Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eN1xhnI3PdXe50N-DsFIAI-M66M.roa
File: eN1xhnI3PdXe50N-DsFIAI-M66M.roa (raw, json)
Hash identifier: FaXEM5+V8oabupSA1JWGIoXeGutO77MAzgPU5x+jKtA=
Subject key identifier: 78:DD:71:86:72:37:3D:D5:DE:E7:43:7E:0E:C1:48:00:8F:8C:EB:A3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D30
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eN1xhnI3PdXe50N-DsFIAI-M66M.roa
Signing time: Tue 29 Sep 2020 09:54:18 +0000
ROA not before: Tue 29 Sep 2020 09:54:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3376 (0xd30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:18 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=78DD718672373DD5DEE7437E0EC148008F8CEBA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7e:af:4c:b4:f6:f1:0c:60:17:de:24:a1:0a:
4d:03:29:e7:e4:c7:8a:ba:81:1b:81:d2:31:fb:4b:
eb:a2:b6:94:9d:48:5a:1d:07:ae:42:97:12:ac:23:
d7:ee:83:8d:b6:5f:88:1d:43:f4:18:6a:d0:d5:56:
c8:59:29:b5:96:05:ef:32:e1:ed:dd:9f:1f:90:02:
2c:ee:c2:96:9b:7b:d0:d1:05:e9:92:8f:3b:7d:dc:
59:75:a9:dd:af:1c:72:89:05:09:67:4b:9c:c0:9e:
f3:c2:45:98:c2:42:ac:ec:4b:06:a2:6b:fa:e5:15:
ac:52:28:c7:17:e4:6d:d5:2c:35:8b:d2:f8:1f:b5:
63:f7:86:54:2a:d7:5e:5a:28:47:bb:19:52:ba:d9:
45:6b:38:bb:d5:4a:86:11:e0:38:d9:df:bd:80:45:
f2:23:ce:82:cd:a7:39:cc:2a:b1:da:da:fc:82:6e:
03:7b:b6:cf:55:c0:d7:10:71:6d:5d:7f:90:72:af:
c8:c1:0a:1f:55:25:e3:d2:66:ee:2a:ae:c1:da:e3:
8a:ce:a9:9d:31:ab:f6:a2:5c:15:07:38:73:c3:d0:
80:17:19:18:2c:ee:15:ec:56:c5:8e:0d:4f:b0:9f:
e2:16:b8:5c:fc:3d:99:81:55:ba:b8:76:57:ae:b0:
7b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DD:71:86:72:37:3D:D5:DE:E7:43:7E:0E:C1:48:00:8F:8C:EB:A3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eN1xhnI3PdXe50N-DsFIAI-M66M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.144.0/20
Signature Algorithm: sha256WithRSAEncryption
74:7a:bc:81:33:60:b6:0a:1b:d3:30:78:73:c1:9d:33:b1:56:
08:85:76:74:15:a5:5a:87:10:9a:09:f6:39:9b:87:44:d9:c2:
b3:3a:8e:72:bb:d9:2b:29:2b:94:86:c7:df:f3:ab:81:04:28:
1a:c7:5d:69:fe:ca:fb:62:30:75:c9:06:31:17:cc:9a:a4:4e:
1b:84:fa:8d:40:1a:fd:ec:24:b5:ec:61:99:81:5a:2f:ee:74:
a6:10:28:1e:0e:d5:9b:54:f7:97:31:e8:8f:63:d7:f9:1f:23:
9e:60:7a:13:49:ec:4f:70:87:c9:fa:88:43:0f:6f:67:9b:48:
9d:e1:5f:82:be:70:72:67:c8:2f:98:3c:9e:21:ce:2a:e5:dd:
c1:26:af:db:4c:6a:ea:0e:d7:07:7a:12:86:8c:2d:ae:c9:ea:
14:eb:c7:7b:77:44:9c:b0:5e:21:86:ad:fa:8c:90:ac:f7:e2:
de:8b:2f:3e:92:fd:d5:da:be:95:e8:91:91:b5:06:6b:d4:5a:
57:6a:a6:a5:7c:60:b3:6a:a7:95:6a:9a:a9:73:f2:a8:d9:13:
74:00:27:31:0e:c9:fe:3d:b6:da:dc:e6:95:cf:57:65:78:84:
a5:32:33:1f:67:cd:42:ae:b3:9e:40:3a:73:eb:84:6a:9d:56:
63:49:f4:77
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDTAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0MThaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDc4REQ3MTg2NzIzNzNE
RDVERUU3NDM3RTBFQzE0ODAwOEY4Q0VCQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDffq9MtPbxDGAX3iShCk0DKefkx4q6gRuB0jH7S+uitpSdSFod
B65ClxKsI9fug422X4gdQ/QYatDVVshZKbWWBe8y4e3dnx+QAizuwpabe9DRBemS
jzt93Fl1qd2vHHKJBQlnS5zAnvPCRZjCQqzsSwaia/rlFaxSKMcX5G3VLDWL0vgf
tWP3hlQq115aKEe7GVK62UVrOLvVSoYR4DjZ372ARfIjzoLNpznMKrHa2vyCbgN7
ts9VwNcQcW1df5Byr8jBCh9VJePSZu4qrsHa44rOqZ0xq/aiXBUHOHPD0IAXGRgs
7hXsVsWODU+wn+IWuFz8PZmBVbq4dleusHt3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUeN1xhnI3PdXe50N+DsFIAI+M66MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VOMXhobkkzUGRYZTUwTi1E
c0ZJQUktTTY2TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
wpAwDQYJKoZIhvcNAQELBQADggEBAHR6vIEzYLYKG9MweHPBnTOxVgiFdnQVpVqH
EJoJ9jmbh0TZwrM6jnK72SspK5SGx9/zq4EEKBrHXWn+yvtiMHXJBjEXzJqkThuE
+o1AGv3sJLXsYZmBWi/udKYQKB4O1ZtU95cx6I9j1/kfI55gehNJ7E9wh8n6iEMP
b2ebSJ3hX4K+cHJnyC+YPJ4hzirl3cEmr9tMauoO1wd6EoaMLa7J6hTrx3t3RJyw
XiGGrfqMkKz34t6LLz6S/dXavpXokZG1BmvUWldqpqV8YLNqp5Vqmqlz8qjZE3QA
JzEOyf49ttrc5pXPV2V4hKUyMx9nzUKus55AOnPrhGqdVmNJ9Hc=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org