Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zHfurDtYCjM0MMO2PfbvRI2Vxa8.roa
File: zHfurDtYCjM0MMO2PfbvRI2Vxa8.roa (raw, json)
Hash identifier: ZUyr/IlzUZd9ecOqbVqylsZmQy6VLyHprruRMlXSXrw=
Subject key identifier: CC:77:EE:AC:3B:58:0A:33:34:30:C3:B6:3D:F6:EF:44:8D:95:C5:AF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BA6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zHfurDtYCjM0MMO2PfbvRI2Vxa8.roa
Signing time: Wed 29 Sep 2021 02:46:50 +0000
ROA not before: Wed 29 Sep 2021 02:46:50 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7078 (0x1ba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:50 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=CC77EEAC3B580A333430C3B63DF6EF448D95C5AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:17:20:a7:1d:d9:47:74:87:d9:2e:b5:a1:
e9:67:70:d9:c5:20:50:6d:9b:c0:e0:03:05:1a:51:
6e:1b:2b:50:74:b7:d1:e3:7b:d2:0a:d3:37:13:85:
75:85:2e:1a:f5:33:98:5e:fb:23:3b:d8:4b:b3:fa:
00:6b:31:fa:b0:1d:40:5c:11:d5:1f:c8:f6:6c:81:
76:36:fd:f5:9d:ac:a9:47:1a:df:d5:f4:67:f3:05:
93:31:a2:a7:2c:96:f0:98:dc:0f:b4:74:2a:db:b4:
82:90:7e:27:df:fe:c3:a1:20:6a:a6:49:4c:f5:14:
6c:0a:4d:8f:c3:44:d9:e2:cf:ac:d5:51:b4:65:bc:
d5:06:01:ab:b9:5c:68:10:f4:a2:36:62:f3:87:f4:
8d:9f:52:58:43:48:8d:3d:06:a6:c8:98:30:70:a5:
b1:f1:64:69:ad:da:83:b7:43:18:83:1e:7c:17:eb:
31:1f:bc:2c:6e:01:38:d8:95:9b:6a:df:6f:7b:56:
70:54:46:a1:bd:55:8b:a9:65:c8:de:f0:2c:e9:ef:
af:0e:db:87:93:75:d3:65:6c:89:e9:ca:23:e2:25:
08:fb:00:2c:a0:1b:c8:90:a5:a5:77:58:31:21:80:
e9:0a:90:2e:ae:df:f5:14:96:bb:74:e4:4d:cc:4d:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:77:EE:AC:3B:58:0A:33:34:30:C3:B6:3D:F6:EF:44:8D:95:C5:AF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zHfurDtYCjM0MMO2PfbvRI2Vxa8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.80.0/21
Signature Algorithm: sha256WithRSAEncryption
50:7d:f5:cf:22:61:1a:07:6e:24:7e:d7:85:61:2f:51:2b:cc:
cc:67:a7:78:7e:ce:c6:63:c5:47:e2:6c:1c:6b:5f:0f:df:25:
17:e0:8c:ce:a3:43:75:be:32:66:5d:c2:03:4f:fe:46:75:77:
9c:34:8e:cb:06:04:ce:a1:a1:b0:1d:e4:80:52:1a:df:60:5e:
5d:69:67:4e:22:a5:9d:0d:f7:a0:10:bb:2a:73:59:90:01:f7:
f2:25:5c:4d:e9:f8:c8:b2:42:a0:0e:12:da:38:87:b6:d3:b3:
60:bb:0a:e3:5f:42:11:7d:01:d4:3c:6f:7b:96:7e:34:47:aa:
be:f5:99:d1:05:e9:91:ee:58:cb:f4:54:be:0c:6a:23:e7:62:
7a:6a:b8:cb:74:e1:e3:a7:9d:02:e1:92:0d:ab:52:d5:e2:96:
8b:25:f2:c2:62:a8:6d:dc:39:af:c9:eb:63:9c:66:ed:e4:b1:
e6:7e:ff:ce:8e:38:09:17:b8:f6:d9:0a:74:6a:9c:b1:10:d4:
5b:17:81:2c:f2:72:42:cc:03:94:c8:b9:2a:e6:00:73:61:60:
c7:45:bd:10:c3:c8:b5:b4:88:8b:c7:c8:32:2b:fc:bc:56:33:
15:f0:bb:ac:cd:a6:8e:4a:10:69:70:10:2a:d4:80:46:f9:7e:
c1:7c:29:94
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG6YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2NTBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKENDNzdFRUFDM0I1ODBB
MzMzNDMwQzNCNjNERjZFRjQ0OEQ5NUM1QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1BRcgpx3ZR3SH2S61oelncNnFIFBtm8DgAwUaUW4bK1B0t9Hj
e9IK0zcThXWFLhr1M5he+yM72Euz+gBrMfqwHUBcEdUfyPZsgXY2/fWdrKlHGt/V
9GfzBZMxoqcslvCY3A+0dCrbtIKQfiff/sOhIGqmSUz1FGwKTY/DRNniz6zVUbRl
vNUGAau5XGgQ9KI2YvOH9I2fUlhDSI09BqbImDBwpbHxZGmt2oO3QxiDHnwX6zEf
vCxuATjYlZtq3297VnBURqG9VYupZcje8Czp768O24eTddNlbInpyiPiJQj7ACyg
G8iQpaV3WDEhgOkKkC6u3/UUlrt05E3MTbOBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUzHfurDtYCjM0MMO2PfbvRI2Vxa8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3pIZnVyRHRZQ2pNME1NTzJQ
ZmJ2UkkyVnhhOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wFAwDQYJKoZIhvcNAQELBQADggEBAFB99c8iYRoHbiR+14VhL1ErzMxnp3h+zsZj
xUfibBxrXw/fJRfgjM6jQ3W+MmZdwgNP/kZ1d5w0jssGBM6hobAd5IBSGt9gXl1p
Z04ipZ0N96AQuypzWZAB9/IlXE3p+MiyQqAOEto4h7bTs2C7CuNfQhF9AdQ8b3uW
fjRHqr71mdEF6ZHuWMv0VL4MaiPnYnpquMt04eOnnQLhkg2rUtXilosl8sJiqG3c
Oa/J62OcZu3kseZ+/86OOAkXuPbZCnRqnLEQ1FsXgSzyckLMA5TIuSrmAHNhYMdF
vRDDyLW0iIvHyDIr/LxWMxXwu6zNpo5KEGlwECrUgEb5fsF8KZQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org