Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n_ga-APJ-8UwyoFhuXiLzMjTukU.roa
File: n_ga-APJ-8UwyoFhuXiLzMjTukU.roa (raw, json)
Hash identifier: z/Rh/QFG8ZZUOoGJUZy2qujD/tv0W+UvDjZdistPKpE=
Subject key identifier: 9F:F8:1A:F8:03:C9:FB:C5:30:CA:81:61:B9:78:8B:CC:C8:D3:BA:45
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1ADD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n_ga-APJ-8UwyoFhuXiLzMjTukU.roa
Signing time: Wed 29 Sep 2021 02:45:51 +0000
ROA not before: Wed 29 Sep 2021 02:45:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6877 (0x1add)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:51 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9FF81AF803C9FBC530CA8161B9788BCCC8D3BA45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:38:00:4d:a3:1a:3d:8f:ca:fe:06:cd:bc:
51:d4:c7:64:c5:5b:45:be:87:06:f3:50:9c:be:4e:
37:de:ec:9f:40:67:fe:cf:92:2a:9e:31:65:bc:24:
97:63:77:55:4d:81:35:36:e4:a8:b6:4e:d5:0e:2b:
c0:64:81:2f:4d:5b:8a:8e:66:da:fc:1e:de:bd:b0:
ce:a7:b8:21:cc:98:f1:40:a9:7f:30:40:48:52:f5:
03:9e:b0:18:9b:78:6e:10:ec:ca:78:46:13:86:ef:
7c:7c:36:3f:20:da:e9:2d:40:ed:36:01:c0:a8:93:
dc:18:66:3c:8d:3c:9b:e5:ec:13:0b:66:ad:1f:30:
38:bb:e7:e6:2f:55:bf:bc:35:3e:fa:0f:02:b8:60:
d2:05:3e:5f:eb:36:ec:b1:f8:cf:5e:74:2d:05:8b:
19:ab:10:82:5c:d6:00:7b:b2:37:cb:56:b5:51:72:
fa:0f:6a:a5:10:1e:4f:f8:dd:6f:32:a7:df:ba:67:
e7:ff:1a:64:e1:7a:d0:73:a7:36:da:ce:5e:c2:1e:
c0:e3:24:2f:c7:19:a9:12:ba:6a:6a:be:4c:3c:c0:
80:80:88:b3:2a:95:e2:9a:e4:32:04:cd:3b:24:9b:
e0:7b:7b:b3:bd:43:be:59:89:4d:be:c6:c1:94:00:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F8:1A:F8:03:C9:FB:C5:30:CA:81:61:B9:78:8B:CC:C8:D3:BA:45
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n_ga-APJ-8UwyoFhuXiLzMjTukU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.152.0/21
Signature Algorithm: sha256WithRSAEncryption
96:b3:d8:3b:c4:84:46:31:50:a9:12:5d:0c:47:17:d7:99:b5:
89:ff:d7:f5:bf:ca:1a:9f:f9:a4:5c:0d:0f:39:48:55:55:10:
e1:98:cb:4a:75:c7:f1:49:23:a5:25:06:e6:93:50:ce:56:5b:
09:87:6f:14:5f:8d:00:14:3b:ee:67:9a:5c:aa:fd:88:85:56:
fd:2c:a8:cc:23:3d:17:5d:03:ce:32:ee:17:b0:70:67:45:93:
38:e0:45:9a:95:45:b8:70:ef:bf:65:82:ca:e8:e5:e8:33:59:
65:01:41:0e:9d:25:83:45:7e:aa:b2:b3:aa:3d:65:2c:70:d8:
7f:3d:61:0a:62:e9:0a:6d:58:9e:de:55:17:95:ec:44:04:17:
6c:61:94:a7:75:d1:14:cd:1d:95:4d:38:93:4f:e4:29:ec:17:
c1:93:b7:6e:8e:86:bf:ad:70:3b:03:93:50:6c:15:9d:29:2c:
cc:07:b5:f9:b8:70:2c:93:69:c1:5c:e2:8a:3d:7a:cc:5c:e8:
cd:b3:b4:9d:90:12:1e:25:e4:fc:91:75:38:1e:71:75:89:dc:
d9:93:8f:98:d4:d2:57:82:a8:d9:a5:8e:41:76:a0:e2:95:95:
8b:bd:b8:2d:be:54:d5:e7:c5:ec:db:59:ee:2f:47:f9:2a:c9:
26:cf:db:85
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGt0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ1NTFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDlGRjgxQUY4MDNDOUZC
QzUzMENBODE2MUI5Nzg4QkNDQzhEM0JBNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTvjgATaMaPY/K/gbNvFHUx2TFW0W+hwbzUJy+Tjfe7J9AZ/7P
kiqeMWW8JJdjd1VNgTU25Ki2TtUOK8BkgS9NW4qOZtr8Ht69sM6nuCHMmPFAqX8w
QEhS9QOesBibeG4Q7Mp4RhOG73x8Nj8g2uktQO02AcCok9wYZjyNPJvl7BMLZq0f
MDi75+YvVb+8NT76DwK4YNIFPl/rNuyx+M9edC0FixmrEIJc1gB7sjfLVrVRcvoP
aqUQHk/43W8yp9+6Z+f/GmThetBzpzbazl7CHsDjJC/HGakSumpqvkw8wICAiLMq
leKa5DIEzTskm+B7e7O9Q75ZiU2+xsGUAHijAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUn/ga+APJ+8UwyoFhuXiLzMjTukUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL25fZ2EtQVBKLThVd3lvRmh1
WGlMek1qVHVrVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wpgwDQYJKoZIhvcNAQELBQADggEBAJaz2DvEhEYxUKkSXQxHF9eZtYn/1/W/yhqf
+aRcDQ85SFVVEOGYy0p1x/FJI6UlBuaTUM5WWwmHbxRfjQAUO+5nmlyq/YiFVv0s
qMwjPRddA84y7hewcGdFkzjgRZqVRbhw779lgsro5egzWWUBQQ6dJYNFfqqys6o9
ZSxw2H89YQpi6QptWJ7eVReV7EQEF2xhlKd10RTNHZVNOJNP5CnsF8GTt26Ohr+t
cDsDk1BsFZ0pLMwHtfm4cCyTacFc4oo9esxc6M2ztJ2QEh4l5PyRdTgecXWJ3NmT
j5jU0leCqNmljkF2oOKVlYu9uC2+VNXnxezbWe4vR/kqySbP24U=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:38 2025 by rpki-client