Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uFKgIBpbMZ08M212w3ot5EyK3eI.roa
File: uFKgIBpbMZ08M212w3ot5EyK3eI.roa (raw, json)
Hash identifier: XYZwv+phPJ5o0f+lM8mnFd4uYoYuVkMNXYOXyopBEPA=
Subject key identifier: B8:52:A0:20:1A:5B:31:9D:3C:33:6D:76:C3:7A:2D:E4:4C:8A:DD:E2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15C3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uFKgIBpbMZ08M212w3ot5EyK3eI.roa
Signing time: Sun 07 Feb 2021 12:06:24 +0000
ROA not before: Sun 07 Feb 2021 12:06:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5571 (0x15c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:06:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B852A0201A5B319D3C336D76C37A2DE44C8ADDE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:d0:ee:71:ec:4d:c3:9d:27:e9:39:88:fb:
52:c3:ba:ca:c9:7e:59:ac:17:12:ff:b9:ef:cc:57:
d2:ed:4f:30:47:34:26:d8:bc:a0:d0:1c:14:a7:ce:
7d:60:b8:03:42:64:62:af:a4:c9:0a:86:3d:69:63:
c4:12:1e:83:46:53:31:a7:bb:b6:cf:fc:c0:db:2d:
6e:d9:ea:e7:b9:2a:8e:3e:80:d0:b5:46:98:dd:a6:
c7:ed:cc:8a:47:c8:7f:89:7f:3b:01:78:ce:43:18:
0c:3d:bd:2f:72:92:a4:ae:89:42:4e:24:b0:21:d9:
f8:e1:25:05:e9:b3:30:3c:01:79:e2:fb:da:e0:7a:
f7:e0:6f:3f:37:60:8a:82:b4:05:d0:4b:1b:2b:62:
a9:3b:23:77:d7:53:89:4d:3c:cd:48:22:f9:46:dc:
12:d4:06:cf:07:e0:6e:be:d2:9e:b5:e3:6d:0c:a9:
1e:c8:25:90:c8:8a:ce:c9:97:71:fe:62:68:1c:e4:
8e:b3:25:8b:15:98:04:4d:84:e6:6f:63:65:91:98:
7d:3a:fa:18:74:fb:66:02:78:a6:ac:f8:7f:0c:fc:
16:1a:a6:65:2d:1c:c7:34:11:a0:2c:1d:64:98:15:
a0:93:fc:f1:1f:c7:01:ce:72:5f:d1:0d:cc:ff:71:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:52:A0:20:1A:5B:31:9D:3C:33:6D:76:C3:7A:2D:E4:4C:8A:DD:E2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uFKgIBpbMZ08M212w3ot5EyK3eI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.75.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:dc:3b:99:ae:30:89:69:ef:f0:91:44:ce:d9:fa:40:70:7e:
e8:17:bb:8f:84:83:30:17:1c:40:ad:63:3b:b8:79:0e:46:3d:
b0:52:d1:2e:9c:38:cf:e6:3b:f9:73:0e:ec:66:f9:25:51:bc:
2e:a0:1d:a1:72:cf:f9:3b:15:e7:ba:6a:c4:e6:3e:e7:6f:1e:
20:be:70:44:ee:83:42:7d:70:d6:9c:b4:57:5f:d9:3a:8a:23:
72:a5:21:85:4e:83:bd:b4:c1:09:80:40:18:7c:5f:db:ef:3e:
75:e6:ab:49:ee:6b:d5:f9:62:cf:9a:7d:c9:d7:a9:e9:55:05:
34:dc:6a:37:80:d6:05:b6:e5:d3:55:8f:fa:bd:0a:2c:d1:58:
b2:40:a9:79:5c:11:46:fb:6e:d5:bf:63:d2:e2:2b:36:ed:cb:
60:35:d1:9b:54:62:a1:c0:4b:95:e9:13:3f:9c:9d:2d:42:5a:
f6:44:22:61:73:41:f5:a8:12:cb:79:1d:78:a3:1f:0c:4f:5d:
5c:18:3a:30:52:f8:af:50:db:ca:fe:4d:d1:5c:53:37:b0:01:
e0:8d:1b:59:66:f3:36:6d:d1:64:aa:b0:78:82:fd:19:09:db:
40:86:19:21:eb:7e:ac:60:d0:57:c1:06:4a:94:a9:7c:45:19:
bd:b4:d8:30
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFcMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjA2MjRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI4NTJBMDIwMUE1QjMx
OUQzQzMzNkQ3NkMzN0EyREU0NEM4QURERTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDR+9DucexNw50n6TmI+1LDusrJflmsFxL/ue/MV9LtTzBHNCbY
vKDQHBSnzn1guANCZGKvpMkKhj1pY8QSHoNGUzGnu7bP/MDbLW7Z6ue5Ko4+gNC1
RpjdpsftzIpHyH+JfzsBeM5DGAw9vS9ykqSuiUJOJLAh2fjhJQXpszA8AXni+9rg
evfgbz83YIqCtAXQSxsrYqk7I3fXU4lNPM1IIvlG3BLUBs8H4G6+0p61420MqR7I
JZDIis7Jl3H+Ymgc5I6zJYsVmARNhOZvY2WRmH06+hh0+2YCeKas+H8M/BYapmUt
HMc0EaAsHWSYFaCT/PEfxwHOcl/RDcz/cSVVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuFKgIBpbMZ08M212w3ot5EyK3eIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VGS2dJQnBiTVowOE0yMTJ3
M290NUV5SzNlSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wkswDQYJKoZIhvcNAQELBQADggEBAB3cO5muMIlp7/CRRM7Z+kBwfugXu4+EgzAX
HECtYzu4eQ5GPbBS0S6cOM/mO/lzDuxm+SVRvC6gHaFyz/k7Fee6asTmPudvHiC+
cETug0J9cNactFdf2TqKI3KlIYVOg720wQmAQBh8X9vvPnXmq0nua9X5Ys+afcnX
qelVBTTcajeA1gW25dNVj/q9CizRWLJAqXlcEUb7btW/Y9LiKzbty2A10ZtUYqHA
S5XpEz+cnS1CWvZEImFzQfWoEst5HXijHwxPXVwYOjBS+K9Q28r+TdFcUzewAeCN
G1lm8zZt0WSqsHiC/RkJ20CGGSHrfqxg0FfBBkqUqXxFGb202DA=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:41 2023 by rpki-client on console-fra.rpki-client.org