Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dOSuXjk1JwVyLdWizQHIoOmumxA.roa
File: dOSuXjk1JwVyLdWizQHIoOmumxA.roa (raw, json)
Hash identifier: aOh1O1a/0mcwg6k+sOaausAq5MbAlE4B84n6mmRElKU=
Subject key identifier: 74:E4:AE:5E:39:35:27:05:72:2D:D5:A2:CD:01:C8:A0:E9:AE:9B:10
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14CB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dOSuXjk1JwVyLdWizQHIoOmumxA.roa
Signing time: Sun 07 Feb 2021 12:00:05 +0000
ROA not before: Sun 07 Feb 2021 12:00:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5323 (0x14cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:00:05 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=74E4AE5E39352705722DD5A2CD01C8A0E9AE9B10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:b9:3a:f2:d5:82:8e:f3:c4:4a:77:0e:fe:
fc:78:27:a9:18:fe:bb:d9:9d:2c:bb:a9:2a:3b:83:
a4:e5:61:54:fd:67:b9:11:c5:94:ae:20:85:8a:bf:
cc:9b:6a:56:a5:f3:01:4e:94:42:ca:81:71:86:b1:
0d:38:af:0f:6f:5a:2e:69:00:67:11:89:70:6a:d2:
5f:55:22:99:3b:df:1c:a8:6f:41:77:69:4c:bc:0e:
2b:7a:39:ed:fe:c8:3e:ec:4e:ce:a8:2d:66:ed:df:
5f:c0:3c:c7:36:9d:dc:08:7f:c4:49:33:37:88:7f:
b1:4f:e1:f0:94:50:52:30:00:c1:4b:a4:90:ed:af:
1b:63:f9:af:88:45:d5:ea:f9:30:c2:be:00:73:e8:
ac:da:5d:58:c8:9b:06:9c:93:ee:9a:cf:e9:7b:e0:
e5:a7:10:90:74:a0:d6:53:5e:75:f3:00:2e:11:ca:
58:04:95:9d:e7:5b:01:7d:6a:7d:4f:0a:e5:f8:64:
f6:95:65:08:c4:65:5f:0e:87:61:60:d4:5b:de:91:
43:5b:38:58:e5:1c:6a:56:09:2c:e0:40:17:38:07:
d8:87:bf:0e:5b:4f:ec:1d:7e:34:d2:17:f9:1b:92:
24:93:ff:e9:c5:d1:14:15:eb:4b:72:77:de:ba:76:
33:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E4:AE:5E:39:35:27:05:72:2D:D5:A2:CD:01:C8:A0:E9:AE:9B:10
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dOSuXjk1JwVyLdWizQHIoOmumxA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.160.0/21
Signature Algorithm: sha256WithRSAEncryption
b4:6d:da:b2:74:7a:e2:c4:f8:b6:4e:9b:8f:c7:5a:1f:4f:c8:
c3:b2:85:60:6f:b6:76:8f:4c:63:1c:25:5a:54:c1:9f:fb:99:
9c:68:4f:f0:7b:59:1a:ba:c1:f8:68:dd:ff:28:55:2e:ec:6f:
8d:62:6a:11:22:86:56:ea:86:6d:f7:1e:0a:c3:6c:2b:f9:64:
9a:e6:6d:ee:a4:98:ff:e3:d1:2b:2b:8b:66:9b:07:9d:76:e7:
40:bd:39:6f:62:ba:de:c5:cc:b3:27:53:cc:89:9e:3f:0a:39:
67:77:91:48:c0:40:16:22:94:a9:b9:5d:76:01:54:f8:c2:ad:
68:2a:9b:45:bf:f1:d8:f7:f2:99:60:42:40:7c:0f:f9:2f:1d:
bf:bf:73:bc:ec:11:e2:c0:4f:65:fa:25:df:20:29:38:f1:dd:
57:10:b3:9d:9b:6b:84:db:90:64:f3:56:eb:e6:60:a4:2b:b5:
2d:c8:4f:d1:55:39:17:49:70:e4:36:29:f4:b5:cf:67:fd:8f:
78:99:13:70:a9:d8:87:1a:87:91:04:15:2a:82:bb:21:95:b9:
b0:98:db:21:69:bd:75:cf:8f:02:6d:4d:85:ec:52:67:ed:81:
48:59:09:c9:9e:22:bb:43:74:66:db:e6:cf:15:7a:0f:92:71:
a5:58:8f:52
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjAwMDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDc0RTRBRTVFMzkzNTI3
MDU3MjJERDVBMkNEMDFDOEEwRTlBRTlCMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDATLk68tWCjvPESncO/vx4J6kY/rvZnSy7qSo7g6TlYVT9Z7kR
xZSuIIWKv8ybalal8wFOlELKgXGGsQ04rw9vWi5pAGcRiXBq0l9VIpk73xyob0F3
aUy8Dit6Oe3+yD7sTs6oLWbt31/APMc2ndwIf8RJMzeIf7FP4fCUUFIwAMFLpJDt
rxtj+a+IRdXq+TDCvgBz6KzaXVjImwack+6az+l74OWnEJB0oNZTXnXzAC4RylgE
lZ3nWwF9an1PCuX4ZPaVZQjEZV8Oh2Fg1FvekUNbOFjlHGpWCSzgQBc4B9iHvw5b
T+wdfjTSF/kbkiST/+nF0RQV60tyd966djMXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUdOSuXjk1JwVyLdWizQHIoOmumxAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2RPU3VYamsxSndWeUxkV2l6
UUhJb09tdW14QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wqAwDQYJKoZIhvcNAQELBQADggEBALRt2rJ0euLE+LZOm4/HWh9PyMOyhWBvtnaP
TGMcJVpUwZ/7mZxoT/B7WRq6wfho3f8oVS7sb41iahEihlbqhm33HgrDbCv5ZJrm
be6kmP/j0Ssri2abB51250C9OW9iut7FzLMnU8yJnj8KOWd3kUjAQBYilKm5XXYB
VPjCrWgqm0W/8dj38plgQkB8D/kvHb+/c7zsEeLAT2X6Jd8gKTjx3VcQs52ba4Tb
kGTzVuvmYKQrtS3IT9FVORdJcOQ2KfS1z2f9j3iZE3Cp2Icah5EEFSqCuyGVubCY
2yFpvXXPjwJtTYXsUmftgUhZCcmeIrtDdGbb5s8Veg+ScaVYj1I=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:36 2023 by rpki-client on console-fra.rpki-client.org