Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ys05lPEs12PR-e3-T6pmxQkRKzo.roa
File: ys05lPEs12PR-e3-T6pmxQkRKzo.roa (raw, json)
Hash identifier: ZMcwvKurevCqKeJThQ2pqx7YVn9A/FifBrvyQ0cHjF8=
Subject key identifier: CA:CD:39:94:F1:2C:D7:63:D1:F9:ED:FE:4F:AA:66:C5:09:11:2B:3A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C8D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ys05lPEs12PR-e3-T6pmxQkRKzo.roa
Signing time: Wed 29 Sep 2021 02:47:54 +0000
ROA not before: Wed 29 Sep 2021 02:47:54 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7309 (0x1c8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:54 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=CACD3994F12CD763D1F9EDFE4FAA66C509112B3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4b:08:e2:3e:30:06:b0:da:8c:d3:42:3f:63:
85:f9:01:06:a4:58:76:eb:90:87:40:87:0a:81:ef:
ea:b5:35:92:ab:a4:6b:6c:9a:15:d2:a6:ff:37:df:
42:0d:e2:c6:3f:39:df:b6:75:78:31:3a:2e:ac:9a:
ce:6e:41:c3:f1:f3:68:14:3c:40:fa:69:e7:65:9a:
4f:0a:87:39:c4:8f:0f:d8:ca:53:68:fa:cc:c3:f0:
48:d0:69:d8:c6:5a:76:35:80:cc:99:43:da:ad:ab:
eb:ee:4a:4c:9a:d5:e8:2f:c3:97:f4:c0:b7:85:97:
f4:48:11:35:fa:d5:1c:4f:0e:9c:26:55:24:85:71:
5b:ef:d7:9d:90:f1:9c:c1:d0:6a:76:56:af:8c:c0:
d9:c9:63:58:c2:c5:43:4a:91:5b:d6:3b:fb:fb:00:
16:28:3d:7e:93:3e:10:6b:17:76:d9:62:1f:7d:c6:
00:5e:25:61:99:0d:c4:c9:27:16:1d:7c:c8:2f:d0:
a8:ed:c3:77:17:67:02:14:69:dd:a7:77:6c:5a:ee:
47:b7:82:36:66:20:df:21:e0:1f:fc:15:fa:f6:77:
32:c5:9d:2a:a8:c7:e5:e5:ee:80:9a:6c:34:40:d1:
58:82:4d:b9:fb:5d:61:18:c3:21:6a:18:b0:96:b2:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CD:39:94:F1:2C:D7:63:D1:F9:ED:FE:4F:AA:66:C5:09:11:2B:3A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ys05lPEs12PR-e3-T6pmxQkRKzo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.120.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:64:be:f3:fc:09:9f:40:67:83:55:e5:91:ec:22:aa:7b:8c:
89:08:d9:41:d4:b8:9a:14:fd:f5:44:9e:4e:70:cd:41:dd:c0:
21:49:08:7a:52:f9:35:02:56:a7:f5:a3:60:83:76:39:85:e0:
06:8e:8a:d4:e6:ad:4e:d0:26:18:4b:b7:2a:fc:ac:bd:86:9d:
96:77:c5:41:8b:8d:ee:df:ed:0a:5c:1a:06:48:74:b9:94:eb:
e4:99:90:66:23:7b:7a:e0:08:e6:2a:13:4b:2d:53:d8:0b:3c:
69:14:e2:f1:2a:82:34:6b:17:18:2d:ce:40:37:86:e5:74:7e:
f2:41:c0:29:6f:81:21:d4:db:47:4d:e6:b9:0e:5b:4e:39:ff:
66:8a:d7:25:d0:16:76:59:f9:9a:c0:44:bb:01:83:ed:97:cb:
b4:d5:f9:2e:87:79:f3:a6:9d:0b:65:6c:db:a9:95:1d:ce:3f:
e3:b4:18:28:18:a4:2b:69:0f:ae:23:c7:a8:4a:d2:db:ce:87:
89:55:35:41:ec:a1:9c:b7:fa:40:a5:77:d6:54:21:32:16:4f:
e2:64:2b:eb:f5:64:8c:6e:6a:ff:cd:dc:36:c5:c5:ad:a8:70:
a5:f8:cc:ee:29:63:f8:d4:ad:67:fe:56:ef:21:36:b2:c0:d8:
0b:29:70:0d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3NTRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKENBQ0QzOTk0RjEyQ0Q3
NjNEMUY5RURGRTRGQUE2NkM1MDkxMTJCM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDuSwjiPjAGsNqM00I/Y4X5AQakWHbrkIdAhwqB7+q1NZKrpGts
mhXSpv8330IN4sY/Od+2dXgxOi6sms5uQcPx82gUPED6aedlmk8KhznEjw/YylNo
+szD8EjQadjGWnY1gMyZQ9qtq+vuSkya1egvw5f0wLeFl/RIETX61RxPDpwmVSSF
cVvv152Q8ZzB0Gp2Vq+MwNnJY1jCxUNKkVvWO/v7ABYoPX6TPhBrF3bZYh99xgBe
JWGZDcTJJxYdfMgv0Kjtw3cXZwIUad2nd2xa7ke3gjZmIN8h4B/8Ffr2dzLFnSqo
x+Xl7oCabDRA0ViCTbn7XWEYwyFqGLCWspy/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUys05lPEs12PR+e3+T6pmxQkRKzowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lzMDVsUEVzMTJQUi1lMy1U
NnBteFFrUkt6by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wXgwDQYJKoZIhvcNAQELBQADggEBAApkvvP8CZ9AZ4NV5ZHsIqp7jIkI2UHUuJoU
/fVEnk5wzUHdwCFJCHpS+TUCVqf1o2CDdjmF4AaOitTmrU7QJhhLtyr8rL2GnZZ3
xUGLje7f7QpcGgZIdLmU6+SZkGYje3rgCOYqE0stU9gLPGkU4vEqgjRrFxgtzkA3
huV0fvJBwClvgSHU20dN5rkOW045/2aK1yXQFnZZ+ZrARLsBg+2Xy7TV+S6HefOm
nQtlbNuplR3OP+O0GCgYpCtpD64jx6hK0tvOh4lVNUHsoZy3+kCld9ZUITIWT+Jk
K+v1ZIxuav/N3DbFxa2ocKX4zO4pY/jUrWf+Vu8hNrLA2AspcA0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org