Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/crNv0rwle8N5YGPtYJ7-X2KRSms.roa
File: crNv0rwle8N5YGPtYJ7-X2KRSms.roa (raw, json)
Hash identifier: 3+00IVroZSQ0tRJ+0vTGmJz08wGLnMsJWXpDXiXq5C8=
Subject key identifier: 72:B3:6F:D2:BC:25:7B:C3:79:60:63:ED:60:9E:FE:5F:62:91:4A:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0ECB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/crNv0rwle8N5YGPtYJ7-X2KRSms.roa
Signing time: Tue 29 Sep 2020 09:56:09 +0000
ROA not before: Tue 29 Sep 2020 09:56:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3787 (0xecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:09 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=72B36FD2BC257BC3796063ED609EFE5F62914A6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:f3:5f:f2:db:8b:23:e1:be:bb:d5:22:25:
80:52:40:95:46:eb:60:de:32:af:ed:6e:51:fb:2d:
1c:0f:ad:32:04:cc:ec:12:d5:68:99:e0:c4:4c:f5:
9f:52:58:40:2e:6a:0c:9d:3f:5b:75:44:fe:39:b8:
ab:25:95:ef:f4:83:68:1b:3d:20:dd:21:c0:ee:b5:
86:3a:7d:f3:af:8e:c4:65:9c:01:89:20:93:b3:0e:
23:14:74:38:2b:80:59:f3:6e:9c:cc:5b:5b:e9:d5:
88:a5:6e:d8:4d:01:f4:11:72:61:0b:dc:93:8b:ea:
d8:59:55:dd:74:7b:96:40:e0:61:6c:f9:b7:81:fd:
ea:85:a2:36:23:5c:7e:f3:cb:0e:1f:90:db:23:80:
31:58:8f:27:9e:42:c4:15:70:68:8d:4b:fa:51:3f:
bf:f5:01:49:17:be:23:e6:71:69:0c:81:d4:a4:bf:
45:e4:67:56:44:ea:75:e4:17:03:6d:b5:25:95:b2:
33:e8:aa:0d:87:a6:f3:9e:12:56:3c:a7:4e:6c:f5:
9b:16:b5:2d:5d:e4:17:66:52:c0:de:de:c4:b6:98:
89:8b:66:83:09:06:21:c3:5f:b4:95:0a:ee:9c:b4:
8f:57:a7:29:e9:de:f2:0d:7c:34:e8:a8:85:e5:c2:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B3:6F:D2:BC:25:7B:C3:79:60:63:ED:60:9E:FE:5F:62:91:4A:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/crNv0rwle8N5YGPtYJ7-X2KRSms.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.200.0/21
Signature Algorithm: sha256WithRSAEncryption
b7:5e:a3:f5:03:2e:e9:f5:5c:a8:b6:2f:d4:fe:9a:04:c9:75:
5d:8a:6a:26:86:1e:82:81:3c:8e:b4:53:10:5c:47:43:cc:bd:
91:93:54:8f:07:83:8f:ef:33:f4:91:a1:dd:69:7b:f4:bb:f8:
b8:d3:94:d7:75:b5:5f:ef:35:b3:7a:47:b9:2f:12:d6:28:f9:
36:82:d0:be:3f:61:72:b3:91:53:67:88:2d:e6:4a:6a:90:7b:
8a:ed:b6:e8:2c:9c:54:d3:23:df:ec:d3:d9:84:7c:55:96:b8:
1d:87:ca:c0:77:e2:c3:19:ef:10:0e:cb:89:20:45:e1:d0:2c:
ec:e3:54:8d:89:20:5d:10:f5:c0:13:65:ed:da:bd:86:42:6c:
49:86:1e:76:a5:f9:d6:76:25:2c:ad:26:96:85:1b:fb:b9:a7:
68:ff:26:e5:63:6d:57:54:3a:f0:f5:e0:64:d5:b1:e0:5f:e4:
fa:9d:c2:e6:9b:70:4d:69:83:31:54:d7:06:f1:e4:1c:18:a4:
6e:ac:65:08:3a:c4:3f:4c:35:58:e0:2b:87:b0:d4:7f:a6:3c:
0c:a7:86:16:32:57:2d:26:ab:7f:e3:c9:c6:33:2d:ed:49:30:
fe:b7:ac:e8:f8:47:6a:43:2e:99:cd:57:2f:19:4b:18:b5:3c:
40:e1:e7:32
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDsswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDcyQjM2RkQyQkMyNTdC
QzM3OTYwNjNFRDYwOUVGRTVGNjI5MTRBNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjM/Nf8tuLI+G+u9UiJYBSQJVG62DeMq/tblH7LRwPrTIEzOwS
1WiZ4MRM9Z9SWEAuagydP1t1RP45uKslle/0g2gbPSDdIcDutYY6ffOvjsRlnAGJ
IJOzDiMUdDgrgFnzbpzMW1vp1YilbthNAfQRcmEL3JOL6thZVd10e5ZA4GFs+beB
/eqFojYjXH7zyw4fkNsjgDFYjyeeQsQVcGiNS/pRP7/1AUkXviPmcWkMgdSkv0Xk
Z1ZE6nXkFwNttSWVsjPoqg2HpvOeElY8p05s9ZsWtS1d5BdmUsDe3sS2mImLZoMJ
BiHDX7SVCu6ctI9Xpynp3vINfDToqIXlwrcxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcrNv0rwle8N5YGPtYJ7+X2KRSmswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NyTnYwcndsZThONVlHUHRZ
SjctWDJLUlNtcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wsgwDQYJKoZIhvcNAQELBQADggEBALdeo/UDLun1XKi2L9T+mgTJdV2KaiaGHoKB
PI60UxBcR0PMvZGTVI8Hg4/vM/SRod1pe/S7+LjTlNd1tV/vNbN6R7kvEtYo+TaC
0L4/YXKzkVNniC3mSmqQe4rttugsnFTTI9/s09mEfFWWuB2HysB34sMZ7xAOy4kg
ReHQLOzjVI2JIF0Q9cATZe3avYZCbEmGHnal+dZ2JSytJpaFG/u5p2j/JuVjbVdU
OvD14GTVseBf5PqdwuabcE1pgzFU1wbx5BwYpG6sZQg6xD9MNVjgK4ew1H+mPAyn
hhYyVy0mq3/jycYzLe1JMP63rOj4R2pDLpnNVy8ZSxi1PEDh5zI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org