Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EjZSHj06QROTk9xU1dIIzo03x-k.roa
File: EjZSHj06QROTk9xU1dIIzo03x-k.roa (raw, json)
Hash identifier: NkD0wbDPcCvkE7xRr/43Q3f06lpaHWzsBq3q7TFlOxc=
Subject key identifier: 12:36:52:1E:3D:3A:41:13:93:93:DC:54:D5:D2:08:CE:8D:37:C7:E9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B72
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EjZSHj06QROTk9xU1dIIzo03x-k.roa
Signing time: Wed 29 Sep 2021 02:46:37 +0000
ROA not before: Wed 29 Sep 2021 02:46:37 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.177.46.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7026 (0x1b72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:37 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1236521E3D3A41139393DC54D5D208CE8D37C7E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:9d:2d:7a:a3:7d:c5:bb:41:e7:66:7e:b8:
d4:c4:b7:c7:79:d4:17:27:98:d6:0a:c9:e9:27:79:
7e:15:8c:60:53:ab:53:e2:35:91:ca:b2:1a:a6:f3:
d9:db:d6:3e:b9:0f:20:29:94:1d:e9:6d:0f:8d:24:
02:e8:96:bd:c5:cf:b3:a4:44:d7:ce:d8:07:d4:db:
ac:87:4a:de:46:3b:06:9d:f5:1a:09:a0:58:81:aa:
0c:3d:23:0e:6f:37:8b:fd:ae:4d:4b:db:5b:ac:bf:
24:57:21:0f:d1:f9:41:c7:68:81:34:fb:0e:ce:59:
b5:ed:50:30:7b:ee:85:ff:6a:3b:27:63:a2:f1:0a:
e6:e1:fa:95:38:26:5d:67:85:78:ad:ff:47:5f:d6:
23:15:d4:1e:0e:93:31:33:6f:da:7a:e7:b5:a9:69:
01:c4:0a:cc:9d:b6:d3:80:fa:da:1b:d9:f8:06:88:
a5:a5:82:84:ee:e0:66:a0:31:48:0c:5c:8b:df:27:
70:85:ff:b1:62:9a:13:71:01:a6:98:4f:8c:fe:10:
46:84:e0:e8:ed:c6:14:90:f9:a7:02:9d:bf:6b:e8:
d6:1b:3c:f4:e4:19:05:a5:16:4f:22:e9:99:84:87:
bd:fc:77:f7:99:df:3e:52:77:9e:70:29:60:79:22:
76:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:36:52:1E:3D:3A:41:13:93:93:DC:54:D5:D2:08:CE:8D:37:C7:E9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EjZSHj06QROTk9xU1dIIzo03x-k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.46.0/26
Signature Algorithm: sha256WithRSAEncryption
aa:1a:8e:ed:38:2d:4f:2a:0c:53:cf:c0:7b:99:0a:17:c1:d4:
9e:63:da:25:a0:e9:1c:d8:13:88:62:83:3f:82:4e:36:ba:09:
77:f3:d1:91:b3:e2:d0:73:b5:44:47:91:03:8a:f9:91:7e:60:
5a:d5:6d:d5:8f:8a:9a:98:1d:6d:5c:9e:4b:31:ce:e5:a0:1f:
5d:04:c6:e8:b8:61:4d:93:38:11:bc:62:c0:5e:b9:c5:f3:ae:
1e:8c:c4:98:db:c1:9b:0a:ab:06:0a:58:2c:5d:07:de:19:3e:
5a:17:2a:ce:5c:58:0d:5e:cf:0d:55:fb:d4:c8:b5:e5:a7:c2:
1d:86:0b:7e:f8:48:43:c1:63:ef:1c:57:6e:a8:79:26:f7:e8:
65:2a:2a:03:3f:54:54:a4:32:d7:78:ce:c6:45:8c:af:7f:4e:
5f:87:df:5e:ff:22:40:26:10:5f:2e:56:35:08:a0:5b:23:38:
80:ce:33:07:b0:7d:cc:38:c3:c8:c4:ee:dc:b1:4d:e1:9b:7a:
0f:83:54:96:4c:f2:31:4d:3f:0a:81:5a:4c:77:04:72:9a:4b:
57:16:dd:62:a5:22:ed:38:4a:87:32:40:c1:db:9e:6c:b8:fa:
c1:f2:35:b8:1b:b9:20:f4:58:c9:28:39:a4:15:e6:83:6c:51:
6c:97:96:5c
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICG3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2MzdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDEyMzY1MjFFM0QzQTQx
MTM5MzkzREM1NEQ1RDIwOENFOEQzN0M3RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTJp0teqN9xbtB52Z+uNTEt8d51BcnmNYKyekneX4VjGBTq1Pi
NZHKshqm89nb1j65DyAplB3pbQ+NJALolr3Fz7OkRNfO2AfU26yHSt5GOwad9RoJ
oFiBqgw9Iw5vN4v9rk1L21usvyRXIQ/R+UHHaIE0+w7OWbXtUDB77oX/ajsnY6Lx
Cubh+pU4Jl1nhXit/0df1iMV1B4OkzEzb9p657WpaQHECsydttOA+tob2fgGiKWl
goTu4GagMUgMXIvfJ3CF/7FimhNxAaaYT4z+EEaE4OjtxhSQ+acCnb9r6NYbPPTk
GQWlFk8i6ZmEh738d/eZ3z5Sd55wKWB5InbzAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUEjZSHj06QROTk9xU1dIIzo03x+kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0VqWlNIajA2UVJPVGs5eFUx
ZElJem8wM3gtay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQa0
sS4AMA0GCSqGSIb3DQEBCwUAA4IBAQCqGo7tOC1PKgxTz8B7mQoXwdSeY9oloOkc
2BOIYoM/gk42ugl389GRs+LQc7VER5EDivmRfmBa1W3Vj4qamB1tXJ5LMc7loB9d
BMbouGFNkzgRvGLAXrnF864ejMSY28GbCqsGClgsXQfeGT5aFyrOXFgNXs8NVfvU
yLXlp8Idhgt++EhDwWPvHFduqHkm9+hlKioDP1RUpDLXeM7GRYyvf05fh99e/yJA
JhBfLlY1CKBbIziAzjMHsH3MOMPIxO7csU3hm3oPg1SWTPIxTT8KgVpMdwRymktX
Ft1ipSLtOEqHMkDB255suPrB8jW4G7kg9FjJKDmkFeaDbFFsl5Zc
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org