Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ulTEp2ZPq8IfDUbX5Q6ZhynRprY.roa
File: ulTEp2ZPq8IfDUbX5Q6ZhynRprY.roa (raw, json)
Hash identifier: CEq5k+ZZRw/YnmQP0iSYs1IAD8KflyXWydsJiQ8om9Q=
Subject key identifier: BA:54:C4:A7:66:4F:AB:C2:1F:0D:46:D7:E5:0E:99:87:29:D1:A6:B6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2992
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ulTEp2ZPq8IfDUbX5Q6ZhynRprY.roa
Signing time: Fri 01 Sep 2023 10:06:46 +0000
ROA not before: Fri 01 Sep 2023 10:06:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10642 (0x2992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:46 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BA54C4A7664FABC21F0D46D7E50E998729D1A6B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:98:3a:75:58:96:90:e3:72:2e:44:52:34:50:
34:c8:6f:3e:68:f8:33:01:aa:a4:58:61:64:d7:04:
d8:73:f0:32:05:a0:86:33:16:33:36:df:c9:7f:17:
c2:f0:72:83:fc:88:a6:45:df:eb:e7:0a:47:16:ca:
1e:53:99:0b:55:62:20:dc:b0:12:2c:9f:21:ad:32:
33:b0:cc:a1:22:65:77:dd:b4:f6:00:5e:b0:95:2a:
07:40:1f:98:69:9c:99:a5:05:78:80:df:f9:41:86:
d2:96:ca:7c:42:12:c0:07:29:bd:81:2d:fb:75:2b:
cd:65:ae:9a:c8:22:72:d3:3f:42:19:73:c0:de:b8:
bc:4a:86:d6:d6:cf:3c:a6:ff:48:86:3f:57:18:1a:
4e:06:f1:4c:af:53:14:e6:be:ad:fa:13:5d:2f:17:
7c:0b:f7:62:9c:4a:10:70:0a:91:b7:6f:ff:7c:de:
8c:e2:ef:15:30:65:af:e6:d4:fa:7d:b6:85:80:06:
a9:f0:2b:b6:da:e3:b9:a6:c4:46:30:05:55:f4:a3:
8c:bc:fd:00:96:be:12:13:53:98:2c:85:d0:b5:6b:
95:78:19:20:f3:cd:44:64:ae:a5:3f:49:fc:a8:3f:
6f:46:88:cc:1e:18:f2:7b:c7:d6:52:b2:3f:bc:db:
8a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:54:C4:A7:66:4F:AB:C2:1F:0D:46:D7:E5:0E:99:87:29:D1:A6:B6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ulTEp2ZPq8IfDUbX5Q6ZhynRprY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.208.0/21
Signature Algorithm: sha256WithRSAEncryption
83:11:96:bf:e3:44:21:15:0a:e1:11:ef:a3:10:64:4a:57:d3:
eb:4c:28:4a:a4:8a:46:14:52:8c:34:be:a5:88:b1:33:9d:71:
a6:06:79:74:8d:59:0a:7e:ac:0d:2a:51:82:7b:d5:88:03:c7:
12:a0:b5:4a:5f:82:a6:ae:ce:61:6d:7b:7a:18:53:d9:68:b1:
5b:3d:c2:19:9d:2e:25:c7:ec:e3:39:6a:9c:c8:d8:18:a7:58:
f4:50:dc:2c:5e:80:1f:96:55:88:3d:6e:fa:82:e3:11:b8:29:
a0:01:ab:c2:09:b0:5b:b2:e0:ab:d5:63:ee:72:4a:e6:df:80:
22:28:1e:5d:9f:da:30:91:01:0d:85:f0:9b:b7:79:83:e0:a8:
e7:df:a7:50:09:a9:e3:df:87:44:df:72:94:ac:c2:71:0b:94:
d7:c4:b4:39:f7:49:4c:f1:c4:49:e0:5e:e6:6d:75:01:00:db:
1b:3a:db:a4:c5:14:b8:92:36:8d:b0:6d:84:e6:9f:30:af:15:
06:e9:86:19:11:64:bf:ed:c6:29:0a:41:68:a5:40:03:f5:5b:
bb:81:f9:3a:77:79:f2:b0:bf:c7:f6:b3:82:5d:ca:41:63:a6:
84:89:fa:a9:d6:97:61:dd:d6:54:48:de:d0:cc:f1:c8:c6:33:
86:83:63:6d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA2NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJBNTRDNEE3NjY0RkFC
QzIxRjBENDZEN0U1MEU5OTg3MjlEMUE2QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJmDp1WJaQ43IuRFI0UDTIbz5o+DMBqqRYYWTXBNhz8DIFoIYz
FjM238l/F8LwcoP8iKZF3+vnCkcWyh5TmQtVYiDcsBIsnyGtMjOwzKEiZXfdtPYA
XrCVKgdAH5hpnJmlBXiA3/lBhtKWynxCEsAHKb2BLft1K81lrprIInLTP0IZc8De
uLxKhtbWzzym/0iGP1cYGk4G8UyvUxTmvq36E10vF3wL92KcShBwCpG3b/983ozi
7xUwZa/m1Pp9toWABqnwK7ba47mmxEYwBVX0o4y8/QCWvhITU5gshdC1a5V4GSDz
zURkrqU/SfyoP29GiMweGPJ7x9ZSsj+824o3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUulTEp2ZPq8IfDUbX5Q6ZhynRprYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VsVEVwMlpQcThJZkRVYlg1
UTZaaHluUnByWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w9AwDQYJKoZIhvcNAQELBQADggEBAIMRlr/jRCEVCuER76MQZEpX0+tMKEqkikYU
Uow0vqWIsTOdcaYGeXSNWQp+rA0qUYJ71YgDxxKgtUpfgqauzmFte3oYU9losVs9
whmdLiXH7OM5apzI2BinWPRQ3CxegB+WVYg9bvqC4xG4KaABq8IJsFuy4KvVY+5y
SubfgCIoHl2f2jCRAQ2F8Ju3eYPgqOffp1AJqePfh0TfcpSswnELlNfEtDn3SUzx
xEngXuZtdQEA2xs626TFFLiSNo2wbYTmnzCvFQbphhkRZL/txikKQWilQAP1W7uB
+Tp3efKwv8f2s4JdykFjpoSJ+qnWl2Hd1lRI3tDM8cjGM4aDY20=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:09 2025 by rpki-client