Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w7xDW6KGuewjhXLoz8GD-bljr9I.roa
File: w7xDW6KGuewjhXLoz8GD-bljr9I.roa (raw, json)
Hash identifier: zWXPey/2TGEkOtz3XCOKBmjlMkPCeyzT1Jn9hUMe70I=
Subject key identifier: C3:BC:43:5B:A2:86:B9:EC:23:85:72:E8:CF:C1:83:F9:B9:63:AF:D2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1937
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w7xDW6KGuewjhXLoz8GD-bljr9I.roa
Signing time: Sun 07 Feb 2021 13:06:38 +0000
ROA not before: Sun 07 Feb 2021 13:06:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6455 (0x1937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 13:06:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C3BC435BA286B9EC238572E8CFC183F9B963AFD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:27:dd:d2:94:43:29:07:43:6a:dc:dd:a7:3a:
2c:8a:a2:90:82:81:c9:e3:16:fe:31:db:96:1d:3b:
ac:d2:e6:aa:6b:9c:b9:61:35:3b:22:36:33:f5:84:
7b:63:19:4b:93:6f:79:b1:da:47:39:19:2c:6b:5c:
7c:8b:61:e2:48:7f:34:a1:21:ac:58:32:17:1f:d4:
c4:48:ec:b4:68:1b:61:e9:04:d3:80:e9:e1:35:30:
b2:5a:cd:1b:d2:e9:cf:a3:bf:23:f0:f5:55:7f:36:
f2:57:07:9e:b7:7a:c8:68:1f:4e:4f:f3:d1:84:6f:
e2:79:7d:a5:b7:8a:3e:e0:1d:c6:cc:b1:be:e9:02:
c8:58:e7:3b:d2:d7:18:4f:bc:d6:61:4d:f8:f7:5d:
40:68:4c:f7:74:e9:3e:b1:05:6e:3f:65:b9:e1:93:
7c:28:ab:24:3e:42:ad:ed:af:42:06:79:e3:c0:13:
8a:44:d2:a7:3b:e7:6e:1e:4b:ef:46:ab:73:25:0e:
80:7d:af:2e:89:46:d5:7f:79:47:7d:25:64:40:af:
63:45:00:4f:f1:5d:32:8f:47:10:7c:8c:d0:dc:5e:
1d:39:fc:5e:6e:6a:d8:1e:40:b4:d4:f5:84:7e:de:
3b:07:d9:1b:5f:a4:21:2e:1d:20:f9:51:f4:24:ca:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BC:43:5B:A2:86:B9:EC:23:85:72:E8:CF:C1:83:F9:B9:63:AF:D2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w7xDW6KGuewjhXLoz8GD-bljr9I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.136.0/21
Signature Algorithm: sha256WithRSAEncryption
77:8c:38:58:cd:86:ec:0e:3c:3b:10:80:4d:46:56:ee:69:41:
f1:1b:01:34:86:3b:2a:1d:e3:a7:fb:5d:39:a4:39:4f:05:60:
d9:41:f1:c8:91:b6:a5:1d:fa:9f:88:72:2d:26:90:7f:ec:02:
ea:33:2c:af:38:dc:e2:0b:47:17:2a:f4:ce:96:93:6b:3b:9e:
36:cd:16:ec:a3:59:83:51:a1:96:ae:e8:01:af:4c:84:5d:66:
ed:e3:f9:29:15:0c:6a:2a:0c:e1:ee:1a:1d:e1:18:57:5e:b5:
a3:24:a0:83:75:aa:f1:0f:97:5d:a0:69:ea:8d:2d:62:ce:1c:
c6:bd:03:f8:85:78:e2:34:1e:2f:82:5e:ad:79:ec:8d:a7:88:
30:b1:24:ad:56:8f:07:95:bf:2c:99:1e:fa:85:44:c4:7c:02:
e2:90:a9:a3:eb:47:89:3e:f7:5f:aa:fd:2c:16:71:8f:a1:e1:
05:34:68:d1:b2:6d:30:47:08:07:8f:28:f5:a4:4a:b6:8b:76:
ac:95:65:30:d5:9d:06:bc:cf:cb:2f:38:79:e2:74:f5:51:9b:
5f:08:74:ac:c1:88:90:ae:8b:e8:9d:85:88:37:9d:4a:36:ef:
fc:1e:f2:8b:75:7a:07:c1:fd:82:b2:d8:94:23:65:b9:fd:0e:
ce:b8:f3:4a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGTcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MzA2MzhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEMzQkM0MzVCQTI4NkI5
RUMyMzg1NzJFOENGQzE4M0Y5Qjk2M0FGRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQJ93SlEMpB0Nq3N2nOiyKopCCgcnjFv4x25YdO6zS5qprnLlh
NTsiNjP1hHtjGUuTb3mx2kc5GSxrXHyLYeJIfzShIaxYMhcf1MRI7LRoG2HpBNOA
6eE1MLJazRvS6c+jvyPw9VV/NvJXB563eshoH05P89GEb+J5faW3ij7gHcbMsb7p
AshY5zvS1xhPvNZhTfj3XUBoTPd06T6xBW4/Zbnhk3woqyQ+Qq3tr0IGeePAE4pE
0qc7524eS+9Gq3MlDoB9ry6JRtV/eUd9JWRAr2NFAE/xXTKPRxB8jNDcXh05/F5u
atgeQLTU9YR+3jsH2RtfpCEuHSD5UfQkyhNbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUw7xDW6KGuewjhXLoz8GD+bljr9IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3c3eERXNktHdWV3amhYTG96
OEdELWJsanI5SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w4gwDQYJKoZIhvcNAQELBQADggEBAHeMOFjNhuwOPDsQgE1GVu5pQfEbATSGOyod
46f7XTmkOU8FYNlB8ciRtqUd+p+Ici0mkH/sAuozLK843OILRxcq9M6Wk2s7njbN
FuyjWYNRoZau6AGvTIRdZu3j+SkVDGoqDOHuGh3hGFdetaMkoIN1qvEPl12gaeqN
LWLOHMa9A/iFeOI0Hi+CXq157I2niDCxJK1WjweVvyyZHvqFRMR8AuKQqaPrR4k+
91+q/SwWcY+h4QU0aNGybTBHCAePKPWkSraLdqyVZTDVnQa8z8svOHnidPVRm18I
dKzBiJCui+idhYg3nUo27/we8ot1egfB/YKy2JQjZbn9Ds6480o=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:31 2023 by rpki-client on console-ams.rpki-client.org