Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xO1ahX4YF14nfaEnfF6rc2gHYas.roa
File: xO1ahX4YF14nfaEnfF6rc2gHYas.roa (raw, json)
Hash identifier: EllnV2jV7crG/MaodCpvbqSKNrcBwl39IMGprpUthkY=
Subject key identifier: C4:ED:5A:85:7E:18:17:5E:27:7D:A1:27:7C:5E:AB:73:68:07:61:AB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EC4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xO1ahX4YF14nfaEnfF6rc2gHYas.roa
Signing time: Tue 29 Sep 2020 09:56:07 +0000
ROA not before: Tue 29 Sep 2020 09:56:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3780 (0xec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:07 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C4ED5A857E18175E277DA1277C5EAB73680761AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:ac:a7:c7:04:68:37:88:a7:56:3f:07:05:
38:95:04:d6:a9:3a:70:e2:c3:98:7e:63:60:87:af:
b0:04:0f:d3:38:22:9a:6d:8d:21:c8:50:4f:b9:8d:
59:9d:86:5e:1d:55:6d:03:41:2f:34:2f:69:5c:5a:
bc:c8:3f:1e:33:b0:08:06:ba:bc:40:94:77:d0:24:
3e:f0:a8:3b:a1:cc:3e:76:47:fd:cd:77:8b:48:b2:
91:ee:31:16:09:5f:82:fb:f6:1d:73:64:b6:3e:be:
47:d4:cc:84:40:44:ef:18:43:26:43:96:57:e5:2b:
b8:cf:09:88:09:92:14:76:af:aa:32:ad:c0:17:2b:
f9:b0:e2:38:02:20:5d:c0:4f:54:22:d9:f1:4c:52:
65:f3:4f:ca:a6:ff:a2:c1:fa:e2:cb:17:3e:dd:e7:
4e:42:14:9a:ac:d8:7d:5a:74:ce:8e:19:1d:a1:f8:
9e:d8:a4:00:b9:2e:eb:49:87:a4:af:fa:5b:95:43:
71:02:a3:38:ed:c2:29:b8:30:e4:7c:3d:0d:01:02:
5b:8f:28:af:b9:47:31:c1:6e:c3:0b:26:cb:67:8a:
f4:30:0a:c5:2b:76:8c:45:74:c7:43:28:52:f6:e1:
e2:b2:53:4e:7d:63:fa:37:48:f1:45:53:21:01:73:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:ED:5A:85:7E:18:17:5E:27:7D:A1:27:7C:5E:AB:73:68:07:61:AB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xO1ahX4YF14nfaEnfF6rc2gHYas.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.152.0/21
Signature Algorithm: sha256WithRSAEncryption
08:c1:4d:76:b3:9f:59:ec:f9:bf:25:fe:9e:43:4a:a9:a4:7f:
c7:ea:3c:b6:70:bb:a1:69:79:bd:bb:c6:26:ea:23:2c:eb:04:
d2:c9:dc:4a:86:10:9c:34:ae:b7:31:27:c5:dc:2d:23:f4:d8:
42:fd:c4:f1:d9:06:7e:9f:5e:3e:79:2c:f0:0e:9c:23:b4:ee:
9f:12:6d:25:5e:73:b5:1e:c0:5c:be:7f:1e:d5:9e:66:cc:2a:
f2:85:dd:44:60:b9:f9:6b:69:4c:0c:39:79:50:6b:8e:4b:8d:
5e:ba:12:b8:ed:50:8d:2e:c4:92:8a:f3:e7:30:64:ff:f0:3e:
b5:39:39:73:62:6f:27:34:c5:1d:0f:ae:e7:96:58:91:24:22:
b2:d3:7b:c7:0b:36:07:ff:e6:a2:eb:8c:3b:d1:17:46:05:48:
74:dc:ff:ea:19:05:47:81:ee:61:0d:e6:db:37:89:7e:64:52:
17:93:e0:92:e8:d9:f3:5a:e2:c1:7b:d2:92:e8:b8:e4:02:d8:
0e:07:f1:ba:e5:29:30:7e:de:df:89:56:b6:6c:e8:12:49:0b:
c4:02:ec:bb:22:26:44:28:cb:d9:00:bf:f3:55:b7:09:14:68:
ee:4c:9f:0f:0e:16:61:a8:19:90:9c:23:3f:b3:67:18:b5:9b:
0f:49:b2:c9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDsQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEM0RUQ1QTg1N0UxODE3
NUUyNzdEQTEyNzdDNUVBQjczNjgwNzYxQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfHqynxwRoN4inVj8HBTiVBNapOnDiw5h+Y2CHr7AED9M4Ippt
jSHIUE+5jVmdhl4dVW0DQS80L2lcWrzIPx4zsAgGurxAlHfQJD7wqDuhzD52R/3N
d4tIspHuMRYJX4L79h1zZLY+vkfUzIRARO8YQyZDllflK7jPCYgJkhR2r6oyrcAX
K/mw4jgCIF3AT1Qi2fFMUmXzT8qm/6LB+uLLFz7d505CFJqs2H1adM6OGR2h+J7Y
pAC5LutJh6Sv+luVQ3ECozjtwim4MOR8PQ0BAluPKK+5RzHBbsMLJstnivQwCsUr
doxFdMdDKFL24eKyU059Y/o3SPFFUyEBc1djAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUxO1ahX4YF14nfaEnfF6rc2gHYaswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hPMWFoWDRZRjE0bmZhRW5m
RjZyYzJnSFlhcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w5gwDQYJKoZIhvcNAQELBQADggEBAAjBTXazn1ns+b8l/p5DSqmkf8fqPLZwu6Fp
eb27xibqIyzrBNLJ3EqGEJw0rrcxJ8XcLSP02EL9xPHZBn6fXj55LPAOnCO07p8S
bSVec7UewFy+fx7VnmbMKvKF3URguflraUwMOXlQa45LjV66ErjtUI0uxJKK8+cw
ZP/wPrU5OXNibyc0xR0PrueWWJEkIrLTe8cLNgf/5qLrjDvRF0YFSHTc/+oZBUeB
7mEN5ts3iX5kUheT4JLo2fNa4sF70pLouOQC2A4H8brlKTB+3t+JVrZs6BJJC8QC
7LsiJkQoy9kAv/NVtwkUaO5Mnw8OFmGoGZCcIz+zZxi1mw9Jssk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org