Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fBGnkPyZ3mSVuqz_6wAFJR_o2ts.roa
File: fBGnkPyZ3mSVuqz_6wAFJR_o2ts.roa (raw, json)
Hash identifier: mQvR2ERcqHFDp2/lsHB5jhshimKrZBS4lENjPSFKujw=
Subject key identifier: 7C:11:A7:90:FC:99:DE:64:95:BA:AC:FF:EB:00:05:25:1F:E8:DA:DB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1687
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fBGnkPyZ3mSVuqz_6wAFJR_o2ts.roa
Signing time: Sun 07 Feb 2021 12:12:07 +0000
ROA not before: Sun 07 Feb 2021 12:12:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5767 (0x1687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:12:07 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7C11A790FC99DE6495BAACFFEB0005251FE8DADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:a6:b3:e4:50:1f:b7:a6:04:91:e7:c2:dc:
a1:c3:b0:49:d5:11:ca:0c:94:9c:fe:13:0d:09:f0:
b2:d8:f9:6f:32:a8:6f:a2:61:85:05:ca:0f:49:32:
dc:33:08:77:60:ba:ba:d0:74:ca:40:6e:05:13:9a:
17:5d:26:d3:c1:23:40:7a:b6:eb:5d:41:7b:66:72:
77:f7:5b:74:50:a8:d3:27:99:dc:e0:2d:53:dd:d9:
7e:79:e4:bc:f3:0d:ec:74:64:2a:12:e7:01:e9:fd:
40:94:8e:55:fb:4c:b6:71:90:c1:6e:10:35:b3:d5:
64:92:f4:fc:79:68:48:c5:2a:ca:dd:c6:dc:d0:39:
0d:94:a1:2f:03:eb:43:e3:29:eb:75:a7:8e:65:2c:
76:4f:d5:9a:f4:7c:6f:90:51:ac:00:4b:f9:73:2d:
52:82:40:f8:60:23:ac:e4:41:b3:c2:bf:5a:f0:1e:
67:1c:f6:6a:e5:9b:4a:de:61:0a:5e:be:78:62:d0:
c9:dc:ad:cb:ed:f7:82:c4:c1:7b:be:2a:c4:b7:c3:
37:9b:e6:2b:06:0d:d7:1a:5d:c2:1a:29:01:4f:1c:
74:6d:bd:db:a6:6e:df:18:af:60:37:dc:db:10:bd:
1a:6b:6b:0b:dd:f9:81:cc:14:20:06:13:70:cc:6f:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:11:A7:90:FC:99:DE:64:95:BA:AC:FF:EB:00:05:25:1F:E8:DA:DB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fBGnkPyZ3mSVuqz_6wAFJR_o2ts.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.208.0/21
Signature Algorithm: sha256WithRSAEncryption
38:ef:a3:95:33:2d:5c:14:dd:f6:83:e6:39:61:1e:20:7b:ff:
50:b7:8c:ce:57:72:61:25:da:7f:9c:6b:1f:96:33:fd:34:05:
d5:ac:fa:08:cf:76:76:32:14:98:07:fa:8e:7d:66:d1:ba:39:
30:43:d3:df:07:b7:b5:42:4c:9c:bf:ed:ce:bd:b7:43:10:4f:
b9:4c:b8:9f:e5:8b:09:14:78:b6:a9:9d:0b:54:ed:a4:3b:5f:
34:da:04:2a:31:3f:30:98:c1:12:d4:1a:92:0d:38:db:4d:92:
c1:9e:c1:f9:1d:ff:07:74:3d:db:66:ac:49:55:f8:bd:10:18:
71:a0:bd:92:ac:e3:28:a6:ab:5c:c4:15:aa:66:39:cc:1e:f7:
14:70:1b:78:f7:4c:6c:3b:06:4a:73:bf:ae:ef:3f:db:93:1a:
1f:97:a8:eb:f0:c2:7b:4c:e0:6f:60:9b:35:19:c9:f4:d0:e9:
03:55:c1:fc:de:f4:b7:d0:ca:62:6d:73:53:36:9c:db:b8:6c:
de:76:a0:c6:99:1d:4d:c7:ca:79:98:c5:fb:bf:49:36:ee:be:
56:29:dc:81:ee:b1:4e:48:ba:01:8a:c2:4d:48:a8:f2:43:63:
cf:0d:24:55:fb:f0:93:93:fb:2b:a1:3d:e7:26:44:fd:b6:25:
6c:36:14:b9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjEyMDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdDMTFBNzkwRkM5OURF
NjQ5NUJBQUNGRkVCMDAwNTI1MUZFOERBREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDW9Kaz5FAft6YEkefC3KHDsEnVEcoMlJz+Ew0J8LLY+W8yqG+i
YYUFyg9JMtwzCHdgurrQdMpAbgUTmhddJtPBI0B6tutdQXtmcnf3W3RQqNMnmdzg
LVPd2X555LzzDex0ZCoS5wHp/UCUjlX7TLZxkMFuEDWz1WSS9Px5aEjFKsrdxtzQ
OQ2UoS8D60PjKet1p45lLHZP1Zr0fG+QUawAS/lzLVKCQPhgI6zkQbPCv1rwHmcc
9mrlm0reYQpevnhi0Mncrcvt94LEwXu+KsS3wzeb5isGDdcaXcIaKQFPHHRtvdum
bt8Yr2A33NsQvRprawvd+YHMFCAGE3DMb46TAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUfBGnkPyZ3mSVuqz/6wAFJR/o2tswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ZCR25rUHlaM21TVnVxel82
d0FGSlJfbzJ0cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w9AwDQYJKoZIhvcNAQELBQADggEBADjvo5UzLVwU3faD5jlhHiB7/1C3jM5XcmEl
2n+cax+WM/00BdWs+gjPdnYyFJgH+o59ZtG6OTBD098Ht7VCTJy/7c69t0MQT7lM
uJ/liwkUeLapnQtU7aQ7XzTaBCoxPzCYwRLUGpINONtNksGewfkd/wd0PdtmrElV
+L0QGHGgvZKs4yimq1zEFapmOcwe9xRwG3j3TGw7Bkpzv67vP9uTGh+XqOvwwntM
4G9gmzUZyfTQ6QNVwfze9LfQymJtc1M2nNu4bN52oMaZHU3HynmYxfu/STbuvlYp
3IHusU5IugGKwk1IqPJDY88NJFX78JOT+yuhPecmRP22JWw2FLk=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:37 2023 by rpki-client on console-fra.rpki-client.org