Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D8ySdKm988Z402XsZ1pdrFyrAWs.roa
File: D8ySdKm988Z402XsZ1pdrFyrAWs.roa (raw, json)
Hash identifier: tHTTAKgCjSWOfkZHatGrOttRcBw8ulQOb28rsgZ71yU=
Subject key identifier: 0F:CC:92:74:A9:BD:F3:C6:78:D3:65:EC:67:5A:5D:AC:5C:AB:01:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B97
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D8ySdKm988Z402XsZ1pdrFyrAWs.roa
Signing time: Wed 29 Sep 2021 02:46:46 +0000
ROA not before: Wed 29 Sep 2021 02:46:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.176.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7063 (0x1b97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:46 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0FCC9274A9BDF3C678D365EC675A5DAC5CAB016B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:87:53:03:62:c1:49:1f:21:67:ec:47:4e:
19:14:f9:eb:d8:39:36:be:8e:f7:d6:fc:e4:2c:5f:
1b:46:bd:0a:c9:da:ef:cb:c6:92:01:84:fd:84:c2:
47:f5:1b:e6:6e:0a:ad:45:7e:6f:e1:db:a0:eb:54:
4f:9a:c6:69:1e:82:11:14:fc:ed:06:3e:f8:0e:6f:
b6:f2:d1:13:d5:03:8e:71:d6:1c:2d:19:1c:a4:57:
31:e6:d2:89:0d:30:b6:f3:6c:97:fd:83:9a:9f:23:
2c:17:d0:d8:b6:09:e3:5d:3a:96:99:95:0f:91:76:
52:a1:39:40:33:38:86:54:60:ad:14:21:42:66:12:
7c:c3:7d:5b:55:23:be:0e:a3:87:3a:11:24:03:60:
8e:42:97:a1:fb:c0:33:ce:ac:0b:94:51:ae:f3:1d:
f0:00:57:fe:5c:83:fb:00:74:70:67:8e:ec:be:cd:
35:ac:a5:ee:15:22:1e:1a:79:50:65:07:cb:8c:82:
7a:d1:72:36:a5:1e:62:6f:e7:7b:b6:ce:df:0a:ef:
aa:13:db:01:90:b8:7f:56:1d:e4:d5:89:4b:e1:5e:
d8:dc:e5:ae:89:ff:dc:4d:01:54:99:53:b9:d8:73:
25:4a:7a:2c:f6:9c:87:ba:02:9e:ce:c5:e3:49:13:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CC:92:74:A9:BD:F3:C6:78:D3:65:EC:67:5A:5D:AC:5C:AB:01:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D8ySdKm988Z402XsZ1pdrFyrAWs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.156.0/22
Signature Algorithm: sha256WithRSAEncryption
01:f3:3e:05:ed:41:85:0c:f3:be:f5:d9:f0:1c:a9:2c:bf:f3:
fc:34:ee:0a:3d:e6:0b:e9:a3:3c:de:b4:2d:4e:95:14:58:71:
d3:e3:d1:f8:07:0b:6d:00:36:80:57:6a:de:98:dc:72:40:87:
63:75:dc:e9:fe:dc:24:e0:6c:ce:50:2d:28:13:6a:fa:3c:bf:
8e:4e:cc:ff:e5:19:f8:50:d4:68:cb:e6:45:62:ab:b4:d0:2b:
15:28:0f:bd:8b:92:cb:40:58:ae:00:b8:60:8e:0b:e4:fc:40:
b4:8b:75:69:08:16:21:62:99:d2:86:82:d7:19:ea:5c:3d:0d:
87:1b:c8:23:cb:87:a2:93:e4:27:46:9a:69:7d:6b:97:3f:aa:
e5:14:f8:45:62:9d:5d:e1:af:c9:2e:ab:83:ec:25:af:e4:9a:
36:c2:f9:57:df:56:8e:4a:33:69:ca:72:d5:95:59:82:0c:12:
d5:c7:33:09:84:13:b7:ff:a8:5b:91:62:90:a8:45:56:9f:dd:
e3:47:03:b8:ca:2e:58:2b:83:23:c0:8f:c0:45:19:88:61:5d:
b4:52:2e:3c:19:22:46:0a:21:b4:2e:e3:a9:4b:a6:90:a4:06:
2b:31:b7:0e:18:9c:1d:93:05:d2:76:31:12:eb:da:3a:77:5e:
a4:ae:7a:08
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG5cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2NDZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDBGQ0M5Mjc0QTlCREYz
QzY3OEQzNjVFQzY3NUE1REFDNUNBQjAxNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+yIdTA2LBSR8hZ+xHThkU+evYOTa+jvfW/OQsXxtGvQrJ2u/L
xpIBhP2Ewkf1G+ZuCq1Ffm/h26DrVE+axmkeghEU/O0GPvgOb7by0RPVA45x1hwt
GRykVzHm0okNMLbzbJf9g5qfIywX0Ni2CeNdOpaZlQ+RdlKhOUAzOIZUYK0UIUJm
EnzDfVtVI74Oo4c6ESQDYI5Cl6H7wDPOrAuUUa7zHfAAV/5cg/sAdHBnjuy+zTWs
pe4VIh4aeVBlB8uMgnrRcjalHmJv53u2zt8K76oT2wGQuH9WHeTViUvhXtjc5a6J
/9xNAVSZU7nYcyVKeiz2nIe6Ap7OxeNJE7xxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUD8ySdKm988Z402XsZ1pdrFyrAWswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0Q4eVNkS205ODhaNDAyWHNa
MXBkckZ5ckFXcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sJwwDQYJKoZIhvcNAQELBQADggEBAAHzPgXtQYUM87712fAcqSy/8/w07go95gvp
ozzetC1OlRRYcdPj0fgHC20ANoBXat6Y3HJAh2N13On+3CTgbM5QLSgTavo8v45O
zP/lGfhQ1GjL5kViq7TQKxUoD72LkstAWK4AuGCOC+T8QLSLdWkIFiFimdKGgtcZ
6lw9DYcbyCPLh6KT5CdGmml9a5c/quUU+EVinV3hr8kuq4PsJa/kmjbC+VffVo5K
M2nKctWVWYIMEtXHMwmEE7f/qFuRYpCoRVaf3eNHA7jKLlgrgyPAj8BFGYhhXbRS
LjwZIkYKIbQu46lLppCkBisxtw4YnB2TBdJ2MRLr2jp3XqSuegg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org