Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2H0dp-7UqvMV44SsOr9SLx9XCR4.roa
File: 2H0dp-7UqvMV44SsOr9SLx9XCR4.roa (raw, json)
Hash identifier: WgplEJtLAnoC2V2RkaWcShJGRCOzE93hr9KZYNj3A1k=
Subject key identifier: D8:7D:1D:A7:EE:D4:AA:F3:15:E3:84:AC:3A:BF:52:2F:1F:57:09:1E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1879
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2H0dp-7UqvMV44SsOr9SLx9XCR4.roa
Signing time: Sun 07 Feb 2021 12:29:42 +0000
ROA not before: Sun 07 Feb 2021 12:29:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6265 (0x1879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:29:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D87D1DA7EED4AAF315E384AC3ABF522F1F57091E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:07:55:8d:22:84:8a:a6:49:a2:04:f9:6c:
ae:06:6e:5b:a2:86:30:9f:4a:31:ef:4a:cb:1f:22:
95:ce:2f:f1:d5:98:ac:18:5f:09:c0:7e:4a:7f:f9:
9b:01:ba:fa:44:db:65:d3:a2:2c:4a:6a:f6:7e:df:
ac:e2:0e:29:a6:11:11:3b:9e:86:78:12:b6:62:ac:
20:fa:31:13:9a:01:d4:1a:b2:2a:95:79:69:85:41:
24:37:b9:17:19:a0:b3:7c:d5:63:fe:52:46:1d:b3:
b5:2a:07:7d:8d:ca:65:86:f9:04:f4:6c:f8:2f:a9:
31:09:44:8c:cd:92:2b:90:91:76:46:b1:46:58:e4:
9c:e8:0a:36:d3:68:d4:ec:7a:2a:d8:20:1b:7f:62:
0b:03:36:43:e1:09:cf:71:25:ab:91:da:95:08:05:
92:f8:ad:10:31:f7:15:bd:39:02:99:98:1a:97:64:
c6:ec:6f:05:c3:db:96:db:82:96:f5:3e:a2:d6:04:
cf:cc:ff:ac:f3:8c:fe:3b:3e:14:98:d2:0e:50:bb:
59:bc:01:b9:31:bc:f7:2b:74:71:eb:62:d9:35:47:
6b:96:d6:15:b8:de:f3:0f:24:30:d2:a7:18:f6:bf:
0c:9e:b9:9a:cc:a0:ba:47:1f:bc:15:5f:9f:3d:b7:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7D:1D:A7:EE:D4:AA:F3:15:E3:84:AC:3A:BF:52:2F:1F:57:09:1E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2H0dp-7UqvMV44SsOr9SLx9XCR4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.64.0/22
Signature Algorithm: sha256WithRSAEncryption
86:d5:19:31:62:6d:8d:8f:3c:fb:d5:cf:18:4e:62:cf:0c:b9:
8e:fd:58:7b:05:e7:1e:e8:bd:98:01:e8:a6:9a:ea:78:21:8a:
81:f7:c3:1a:0a:89:bb:b8:be:7b:93:55:86:34:54:04:3f:31:
35:0d:45:8a:d8:61:38:72:c7:b5:f8:03:69:7a:66:c2:3e:fd:
38:ed:4c:aa:e4:20:61:da:a5:b4:1f:32:e9:dd:b5:99:26:d7:
b8:89:47:cd:98:db:59:8a:51:4c:9d:0d:a2:2d:ea:f0:15:4c:
53:98:e7:a3:71:66:6b:68:b8:c8:14:a0:90:88:07:b0:e6:ce:
60:75:dd:06:fb:03:5f:16:78:ae:08:de:76:99:06:5f:24:d4:
06:93:29:5e:ad:2f:83:fb:7b:ce:2f:31:16:76:7a:4d:d8:2d:
5b:33:f3:0f:d1:ca:40:17:1d:a7:56:6d:eb:3b:e2:2d:58:a7:
59:f1:11:fa:f7:cf:e5:8f:02:78:e8:c9:c8:8b:67:20:54:77:
99:25:aa:82:e2:90:8b:f7:b4:fb:80:a1:86:d5:5f:2c:c0:de:
d8:05:24:a5:f7:e2:25:c6:7d:64:2f:ac:1b:2e:c0:44:98:72:
dd:ec:89:5b:11:3e:f7:6b:af:1d:49:89:16:e8:37:2b:f7:5a:
4b:5e:9d:f5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGHkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjI5NDJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQ4N0QxREE3RUVENEFB
RjMxNUUzODRBQzNBQkY1MjJGMUY1NzA5MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFGgdVjSKEiqZJogT5bK4GbluihjCfSjHvSssfIpXOL/HVmKwY
XwnAfkp/+ZsBuvpE22XToixKavZ+36ziDimmERE7noZ4ErZirCD6MROaAdQasiqV
eWmFQSQ3uRcZoLN81WP+UkYds7UqB32NymWG+QT0bPgvqTEJRIzNkiuQkXZGsUZY
5JzoCjbTaNTseirYIBt/YgsDNkPhCc9xJauR2pUIBZL4rRAx9xW9OQKZmBqXZMbs
bwXD25bbgpb1PqLWBM/M/6zzjP47PhSY0g5Qu1m8AbkxvPcrdHHrYtk1R2uW1hW4
3vMPJDDSpxj2vwyeuZrMoLpHH7wVX589tzf/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU2H0dp+7UqvMV44SsOr9SLx9XCR4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJIMGRwLTdVcXZNVjQ0U3NP
cjlTTHg5WENSNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sEAwDQYJKoZIhvcNAQELBQADggEBAIbVGTFibY2PPPvVzxhOYs8MuY79WHsF5x7o
vZgB6Kaa6nghioH3wxoKibu4vnuTVYY0VAQ/MTUNRYrYYThyx7X4A2l6ZsI+/Tjt
TKrkIGHapbQfMundtZkm17iJR82Y21mKUUydDaIt6vAVTFOY56NxZmtouMgUoJCI
B7DmzmB13Qb7A18WeK4I3naZBl8k1AaTKV6tL4P7e84vMRZ2ek3YLVsz8w/RykAX
HadWbes74i1Yp1nxEfr3z+WPAnjoyciLZyBUd5klqoLikIv3tPuAoYbVXyzA3tgF
JKX34iXGfWQvrBsuwESYct3siVsRPvdrrx1JiRboNyv3WktenfU=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:20 2023 by rpki-client on console-fra.rpki-client.org