Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f7nbUrxp6vNXr41v7efQcunvWuQ.roa
File: f7nbUrxp6vNXr41v7efQcunvWuQ.roa (raw, json)
Hash identifier: i4awz8WgcyZ2IEwdYmt0AIXeVa19mCy49h+NjZYBZNY=
Subject key identifier: 7F:B9:DB:52:BC:69:EA:F3:57:AF:8D:6F:ED:E7:D0:72:E9:EF:5A:E4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14B9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f7nbUrxp6vNXr41v7efQcunvWuQ.roa
Signing time: Sun 07 Feb 2021 11:59:48 +0000
ROA not before: Sun 07 Feb 2021 11:59:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5305 (0x14b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:59:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7FB9DB52BC69EAF357AF8D6FEDE7D072E9EF5AE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:c6:25:e6:d1:57:b8:bf:1d:25:ca:1a:42:
56:5a:b1:9e:69:be:05:e7:f5:ec:5d:bd:d9:3a:68:
7d:36:90:4a:dd:ba:74:7d:d1:8a:6d:5d:5f:b0:a3:
8c:e8:aa:fc:88:88:6b:81:84:99:2d:e5:6f:51:e3:
05:6a:fb:df:f2:b3:0d:d6:cf:66:be:a4:d0:61:70:
6d:40:9d:d7:f0:a3:1a:dc:0a:80:96:9b:67:bf:99:
1c:67:cd:de:7a:52:f8:07:34:59:54:4f:37:35:b3:
80:02:b0:9a:77:44:52:6a:5d:0b:54:29:9a:f1:8a:
01:98:0f:ca:f6:99:e1:f3:60:7a:c2:95:b6:b8:ca:
72:79:03:27:f8:e3:96:bb:9d:70:15:43:6b:6a:c7:
b8:15:63:58:87:b3:ae:02:ad:dc:c9:59:d5:2c:90:
77:50:94:f6:73:24:9b:41:6b:c9:69:30:c9:27:a3:
04:02:24:28:0e:22:40:30:01:df:45:9d:59:9f:91:
09:32:e5:9c:75:8a:68:0a:6e:93:f8:eb:36:12:2e:
8c:50:c9:47:61:a0:bd:ba:62:82:9f:73:79:62:e9:
bc:dc:5f:37:37:a3:68:4b:3d:ee:9a:fe:55:3c:9b:
6f:29:f2:2a:04:3a:25:2e:1f:9f:e3:54:74:aa:88:
c7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B9:DB:52:BC:69:EA:F3:57:AF:8D:6F:ED:E7:D0:72:E9:EF:5A:E4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f7nbUrxp6vNXr41v7efQcunvWuQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.208.0/21
Signature Algorithm: sha256WithRSAEncryption
33:06:a5:f8:3f:98:4f:18:75:67:cc:04:d8:6f:b2:62:d4:0d:
44:b0:95:df:23:fb:33:3c:72:f5:b6:d4:9b:fc:20:dc:48:cd:
2c:97:6b:01:25:98:fa:97:39:47:53:04:1a:92:d3:27:c6:14:
c0:32:55:77:82:62:75:01:57:5f:38:99:62:b7:61:90:4b:fa:
e6:88:35:ad:31:74:d4:38:7a:ea:5d:6d:23:09:c0:60:d3:86:
e7:81:3c:28:f6:c6:44:9b:72:2b:58:a4:c1:7e:8b:98:df:4d:
13:99:c0:25:d2:0d:f3:fc:ca:9e:ae:69:83:ac:d0:3f:04:57:
fe:67:77:0a:7a:7e:f8:11:b8:80:5d:33:49:87:9d:7a:c2:d9:
49:05:a1:28:2e:a7:78:57:fa:8f:50:83:52:57:ff:5b:be:e2:
1e:6a:fc:6f:16:58:f6:a9:c2:e6:ec:9c:e8:4e:b3:9e:70:82:
e1:ea:bc:90:66:5d:e1:a5:a0:2a:6c:1e:a9:8d:6c:ea:e8:2f:
d4:fe:a1:97:ee:f4:30:36:ba:9f:e9:30:80:d5:89:ab:b7:f9:
f8:16:23:e3:a0:3b:01:1c:c9:c0:32:70:37:80:3a:e5:a4:79:
f8:fd:5c:4e:19:6c:d6:80:54:2e:6a:34:58:f6:de:d2:e6:c5:
e4:81:72:12
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFLkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU5NDhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdGQjlEQjUyQkM2OUVB
RjM1N0FGOEQ2RkVERTdEMDcyRTlFRjVBRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXZcYl5tFXuL8dJcoaQlZasZ5pvgXn9exdvdk6aH02kErdunR9
0YptXV+wo4zoqvyIiGuBhJkt5W9R4wVq+9/ysw3Wz2a+pNBhcG1AndfwoxrcCoCW
m2e/mRxnzd56UvgHNFlUTzc1s4ACsJp3RFJqXQtUKZrxigGYD8r2meHzYHrClba4
ynJ5Ayf445a7nXAVQ2tqx7gVY1iHs64CrdzJWdUskHdQlPZzJJtBa8lpMMknowQC
JCgOIkAwAd9FnVmfkQky5Zx1imgKbpP46zYSLoxQyUdhoL26YoKfc3li6bzcXzc3
o2hLPe6a/lU8m28p8ioEOiUuH5/jVHSqiMeDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUf7nbUrxp6vNXr41v7efQcunvWuQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Y3bmJVcnhwNnZOWHI0MXY3
ZWZRY3Vudld1US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wNAwDQYJKoZIhvcNAQELBQADggEBADMGpfg/mE8YdWfMBNhvsmLUDUSwld8j+zM8
cvW21Jv8INxIzSyXawElmPqXOUdTBBqS0yfGFMAyVXeCYnUBV184mWK3YZBL+uaI
Na0xdNQ4eupdbSMJwGDThueBPCj2xkSbcitYpMF+i5jfTROZwCXSDfP8yp6uaYOs
0D8EV/5ndwp6fvgRuIBdM0mHnXrC2UkFoSgup3hX+o9Qg1JX/1u+4h5q/G8WWPap
wubsnOhOs55wguHqvJBmXeGloCpsHqmNbOroL9T+oZfu9DA2up/pMIDViau3+fgW
I+OgOwEcycAycDeAOuWkefj9XE4ZbNaAVC5qNFj23tLmxeSBchI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org