Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0SkqA6D0VQCMZwJPFYIBVmudA6U.roa
File: 0SkqA6D0VQCMZwJPFYIBVmudA6U.roa (raw, json)
Hash identifier: yblCevt9aaxF5le8e45v9PFfe/WeFwT6hyAJf4Gj/N4=
Subject key identifier: D1:29:2A:03:A0:F4:55:00:8C:67:02:4F:15:82:01:56:6B:9D:03:A5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0SkqA6D0VQCMZwJPFYIBVmudA6U.roa
Signing time: Thu 15 Sep 2022 02:52:54 +0000
ROA not before: Thu 15 Sep 2022 02:52:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D1292A03A0F455008C67024F158201566B9D03A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:dc:5d:c1:ac:35:87:5b:cf:93:c8:42:92:
5c:ab:74:86:27:4d:46:4e:8f:78:ba:60:91:02:2e:
be:70:16:cb:bd:b4:10:a4:96:65:d8:fe:a2:01:39:
56:d1:a1:64:3b:4c:c3:35:2f:b9:ee:49:6f:08:dc:
3e:92:0e:44:e2:ae:56:4c:d0:60:25:ce:36:12:b3:
ff:97:d8:40:9f:03:80:d1:f6:8b:98:00:5a:f9:a6:
9e:dc:32:41:d6:20:50:bd:ec:6a:dd:26:2a:2f:f9:
02:db:fc:84:a7:1b:07:09:62:09:28:68:22:29:76:
aa:cf:07:63:07:a5:10:ee:6e:46:d7:44:e4:b1:e2:
4e:c4:84:1c:ef:46:5e:4a:5e:b2:37:38:28:68:54:
57:1c:28:c0:4e:3c:15:b1:3e:dd:1b:19:11:f6:c4:
39:8b:ab:26:4c:82:c6:7c:de:83:f4:3b:6e:fd:3b:
b6:69:b3:50:42:cb:e8:bb:79:bd:fb:d6:ba:36:dc:
be:8c:0d:b5:35:04:91:1f:89:36:23:f5:50:c2:c7:
86:8d:48:16:b1:2c:0c:0f:da:c0:d1:ef:d7:c5:7d:
13:a9:34:3d:a3:43:a7:dc:5e:e4:76:96:26:53:f6:
fd:97:35:de:f8:ef:a7:bd:64:b7:8f:29:b4:53:8f:
05:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:29:2A:03:A0:F4:55:00:8C:67:02:4F:15:82:01:56:6B:9D:03:A5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0SkqA6D0VQCMZwJPFYIBVmudA6U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:70:cc:5d:8a:d4:fe:a7:11:49:8b:88:5c:3d:18:26:79:ba:
b3:9f:1d:9f:bf:2b:f8:71:0a:e5:d9:05:4e:30:53:de:02:12:
7e:dc:91:84:55:cb:eb:f1:02:27:64:0a:99:84:e9:f7:fa:2d:
ec:b7:fc:84:ac:8b:43:d5:00:17:3e:be:57:50:b7:53:f9:ae:
4a:6c:da:46:2c:5e:15:65:cf:fa:ca:b2:95:99:8b:ae:75:c1:
18:c3:20:64:68:79:6e:9b:8d:f9:6d:77:49:56:a3:90:1e:d2:
98:2c:10:4c:2f:6d:1b:5f:19:ba:45:a8:b9:09:87:44:5a:2c:
09:1f:39:f4:0c:45:eb:72:7c:b0:21:d5:ec:dd:65:f7:e4:9a:
d4:9c:d9:b1:37:09:68:f2:1d:ce:c2:65:d4:67:c3:d4:3c:3e:
07:07:79:f0:83:65:86:eb:53:3d:6b:d4:f0:14:a2:7d:23:04:
a2:bf:11:41:a1:4c:d4:98:cf:39:b9:f3:21:dd:aa:90:5c:93:
5a:72:81:6a:5e:3c:ec:06:67:15:55:90:2a:5a:2d:f1:84:17:
5d:c5:e0:20:d1:3f:34:54:c2:21:74:dd:e3:9c:1b:54:e9:2e:
53:0a:5a:3c:d8:76:82:e4:53:bb:e9:30:e0:45:7d:a3:3d:5b:
49:1a:bc:f0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUyNTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEQxMjkyQTAzQTBGNDU1
MDA4QzY3MDI0RjE1ODIwMTU2NkI5RDAzQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCb9txdwaw1h1vPk8hCklyrdIYnTUZOj3i6YJECLr5wFsu9tBCk
lmXY/qIBOVbRoWQ7TMM1L7nuSW8I3D6SDkTirlZM0GAlzjYSs/+X2ECfA4DR9ouY
AFr5pp7cMkHWIFC97GrdJiov+QLb/ISnGwcJYgkoaCIpdqrPB2MHpRDubkbXROSx
4k7EhBzvRl5KXrI3OChoVFccKMBOPBWxPt0bGRH2xDmLqyZMgsZ83oP0O279O7Zp
s1BCy+i7eb371ro23L6MDbU1BJEfiTYj9VDCx4aNSBaxLAwP2sDR79fFfROpND2j
Q6fcXuR2liZT9v2XNd7476e9ZLePKbRTjwXjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU0SkqA6D0VQCMZwJPFYIBVmudA6UwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBTa3FBNkQwVlFDTVp3SlBG
WUlCVm11ZEE2VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sOAwDQYJKoZIhvcNAQELBQADggEBAKZwzF2K1P6nEUmLiFw9GCZ5urOfHZ+/K/hx
CuXZBU4wU94CEn7ckYRVy+vxAidkCpmE6ff6Ley3/ISsi0PVABc+vldQt1P5rkps
2kYsXhVlz/rKspWZi651wRjDIGRoeW6bjfltd0lWo5Ae0pgsEEwvbRtfGbpFqLkJ
h0RaLAkfOfQMRetyfLAh1ezdZffkmtSc2bE3CWjyHc7CZdRnw9Q8PgcHefCDZYbr
Uz1r1PAUon0jBKK/EUGhTNSYzzm58yHdqpBck1pygWpePOwGZxVVkCpaLfGEF13F
4CDRPzRUwiF03eOcG1TpLlMKWjzYdoLkU7vpMOBFfaM9W0kavPA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org