Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/txFZ9z9Q8B0QuMhepBEaskTIXKY.roa
File: txFZ9z9Q8B0QuMhepBEaskTIXKY.roa (raw, json)
Hash identifier: yQ2Q8ETBabgkSxF+uPZWJ7GLu2HszLvJmB07jhHopsw=
Subject key identifier: B7:11:59:F7:3F:50:F0:1D:10:B8:C8:5E:A4:11:1A:B2:44:C8:5C:A6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 167B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/txFZ9z9Q8B0QuMhepBEaskTIXKY.roa
Signing time: Sun 07 Feb 2021 12:10:45 +0000
ROA not before: Sun 07 Feb 2021 12:10:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.180.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5755 (0x167b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:10:45 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B71159F73F50F01D10B8C85EA4111AB244C85CA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:72:81:f1:51:a7:07:42:cc:dc:66:e3:a6:4f:
e6:a3:d8:5a:3e:75:7a:02:e5:17:b8:b8:1d:d5:aa:
c1:62:56:ea:ce:9c:f8:b0:63:84:68:1b:b4:d7:6c:
ce:ab:ec:51:09:95:36:63:7b:42:4f:e6:00:25:a3:
92:85:2c:75:48:1c:eb:6f:c5:cb:96:b0:78:be:fb:
b4:ef:3d:6c:7a:a7:ee:22:63:6e:d0:4b:2c:8f:62:
75:9e:81:a9:ae:7e:bd:8c:33:30:e1:02:5c:ae:3c:
1d:56:9e:71:83:d0:2b:82:1e:e2:65:2d:4c:d2:e8:
df:74:b7:bc:d3:df:92:6d:a1:09:4d:90:64:3a:cf:
de:ba:d6:a5:5a:b9:3b:29:60:95:f3:b3:f3:b1:2e:
8e:db:44:cc:88:aa:99:4e:07:51:b7:c1:ed:7b:95:
08:09:66:ce:16:e4:c8:9a:30:13:5c:97:14:17:65:
57:8f:d6:69:ce:c8:53:cf:84:bd:6f:a2:f7:f9:f2:
96:85:2a:9b:99:cd:ba:74:c7:d8:fa:97:99:79:f4:
2a:f4:d0:2b:58:17:1c:c5:61:22:ab:cd:47:31:77:
81:75:3d:2a:cb:74:fc:e7:da:93:0c:76:ef:b3:25:
c4:5a:14:dc:a5:f9:06:76:e2:b2:f0:7b:64:2c:80:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:59:F7:3F:50:F0:1D:10:B8:C8:5E:A4:11:1A:B2:44:C8:5C:A6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/txFZ9z9Q8B0QuMhepBEaskTIXKY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.180.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:c9:cf:45:e4:c2:21:23:60:4b:ac:61:e1:90:fb:b9:7c:4c:
d8:f9:01:04:6c:85:e2:85:f3:6b:47:c0:e3:90:32:c4:38:42:
2e:f0:bd:1f:f4:c7:a7:31:30:f5:1a:93:42:f4:56:a3:1d:c9:
b6:db:d2:16:5e:ce:d6:14:aa:67:e4:8e:a3:13:1f:05:97:4b:
73:af:87:60:9b:a4:68:47:b5:26:f2:cc:ab:ea:26:6d:6e:64:
57:d7:56:62:8b:73:09:36:5a:c7:c4:24:4f:9b:13:67:2f:7f:
c5:5e:4d:94:98:46:32:39:68:4e:8b:2b:0e:f5:d8:3a:d6:bf:
a1:42:7c:03:6c:34:e6:97:82:6d:4d:57:d2:6d:3f:5f:a5:6d:
9d:cc:47:3b:ff:45:61:96:d7:b7:d9:e8:9c:20:e1:d6:8b:3b:
7d:89:dd:32:21:46:ed:13:22:9d:0c:20:6c:d9:f4:42:66:d2:
05:e1:9a:63:b8:74:27:97:32:93:d2:77:47:cf:08:89:14:3e:
8a:87:8b:54:88:bc:f2:de:4d:2d:33:78:5d:f6:c0:1d:51:8a:
be:d7:c3:f3:da:c9:77:2a:6a:cb:38:c7:72:88:ba:5e:93:8e:
01:d7:31:32:05:f3:bc:74:f0:6c:fa:ca:65:94:e6:ac:70:af:
f0:f2:9a:7e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFnswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjEwNDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI3MTE1OUY3M0Y1MEYw
MUQxMEI4Qzg1RUE0MTExQUIyNDRDODVDQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDecoHxUacHQszcZuOmT+aj2Fo+dXoC5Re4uB3VqsFiVurOnPiw
Y4RoG7TXbM6r7FEJlTZje0JP5gAlo5KFLHVIHOtvxcuWsHi++7TvPWx6p+4iY27Q
SyyPYnWegamufr2MMzDhAlyuPB1WnnGD0CuCHuJlLUzS6N90t7zT35JtoQlNkGQ6
z9661qVauTspYJXzs/OxLo7bRMyIqplOB1G3we17lQgJZs4W5MiaMBNclxQXZVeP
1mnOyFPPhL1vovf58paFKpuZzbp0x9j6l5l59Cr00CtYFxzFYSKrzUcxd4F1PSrL
dPzn2pMMdu+zJcRaFNyl+QZ24rLwe2QsgDg9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtxFZ9z9Q8B0QuMhepBEaskTIXKYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3R4Rlo5ejlROEIwUXVNaGVw
QkVhc2tUSVhLWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7
w7QwDQYJKoZIhvcNAQELBQADggEBAEvJz0XkwiEjYEusYeGQ+7l8TNj5AQRsheKF
82tHwOOQMsQ4Qi7wvR/0x6cxMPUak0L0VqMdybbb0hZeztYUqmfkjqMTHwWXS3Ov
h2CbpGhHtSbyzKvqJm1uZFfXVmKLcwk2WsfEJE+bE2cvf8VeTZSYRjI5aE6LKw71
2DrWv6FCfANsNOaXgm1NV9JtP1+lbZ3MRzv/RWGW17fZ6Jwg4daLO32J3TIhRu0T
Ip0MIGzZ9EJm0gXhmmO4dCeXMpPSd0fPCIkUPoqHi1SIvPLeTS0zeF32wB1Rir7X
w/PayXcqass4x3KIul6TjgHXMTIF87x08Gz6ymWU5qxwr/Dymn4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org