Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLT5dK5NHaHDwjqHk4K1ibwssWk.roa
File: gLT5dK5NHaHDwjqHk4K1ibwssWk.roa (raw, json)
Hash identifier: vGeKsXhLRsde8jG/mfsLYhEOAXzx5iN/lB2z//66F6M=
Subject key identifier: 80:B4:F9:74:AE:4D:1D:A1:C3:C2:3A:87:93:82:B5:89:BC:2C:B1:69
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1613
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLT5dK5NHaHDwjqHk4K1ibwssWk.roa
Signing time: Sun 07 Feb 2021 12:08:11 +0000
ROA not before: Sun 07 Feb 2021 12:08:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5651 (0x1613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:08:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=80B4F974AE4D1DA1C3C23A879382B589BC2CB169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:9e:97:1a:c7:ea:3e:56:a7:88:d8:ed:3f:
a2:e7:17:31:62:77:bb:63:f6:19:e3:9a:ed:c9:4b:
fa:18:75:81:c6:3d:76:d1:13:11:5a:fe:48:1b:4b:
69:79:fe:d3:97:75:e2:02:70:3c:a5:76:92:d9:56:
57:cc:48:22:60:b2:25:b6:9c:ed:9a:c6:f8:23:9e:
a3:4f:30:e8:4e:95:af:25:f2:24:61:99:a2:d7:80:
2d:c7:df:59:07:3b:ae:aa:1c:54:0e:9e:7a:62:8b:
4f:f0:31:5f:e7:9a:40:cc:69:ff:20:05:e4:ab:44:
4c:3f:45:ce:55:9a:d6:6a:e3:56:73:23:1f:e2:87:
4d:8c:1c:95:72:bf:9b:7b:76:7d:4f:0f:fe:9b:b3:
b6:01:e3:da:6f:05:2a:29:ec:3d:ac:ff:3a:3e:0d:
fa:f8:f4:fe:ec:53:ac:b2:5b:4c:0a:0f:a3:0e:b2:
ef:79:0b:4e:6e:7d:a0:1c:50:42:ab:f1:b2:3c:bb:
1e:35:64:be:b1:aa:bd:0c:cf:10:9f:5a:53:8c:9e:
e9:4c:8e:99:34:62:83:80:8a:e3:30:7d:45:13:0a:
c6:84:9d:3e:ae:f4:98:01:eb:47:f0:42:1f:ad:8d:
41:38:5b:e7:8a:45:6e:c6:9c:8d:72:17:2d:c0:7b:
ac:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B4:F9:74:AE:4D:1D:A1:C3:C2:3A:87:93:82:B5:89:BC:2C:B1:69
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLT5dK5NHaHDwjqHk4K1ibwssWk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.8.0/22
Signature Algorithm: sha256WithRSAEncryption
18:17:e4:46:af:16:05:cd:0f:71:1d:80:9b:ac:dd:2f:2c:30:
8e:ec:75:ac:6b:52:0f:3c:14:cf:40:e6:87:00:b5:51:48:75:
b0:83:1e:f1:ec:18:68:00:f7:59:b3:2e:01:c6:40:08:f4:9d:
25:ee:7d:53:68:27:02:5e:4f:43:83:11:54:a5:ea:dd:d9:14:
29:9c:0b:79:e5:b5:a7:08:e0:35:8d:a1:10:7a:34:55:ce:15:
b8:48:05:de:c9:eb:07:e7:c4:97:2c:d6:68:81:cc:f9:73:91:
7a:58:f4:d8:25:77:3b:c1:94:f9:f9:2c:37:3f:a2:3a:ae:51:
1c:be:9c:69:06:c0:af:d7:07:b9:05:bb:7c:4b:14:c1:61:d0:
4e:a4:72:cd:88:54:9e:c9:1d:e0:60:b4:60:04:24:fd:7f:e3:
4c:58:69:b0:c8:b7:a0:ad:e7:8c:0f:b0:b1:c0:0f:8a:6e:6f:
4c:45:19:18:be:b5:ff:d6:80:f0:7e:bd:df:8d:9a:7d:f2:78:
07:db:6b:05:68:13:e5:13:f6:da:27:53:35:15:7b:09:39:f1:
53:47:cf:f4:68:9f:93:09:c5:83:a1:f1:9e:19:24:d9:3a:5d:
7d:0a:18:8b:c1:bc:68:c3:7d:98:7c:6e:e0:92:ec:99:1f:70:
7f:34:68:e4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFhMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjA4MTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDgwQjRGOTc0QUU0RDFE
QTFDM0MyM0E4NzkzODJCNTg5QkMyQ0IxNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfZJ6XGsfqPlaniNjtP6LnFzFid7tj9hnjmu3JS/oYdYHGPXbR
ExFa/kgbS2l5/tOXdeICcDyldpLZVlfMSCJgsiW2nO2axvgjnqNPMOhOla8l8iRh
maLXgC3H31kHO66qHFQOnnpii0/wMV/nmkDMaf8gBeSrREw/Rc5VmtZq41ZzIx/i
h02MHJVyv5t7dn1PD/6bs7YB49pvBSop7D2s/zo+Dfr49P7sU6yyW0wKD6MOsu95
C05ufaAcUEKr8bI8ux41ZL6xqr0MzxCfWlOMnulMjpk0YoOAiuMwfUUTCsaEnT6u
9JgB60fwQh+tjUE4W+eKRW7GnI1yFy3Ae6xvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUgLT5dK5NHaHDwjqHk4K1ibwssWkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dMVDVkSzVOSGFIRHdqcUhr
NEsxaWJ3c3NXay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wwgwDQYJKoZIhvcNAQELBQADggEBABgX5EavFgXND3EdgJus3S8sMI7sdaxrUg88
FM9A5ocAtVFIdbCDHvHsGGgA91mzLgHGQAj0nSXufVNoJwJeT0ODEVSl6t3ZFCmc
C3nltacI4DWNoRB6NFXOFbhIBd7J6wfnxJcs1miBzPlzkXpY9NgldzvBlPn5LDc/
ojquURy+nGkGwK/XB7kFu3xLFMFh0E6kcs2IVJ7JHeBgtGAEJP1/40xYabDIt6Ct
54wPsLHAD4pub0xFGRi+tf/WgPB+vd+Nmn3yeAfbawVoE+UT9tonUzUVewk58VNH
z/Ron5MJxYOh8Z4ZJNk6XX0KGIvBvGjDfZh8buCS7JkfcH80aOQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org