikq3VxJXuqzCLFOELyVaVSgwR3pd3ZP
JPQpc5zu7PQqU7GWtsD0SRbEwOJr6f7hGEkrfVhpxVWcN2wz5Vqj7Yt88bCIbTZN
nZcr65ZbaSZdP4c8jrGLGDqTVFwK2AWDEOuucfyt3/A+yh9IiZgzU8fy2kywIIOc
AsMZAlOjam05QhvuKk3q6kxpu27NWJW7TVtXVRLjf9K+/hvyc3yrHRdqJZymePGe
tBTCGWmFJBBUMFk/UErnoNPgT7a/s4g2oJkHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUc/8BpSrVaoadZ4y24J79CUbLAxEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NfOEJwU3JWYW9hZFo0eTI0
Sjc5Q1ViTEF4RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wIgwDQYJKoZIhvcNAQELBQADggEBAJ9zm6ry2pY2w1kKeWqHppOBF9mAnHijlHy+
3W4XYiuPLZB4iIhyFyU9uUFYBNa3NpPEnUVPk+h8VNxOrLxiKPtTg5SNY2QBlWM1
blTuXtPtyMPqLGAqoBwHfpr4Frj3dmYDkTMtuXCDmpodHtEW56WLLrqPiaWuHpoK
sUkG5JzYL+1lXvDCs5FxRMyoHjt4VimRynpp5iKxZWWRYKU5jfx3J/aHbx9lBsdl
9uTkkwrRBwbwZwZaSDza1TsRI18rPStoWQe6JcT+duXDuhEgURTXyG2yZXrmgdPn
SDGVOpMtwkkIWmXRWze1kok3ZNeqbLVC3Vvtt1U+QBcajMNKK88=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org