Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/33ejniTm4Ws4wZY4fb7YlDK5biM.roa
File: 33ejniTm4Ws4wZY4fb7YlDK5biM.roa (raw, json)
Hash identifier: A9lPTOsRCwl2lehmWUWMe3zexY74wyttz7Vg65zRZ1c=
Subject key identifier: DF:77:A3:9E:24:E6:E1:6B:38:C1:96:38:7D:BE:D8:94:32:B9:6E:23
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1625
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/33ejniTm4Ws4wZY4fb7YlDK5biM.roa
Signing time: Sun 07 Feb 2021 12:08:37 +0000
ROA not before: Sun 07 Feb 2021 12:08:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5669 (0x1625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:08:37 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DF77A39E24E6E16B38C196387DBED89432B96E23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:0c:96:f6:b0:cc:f3:1a:4f:09:1d:5d:08:
c9:7d:13:65:46:87:f9:4b:83:ae:3c:11:5b:dd:ea:
67:29:55:18:91:ad:a9:57:48:aa:19:f6:b5:4d:0b:
c0:b4:c1:0b:a4:3b:17:4f:d1:75:43:d8:70:19:d9:
bf:22:ee:a7:fd:7c:7d:ed:24:43:21:35:87:a3:48:
82:35:1f:55:93:a9:86:3f:aa:ed:f1:ba:d7:27:03:
98:7b:dc:bb:81:9e:db:22:e9:fe:d2:bc:ba:7e:38:
68:98:cb:9e:04:e9:c2:57:ef:47:03:83:41:d3:e6:
e0:e4:95:2e:80:0c:2a:89:8b:ab:bc:1e:39:96:a3:
2e:84:41:21:2c:b0:d5:43:ec:da:bc:cf:2a:cd:6e:
3c:49:a2:6b:07:a5:c4:90:2b:2a:64:6f:86:f6:b8:
b9:c0:3d:6a:06:a5:88:b4:1d:f4:3f:4e:d7:ad:73:
27:61:15:00:ad:f7:0b:df:be:1b:c9:97:c0:bf:36:
f3:0f:b9:01:ba:6e:66:78:e2:40:f3:06:03:46:18:
75:97:43:08:6c:fe:66:a8:99:79:71:be:92:a3:c1:
36:5d:94:a9:82:8d:97:87:b8:b9:d7:85:12:37:b6:
4c:6d:a4:d7:e6:3f:60:bd:86:eb:a7:60:00:e7:71:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:77:A3:9E:24:E6:E1:6B:38:C1:96:38:7D:BE:D8:94:32:B9:6E:23
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/33ejniTm4Ws4wZY4fb7YlDK5biM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:88:0e:e8:45:70:ab:8e:d4:63:4a:cb:87:ef:54:83:1a:f5:
5f:09:f7:01:f6:09:4c:55:68:df:59:53:4c:c5:c0:d9:01:42:
47:50:7d:66:ee:e4:18:67:2e:80:8b:00:f9:4a:b0:57:d9:27:
c9:ae:04:d5:b9:6e:53:6f:a6:f8:9f:8b:9d:e7:89:49:01:45:
d8:3b:0d:aa:f4:1e:94:75:17:b3:7d:ed:17:a9:cf:60:e9:98:
ac:db:d9:b6:02:75:b0:87:27:96:62:f3:08:f0:3b:b7:39:a5:
30:b4:78:43:33:32:ec:d4:8a:13:ac:2e:b6:bb:bd:01:4a:40:
69:87:85:64:89:8b:b8:88:a4:e3:9a:46:2b:d8:00:4c:73:b4:
1f:46:c0:61:a5:4c:92:70:30:52:f7:81:09:26:a5:53:59:76:
d6:f3:a6:e4:89:48:32:30:cd:57:f1:be:37:4c:86:57:bf:ae:
cf:02:e5:ea:49:41:41:68:39:8b:a8:33:5a:61:f6:a0:f6:d3:
31:f5:18:3d:bd:db:ce:f1:6b:5c:60:ef:40:ec:9a:9a:ae:61:
5f:b6:7b:6a:25:c0:9d:03:df:9b:cb:c5:49:0e:75:73:c5:3a:
71:94:57:3b:0f:31:75:e3:0f:ce:1c:7e:fb:7d:83:d5:86:da:
d6:9c:68:ca
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjA4MzdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKERGNzdBMzlFMjRFNkUx
NkIzOEMxOTYzODdEQkVEODk0MzJCOTZFMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcjgyW9rDM8xpPCR1dCMl9E2VGh/lLg648EVvd6mcpVRiRralX
SKoZ9rVNC8C0wQukOxdP0XVD2HAZ2b8i7qf9fH3tJEMhNYejSII1H1WTqYY/qu3x
utcnA5h73LuBntsi6f7SvLp+OGiYy54E6cJX70cDg0HT5uDklS6ADCqJi6u8HjmW
oy6EQSEssNVD7Nq8zyrNbjxJomsHpcSQKypkb4b2uLnAPWoGpYi0HfQ/Ttetcydh
FQCt9wvfvhvJl8C/NvMPuQG6bmZ44kDzBgNGGHWXQwhs/maomXlxvpKjwTZdlKmC
jZeHuLnXhRI3tkxtpNfmP2C9huunYADnccJvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU33ejniTm4Ws4wZY4fb7YlDK5biMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzMzZWpuaVRtNFdzNHdaWTRm
YjdZbERLNWJpTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sWgwDQYJKoZIhvcNAQELBQADggEBAFqIDuhFcKuO1GNKy4fvVIMa9V8J9wH2CUxV
aN9ZU0zFwNkBQkdQfWbu5BhnLoCLAPlKsFfZJ8muBNW5blNvpvifi53niUkBRdg7
Dar0HpR1F7N97Repz2DpmKzb2bYCdbCHJ5Zi8wjwO7c5pTC0eEMzMuzUihOsLra7
vQFKQGmHhWSJi7iIpOOaRivYAExztB9GwGGlTJJwMFL3gQkmpVNZdtbzpuSJSDIw
zVfxvjdMhle/rs8C5epJQUFoOYuoM1ph9qD20zH1GD29287xa1xg70DsmpquYV+2
e2olwJ0D35vLxUkOdXPFOnGUVzsPMXXjD84cfvt9g9WG2tacaMo=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:20 2023 by rpki-client on console-fra.rpki-client.org