Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tzMUhJvMjjk07OVPtiA-dy-54PU.roa
File: tzMUhJvMjjk07OVPtiA-dy-54PU.roa (raw, json)
Hash identifier: BI29RfUnX73sThepPM3xR5aDuTUwb2NhhKqzS3sMHG8=
Subject key identifier: B7:33:14:84:9B:CC:8E:39:34:EC:E5:4F:B6:20:3E:77:2F:B9:E0:F5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 17CF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tzMUhJvMjjk07OVPtiA-dy-54PU.roa
Signing time: Sun 07 Feb 2021 12:23:45 +0000
ROA not before: Sun 07 Feb 2021 12:23:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.204.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6095 (0x17cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:23:45 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B73314849BCC8E3934ECE54FB6203E772FB9E0F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:0e:01:60:15:01:fd:b8:8b:fc:90:f4:98:
2a:29:b0:68:56:f0:96:8c:a4:79:6a:60:27:cf:b6:
b4:9e:15:7e:68:d9:2c:11:a7:9c:21:98:80:0f:a2:
19:b6:4d:29:7e:25:5d:4c:6c:41:8b:03:fb:e5:ea:
80:aa:04:4c:04:ce:2c:16:67:65:80:93:a2:d4:70:
22:fd:43:d3:5b:58:a5:6d:c3:29:5d:5b:2c:1e:8f:
93:21:2e:8c:07:2a:a3:f1:ae:a9:b4:c6:d4:9b:f4:
93:24:14:ae:66:46:e2:92:f6:60:a5:53:80:8e:15:
ec:fc:b5:6d:82:8a:95:14:27:09:e6:fc:e2:b4:cb:
d4:04:b3:ec:06:07:dd:16:28:e3:c7:99:b8:ca:e4:
e8:72:dd:61:d9:ef:84:d4:65:8a:3d:9e:53:f7:a7:
d2:e7:22:94:d3:00:ab:9d:de:77:c3:22:f9:7a:59:
f5:11:a3:b4:80:42:2e:ec:cc:bc:4e:08:fa:67:f2:
0d:89:a3:d0:6c:ac:5e:ab:b4:f2:42:5a:16:be:c4:
a6:9a:76:0e:a6:76:17:35:81:ae:d8:83:41:3b:d7:
0f:7a:d3:e6:2c:48:2a:15:00:9f:88:45:58:34:cc:
22:20:31:78:5c:dd:39:11:ec:c9:b2:e5:8f:7f:3e:
c5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:33:14:84:9B:CC:8E:39:34:EC:E5:4F:B6:20:3E:77:2F:B9:E0:F5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tzMUhJvMjjk07OVPtiA-dy-54PU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.0/26
Signature Algorithm: sha256WithRSAEncryption
a3:d5:83:05:57:82:87:68:d7:dd:6d:5c:a7:60:9c:10:e5:e3:
08:ed:85:98:cc:3d:a1:1b:30:1e:6a:9c:45:c2:82:8d:b8:dd:
ed:31:d1:b7:01:c8:70:11:3e:de:fe:ac:3f:23:db:9f:cc:df:
f9:12:c5:a7:fb:da:fa:06:64:ae:7a:53:5f:32:d2:0e:b3:58:
ba:ee:7c:79:64:b0:2b:fa:fa:44:ba:e7:22:8a:76:25:ae:92:
7e:21:52:82:eb:5e:a9:35:da:a0:98:94:86:25:f4:3f:85:57:
e6:55:1e:e8:82:b0:3d:97:3e:36:6c:90:52:50:4f:37:1e:f5:
a0:fd:aa:39:c1:fa:ea:8f:4c:b4:04:9e:c8:c3:ae:10:a9:63:
4e:d6:ba:c6:21:bd:78:5c:70:81:ae:8f:e6:61:a6:4a:52:ad:
e8:3d:9c:10:8f:d3:2f:1e:40:92:61:32:fc:fa:1a:18:cb:62:
51:b7:85:f1:48:ea:0c:a2:12:b6:1d:bb:f4:ed:19:b7:7c:12:
6c:91:1d:0c:92:ea:1d:91:ab:84:53:fa:ba:99:f7:18:0c:ad:
f4:dc:44:fa:56:19:6c:63:99:ed:de:15:e8:1b:fa:cd:8e:ef:
a6:a7:b0:d7:1d:73:bd:b9:07:6d:95:4e:d1:d1:b5:c6:49:93:
da:aa:f4:6a
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICF88wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjIzNDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI3MzMxNDg0OUJDQzhF
MzkzNEVDRTU0RkI2MjAzRTc3MkZCOUUwRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqDA4BYBUB/biL/JD0mCopsGhW8JaMpHlqYCfPtrSeFX5o2SwR
p5whmIAPohm2TSl+JV1MbEGLA/vl6oCqBEwEziwWZ2WAk6LUcCL9Q9NbWKVtwyld
Wywej5MhLowHKqPxrqm0xtSb9JMkFK5mRuKS9mClU4COFez8tW2CipUUJwnm/OK0
y9QEs+wGB90WKOPHmbjK5Ohy3WHZ74TUZYo9nlP3p9LnIpTTAKud3nfDIvl6WfUR
o7SAQi7szLxOCPpn8g2Jo9BsrF6rtPJCWha+xKaadg6mdhc1ga7Yg0E71w960+Ys
SCoVAJ+IRVg0zCIgMXhc3TkR7Mmy5Y9/PsU5AgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUtzMUhJvMjjk07OVPtiA+dy+54PUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3R6TVVoSnZNamprMDdPVlB0
aUEtZHktNTRQVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7
wswAMA0GCSqGSIb3DQEBCwUAA4IBAQCj1YMFV4KHaNfdbVynYJwQ5eMI7YWYzD2h
GzAeapxFwoKNuN3tMdG3AchwET7e/qw/I9ufzN/5EsWn+9r6BmSuelNfMtIOs1i6
7nx5ZLAr+vpEuuciinYlrpJ+IVKC616pNdqgmJSGJfQ/hVfmVR7ogrA9lz42bJBS
UE83HvWg/ao5wfrqj0y0BJ7Iw64QqWNO1rrGIb14XHCBro/mYaZKUq3oPZwQj9Mv
HkCSYTL8+hoYy2JRt4XxSOoMohK2Hbv07Rm3fBJskR0MkuodkauEU/q6mfcYDK30
3ET6VhlsY5nt3hXoG/rNju+mp7DXHXO9uQdtlU7R0bXGSZPaqvRq
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org