Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2SmMX1Oeyy9GgAgrijYFDkkQgnY.roa
File: 2SmMX1Oeyy9GgAgrijYFDkkQgnY.roa (raw, json)
Hash identifier: F0YgUzfVsqdOvD9xaTdOEQCeZ3yGfEnieP4qKt5YmCc=
Subject key identifier: D9:29:8C:5F:53:9E:CB:2F:46:80:08:2B:8A:36:05:0E:49:10:82:76
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 148D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2SmMX1Oeyy9GgAgrijYFDkkQgnY.roa
Signing time: Sun 07 Feb 2021 11:59:05 +0000
ROA not before: Sun 07 Feb 2021 11:59:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.230.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5261 (0x148d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:59:05 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D9298C5F539ECB2F4680082B8A36050E49108276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:43:29:b4:7f:01:38:0b:9c:0e:17:98:70:
d2:de:eb:5e:45:01:df:0d:56:a4:a1:5e:9f:6d:19:
74:93:65:f7:d4:e0:6b:0b:27:32:b8:a9:0d:91:3f:
66:28:58:64:ca:fb:0f:16:98:00:dc:88:e0:ee:ec:
20:4c:3d:09:d9:bb:f1:37:83:4b:e4:fb:95:e3:c6:
b9:26:32:a3:42:35:2c:f7:38:ab:fc:9d:5d:aa:07:
37:dc:55:2b:b0:a5:97:2b:10:a7:ed:0e:53:e7:91:
f9:b9:4e:61:30:ba:d1:5a:d8:c5:d5:00:a2:05:53:
bb:57:2e:3b:f5:9b:96:35:68:e6:14:4a:4f:1e:7f:
fd:ae:19:49:7e:7f:36:fd:84:35:e7:94:1a:cc:4e:
2e:ea:d6:1e:fc:c7:51:aa:ed:2d:42:40:bd:24:98:
83:62:50:95:da:be:ac:b1:b8:8f:2e:51:30:20:59:
46:4f:cb:2f:3a:13:f6:2a:b1:90:86:7a:c8:0e:07:
b8:58:d5:30:88:77:3e:20:d4:a7:2e:38:54:e6:fc:
dd:35:23:50:ff:81:9d:56:62:b2:20:c0:88:9a:e9:
78:e6:0f:c0:46:9f:91:16:87:a8:f7:26:97:39:74:
96:7e:0e:8a:7d:04:94:40:b0:ec:af:41:fa:1d:41:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:29:8C:5F:53:9E:CB:2F:46:80:08:2B:8A:36:05:0E:49:10:82:76
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2SmMX1Oeyy9GgAgrijYFDkkQgnY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.230.0/23
Signature Algorithm: sha256WithRSAEncryption
37:b0:35:3a:8e:e4:1d:3e:a0:7c:ee:aa:1a:07:8a:b0:96:80:
27:8e:a0:71:b4:d1:bd:7e:71:66:34:47:56:89:7f:ed:3a:c0:
72:df:34:82:16:68:88:1f:00:6b:16:51:de:f1:60:0f:95:81:
54:76:dd:ef:46:41:d9:d4:0b:14:f3:31:db:e6:67:90:eb:df:
0a:2d:ad:74:fb:a8:3e:94:a3:d4:49:86:f3:bd:98:f6:85:d7:
82:11:54:cd:bf:d9:8c:b1:4f:72:47:63:97:93:75:b2:86:33:
6e:b4:3e:53:50:7f:a7:48:e3:bc:1d:53:11:68:c4:ee:84:d4:
cb:da:ca:38:1f:d9:18:20:7a:f5:dc:65:3c:3f:e2:d3:04:af:
10:0d:e0:c3:6e:20:69:e0:c5:a2:45:91:22:23:c0:d5:08:b5:
5c:dd:09:dd:3e:61:cf:b4:b0:fe:a8:18:b0:57:5f:c3:9e:e3:
77:e5:d4:fe:02:0f:82:1c:07:2b:af:77:aa:ff:3d:1b:35:b5:
95:30:e8:67:31:ac:e3:18:81:15:86:28:ae:be:c3:d2:cb:ea:
08:89:71:be:26:f7:2a:78:0c:33:ba:55:58:96:63:23:df:57:
3c:06:32:e9:59:83:20:73:bc:1d:cc:e8:0e:db:5e:c7:2d:22:
1c:f9:b9:5e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU5MDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQ5Mjk4QzVGNTM5RUNC
MkY0NjgwMDgyQjhBMzYwNTBFNDkxMDgyNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCQn0MptH8BOAucDheYcNLe615FAd8NVqShXp9tGXSTZffU4GsL
JzK4qQ2RP2YoWGTK+w8WmADciODu7CBMPQnZu/E3g0vk+5XjxrkmMqNCNSz3OKv8
nV2qBzfcVSuwpZcrEKftDlPnkfm5TmEwutFa2MXVAKIFU7tXLjv1m5Y1aOYUSk8e
f/2uGUl+fzb9hDXnlBrMTi7q1h78x1Gq7S1CQL0kmINiUJXavqyxuI8uUTAgWUZP
yy86E/YqsZCGesgOB7hY1TCIdz4g1KcuOFTm/N01I1D/gZ1WYrIgwIia6XjmD8BG
n5EWh6j3Jpc5dJZ+Dop9BJRAsOyvQfodQSR3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU2SmMX1Oeyy9GgAgrijYFDkkQgnYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJTbU1YMU9leXk5R2dBZ3Jp
allGRGtrUWduWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0
seYwDQYJKoZIhvcNAQELBQADggEBADewNTqO5B0+oHzuqhoHirCWgCeOoHG00b1+
cWY0R1aJf+06wHLfNIIWaIgfAGsWUd7xYA+VgVR23e9GQdnUCxTzMdvmZ5Dr3wot
rXT7qD6Uo9RJhvO9mPaF14IRVM2/2YyxT3JHY5eTdbKGM260PlNQf6dI47wdUxFo
xO6E1Mvayjgf2RggevXcZTw/4tMErxAN4MNuIGngxaJFkSIjwNUItVzdCd0+Yc+0
sP6oGLBXX8Oe43fl1P4CD4IcByuvd6r/PRs1tZUw6GcxrOMYgRWGKK6+w9LL6giJ
cb4m9yp4DDO6VViWYyPfVzwGMulZgyBzvB3M6A7bXsctIhz5uV4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org