Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tQivYSn_kKoo9SuuuuicCOS95cs.roa
File: tQivYSn_kKoo9SuuuuicCOS95cs.roa (raw, json)
Hash identifier: fKBKilPuKUoUwF03RGgrGlTftmO7JiaX5OZUrbC/qeg=
Subject key identifier: B5:08:AF:61:29:FF:90:AA:28:F5:2B:AE:BA:E8:9C:08:E4:BD:E5:CB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 17DF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tQivYSn_kKoo9SuuuuicCOS95cs.roa
Signing time: Sun 07 Feb 2021 12:24:18 +0000
ROA not before: Sun 07 Feb 2021 12:24:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 211.76.123.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6111 (0x17df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:24:18 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B508AF6129FF90AA28F52BAEBAE89C08E4BDE5CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:d1:64:5a:c4:33:92:c0:94:a6:c7:46:43:
0c:a8:40:0e:2a:5e:fc:29:75:1b:e7:e7:e9:da:d7:
1b:d9:b9:8f:03:e5:09:7b:52:9d:96:20:83:e0:9f:
9d:9a:d3:6c:b1:56:c6:18:7e:66:a9:bf:31:c9:76:
6d:c9:a1:33:39:a5:b1:c4:b3:bd:0c:01:88:82:00:
65:33:fe:46:a5:ee:62:e7:f6:b8:7f:76:66:68:cb:
4e:cd:66:b8:32:14:80:31:ca:b6:85:10:66:05:d7:
8e:4a:77:8c:27:83:54:00:45:dd:1c:28:1a:71:02:
eb:b5:97:3b:ae:d7:81:6a:47:fb:cc:9f:2d:b6:30:
5f:e5:f5:eb:c8:56:92:34:29:b0:40:ec:a0:7c:48:
3d:9d:ff:cc:4b:b0:6e:a0:21:42:83:60:64:ae:a5:
ff:71:fa:01:8c:61:6a:b2:2d:3a:8a:79:bb:62:cb:
e1:31:8a:f5:12:55:bd:36:4e:70:d1:c7:3b:33:d0:
c0:ac:cd:91:f6:bc:b4:23:1b:b6:95:a2:ec:ac:b4:
cd:55:0c:02:d7:dd:44:c9:f7:fd:a5:a1:70:04:54:
77:0a:2b:30:34:ef:70:e4:1c:ee:dc:9a:4b:56:90:
35:08:f4:39:d0:19:ed:3d:94:09:68:83:e6:1c:2c:
0c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:08:AF:61:29:FF:90:AA:28:F5:2B:AE:BA:E8:9C:08:E4:BD:E5:CB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tQivYSn_kKoo9SuuuuicCOS95cs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.123.0/25
Signature Algorithm: sha256WithRSAEncryption
14:11:aa:39:1c:1d:4e:1a:ff:9a:77:9b:d7:72:db:de:3c:b1:
33:2a:05:c9:0a:0e:33:94:e9:c2:39:f3:23:b4:8f:f5:a7:68:
a6:fb:6e:f3:3c:f2:bc:71:f0:f0:c7:34:26:f7:81:3f:38:df:
32:cf:39:9b:6a:18:3a:37:d0:43:24:1d:8b:1a:1c:c4:2d:a6:
a9:18:c2:28:56:48:fa:2f:27:45:0e:68:11:a3:eb:e7:8d:34:
03:93:27:6e:7a:7e:47:36:20:60:ab:7b:53:25:c8:8a:2c:77:
36:3c:4c:5a:da:1a:5f:61:38:d9:d3:bf:8b:71:87:df:9f:c2:
fc:2a:8b:b2:cf:df:4e:3b:c7:46:3c:a4:0c:76:90:d9:08:95:
85:d7:3b:03:1e:81:df:d1:bb:35:b2:b4:e3:a7:38:5e:61:c4:
03:00:a3:29:42:46:d4:05:7f:d2:49:44:28:9a:f6:62:4c:5a:
d9:ef:6e:ea:8e:5e:b9:78:3a:a6:dd:3a:99:77:7b:e5:6d:95:
81:d4:53:64:44:93:f4:be:e5:ae:0f:a9:64:a5:dc:24:4f:6a:
e8:81:85:da:f6:78:27:d5:87:30:e6:f3:69:d0:da:80:34:63:
56:b0:c6:de:15:d2:fd:82:af:f5:3c:3b:03:6f:a0:a6:b1:a4:
59:a8:c9:87
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICF98wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjI0MThaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI1MDhBRjYxMjlGRjkw
QUEyOEY1MkJBRUJBRTg5QzA4RTRCREU1Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZHNFkWsQzksCUpsdGQwyoQA4qXvwpdRvn5+na1xvZuY8D5Ql7
Up2WIIPgn52a02yxVsYYfmapvzHJdm3JoTM5pbHEs70MAYiCAGUz/kal7mLn9rh/
dmZoy07NZrgyFIAxyraFEGYF145Kd4wng1QARd0cKBpxAuu1lzuu14FqR/vMny22
MF/l9evIVpI0KbBA7KB8SD2d/8xLsG6gIUKDYGSupf9x+gGMYWqyLTqKebtiy+Ex
ivUSVb02TnDRxzsz0MCszZH2vLQjG7aVouystM1VDALX3UTJ9/2loXAEVHcKKzA0
73DkHO7cmktWkDUI9DnQGe09lAlog+YcLAzVAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUtQivYSn/kKoo9SuuuuicCOS95cswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RRaXZZU25fa0tvbzlTdXV1
dWljQ09TOTVjcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT
THsAMA0GCSqGSIb3DQEBCwUAA4IBAQAUEao5HB1OGv+ad5vXctvePLEzKgXJCg4z
lOnCOfMjtI/1p2im+27zPPK8cfDwxzQm94E/ON8yzzmbahg6N9BDJB2LGhzELaap
GMIoVkj6LydFDmgRo+vnjTQDkyduen5HNiBgq3tTJciKLHc2PExa2hpfYTjZ07+L
cYffn8L8Kouyz99OO8dGPKQMdpDZCJWF1zsDHoHf0bs1srTjpzheYcQDAKMpQkbU
BX/SSUQomvZiTFrZ727qjl65eDqm3TqZd3vlbZWB1FNkRJP0vuWuD6lkpdwkT2ro
gYXa9ngn1Ycw5vNp0NqANGNWsMbeFdL9gq/1PDsDb6CmsaRZqMmH
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:41 2023 by rpki-client on console-fra.rpki-client.org