Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jkI8LnJr0-jvdyFNWK3-Rgg-ngc.roa
File: jkI8LnJr0-jvdyFNWK3-Rgg-ngc.roa (raw, json)
Hash identifier: 656Dw4QIJm/728ZrBitWJeFLq98hHBpp4zVjbwfjE7s=
Subject key identifier: 8E:42:3C:2E:72:6B:D3:E8:EF:77:21:4D:58:AD:FE:46:08:3E:9E:07
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F3D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jkI8LnJr0-jvdyFNWK3-Rgg-ngc.roa
Signing time: Tue 29 Sep 2020 09:56:41 +0000
ROA not before: Tue 29 Sep 2020 09:56:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3901 (0xf3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:41 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8E423C2E726BD3E8EF77214D58ADFE46083E9E07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:57:b7:58:40:e1:da:30:b3:aa:06:95:61:78:
c8:62:a5:2a:f8:65:35:a7:5b:62:d0:45:bb:51:1b:
38:fd:91:85:2e:4c:88:c1:9f:8a:c7:ac:d6:3f:03:
46:84:0c:71:d6:68:91:dd:63:b5:99:b8:21:92:bb:
6d:5c:65:95:89:b7:9c:b5:da:6e:d3:97:36:8c:3d:
42:60:5b:56:23:e9:09:0d:36:73:71:51:e6:8b:e4:
1c:40:47:32:dc:30:74:86:66:0e:5d:e2:22:b7:2c:
8c:3d:3a:7d:fb:a1:8e:1a:86:5c:c4:8f:22:3c:c5:
ad:75:6b:32:ff:dc:a1:74:95:51:60:1b:0a:c1:5f:
bc:6b:49:a2:1d:d1:a3:ac:db:5e:76:43:8f:07:ab:
a2:0d:ea:64:8c:49:fa:e6:38:e2:00:bb:54:13:0b:
2d:f3:6c:5d:37:d1:a3:a3:9f:f9:d3:46:70:31:fd:
10:a3:2c:68:28:ce:ab:f4:62:84:56:a2:1b:23:bc:
05:ac:61:e2:d6:f2:36:a5:c1:d0:8f:47:f0:0a:c1:
cc:c3:4c:30:90:2f:88:5d:4b:3f:7f:94:ac:fb:6b:
1d:ef:f2:4f:4a:01:49:a3:53:05:d8:b5:13:7e:d5:
b1:3a:15:8b:fb:e0:d8:62:a3:9d:0b:5a:65:d5:3e:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:42:3C:2E:72:6B:D3:E8:EF:77:21:4D:58:AD:FE:46:08:3E:9E:07
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jkI8LnJr0-jvdyFNWK3-Rgg-ngc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.208.0/21
Signature Algorithm: sha256WithRSAEncryption
69:fd:1b:94:21:29:33:df:63:88:dd:86:ea:cf:a7:cd:73:fd:
90:91:fa:6b:21:fe:b1:b3:c0:96:19:5f:98:aa:d6:b5:fb:3e:
06:a5:16:f3:f6:bd:0d:9b:07:9e:ca:35:54:03:9d:a3:e7:51:
1c:cf:88:c1:4e:24:07:c8:18:63:b9:cd:94:ba:92:f9:98:95:
54:73:f9:5e:56:73:7e:be:c9:a5:56:d3:bb:51:a5:41:5e:e9:
60:35:35:a0:48:ed:45:0b:b1:b3:35:a2:99:ab:8c:19:bf:ea:
87:97:b8:4f:23:2e:7a:f1:65:8a:13:74:5c:fb:89:41:06:33:
a6:24:2c:65:fe:ff:ef:61:2d:63:23:41:c6:68:a3:6e:d1:29:
91:ca:91:b6:f7:bd:ed:ad:80:b8:65:06:9c:16:dc:05:0f:d4:
9b:19:20:7f:e9:21:63:4e:6a:4f:04:66:bb:62:eb:20:34:5f:
7c:89:69:50:f0:85:b4:10:69:be:f0:f1:a5:06:a1:b2:d4:15:
0c:9f:80:df:aa:03:53:26:87:05:28:52:7e:4a:c7:b6:67:19:
db:3c:e4:36:81:4e:58:07:17:10:8d:6c:81:90:dc:ea:36:b1:
63:7f:c2:8f:56:a2:95:8a:ea:86:67:95:2f:8c:54:cc:1b:68:
0d:38:c5:1a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDz0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2NDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDhFNDIzQzJFNzI2QkQz
RThFRjc3MjE0RDU4QURGRTQ2MDgzRTlFMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxV7dYQOHaMLOqBpVheMhipSr4ZTWnW2LQRbtRGzj9kYUuTIjB
n4rHrNY/A0aEDHHWaJHdY7WZuCGSu21cZZWJt5y12m7TlzaMPUJgW1Yj6QkNNnNx
UeaL5BxARzLcMHSGZg5d4iK3LIw9On37oY4ahlzEjyI8xa11azL/3KF0lVFgGwrB
X7xrSaId0aOs2152Q48Hq6IN6mSMSfrmOOIAu1QTCy3zbF030aOjn/nTRnAx/RCj
LGgozqv0YoRWohsjvAWsYeLW8jalwdCPR/AKwczDTDCQL4hdSz9/lKz7ax3v8k9K
AUmjUwXYtRN+1bE6FYv74Nhio50LWmXVPpV7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjkI8LnJr0+jvdyFNWK3+Rgg+ngcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2prSThMbkpyMC1qdmR5Rk5X
SzMtUmdnLW5nYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wdAwDQYJKoZIhvcNAQELBQADggEBAGn9G5QhKTPfY4jdhurPp81z/ZCR+msh/rGz
wJYZX5iq1rX7PgalFvP2vQ2bB57KNVQDnaPnURzPiMFOJAfIGGO5zZS6kvmYlVRz
+V5Wc36+yaVW07tRpUFe6WA1NaBI7UULsbM1opmrjBm/6oeXuE8jLnrxZYoTdFz7
iUEGM6YkLGX+/+9hLWMjQcZoo27RKZHKkbb3ve2tgLhlBpwW3AUP1JsZIH/pIWNO
ak8EZrti6yA0X3yJaVDwhbQQab7w8aUGobLUFQyfgN+qA1MmhwUoUn5Kx7ZnGds8
5DaBTlgHFxCNbIGQ3Oo2sWN/wo9WopWK6oZnlS+MVMwbaA04xRo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org