Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gfe-ztNJI4vQZkIu7YeEwJgSmdc.roa
File: Gfe-ztNJI4vQZkIu7YeEwJgSmdc.roa (raw, json)
Hash identifier: /D5ntfdp6EqCDgV0LFb9vnLbBBDR69tTklHM/xTuVLY=
Subject key identifier: 19:F7:BE:CE:D3:49:23:8B:D0:66:42:2E:ED:87:84:C0:98:12:99:D7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gfe-ztNJI4vQZkIu7YeEwJgSmdc.roa
Signing time: Thu 15 Sep 2022 02:45:02 +0000
ROA not before: Thu 15 Sep 2022 02:45:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=19F7BECED349238BD066422EED8784C0981299D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:03:0b:24:e4:6b:94:a2:4e:88:ba:0c:c5:
ac:61:1a:c5:5c:e1:a1:5e:ec:ff:dd:ec:98:5d:76:
9b:c7:47:90:ed:6d:ce:2f:a2:a0:c7:e2:89:69:36:
64:c8:14:ff:38:cb:05:d2:f3:0c:8e:63:3e:b1:81:
1b:74:82:cf:06:44:60:9e:0e:7c:7f:1c:de:bc:68:
b3:fd:5f:90:e4:77:a1:1b:d7:7f:fa:06:48:91:f1:
46:65:b6:c0:0d:ae:7a:cc:0a:06:0d:54:a4:40:6b:
5c:1b:51:41:38:b9:9b:29:f5:d8:33:28:70:cc:c4:
3b:85:f6:a6:dd:c5:d0:65:c1:b6:f7:b5:02:a2:c1:
f7:44:0d:e4:de:5f:4e:b2:b4:1d:b4:2d:48:7d:49:
28:66:a5:c6:95:14:24:48:f4:38:f0:51:3d:f5:f9:
e8:5c:48:62:0a:97:28:15:d7:eb:b3:2d:fa:e0:df:
f4:ef:6a:d7:e3:68:d6:8c:48:57:81:c7:59:5c:d3:
c6:c4:0a:82:c4:4d:38:a6:da:50:8b:6c:5e:da:eb:
d1:af:e0:fa:97:5e:de:f4:0c:f0:00:a7:d3:c3:4e:
3c:7d:90:62:63:92:27:91:e6:2b:95:3e:60:b6:12:
d0:d5:1d:28:2e:98:2d:60:e4:a0:1c:b0:09:2d:6b:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:BE:CE:D3:49:23:8B:D0:66:42:2E:ED:87:84:C0:98:12:99:D7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gfe-ztNJI4vQZkIu7YeEwJgSmdc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:95:66:ef:7c:45:5e:e4:13:f1:81:42:89:57:fc:86:a9:a5:
a6:de:68:63:55:4f:ef:b1:d7:ea:12:4f:40:77:3f:4d:d3:95:
39:df:de:ad:18:d6:c3:82:10:71:01:0a:2d:93:47:ab:2f:61:
55:c2:7c:3e:66:da:90:95:c2:a4:89:86:b3:6e:48:72:0f:e2:
b0:64:7d:1f:45:78:8b:21:3c:35:e6:ce:d0:ad:9c:72:3e:f9:
66:9d:b0:6c:5b:d3:95:b0:dc:90:de:07:fc:9f:bf:84:f7:f9:
d9:d4:3c:e8:18:54:ae:ab:4d:49:7b:c5:c4:7c:15:f4:0d:6e:
d1:70:15:56:a7:a9:16:0d:58:a7:7d:7c:6f:ae:e1:3b:50:56:
3d:f6:a6:9b:7a:a4:42:35:ea:71:26:98:25:81:5a:a3:e5:64:
03:9e:c0:2a:f3:29:42:e7:48:95:f1:92:c4:0d:7f:29:9d:a9:
85:5e:20:db:b7:ca:4f:45:0a:47:d9:33:61:39:5b:53:fb:36:
b0:64:5f:94:6d:8f:12:86:70:a7:8b:fc:f0:db:37:56:64:a8:
67:63:a3:43:aa:14:c4:77:49:68:0c:3f:9b:0a:5c:bb:64:88:
fa:41:85:91:7c:6f:d3:2d:91:ce:8c:56:73:79:ab:b4:e9:3b:
55:e6:77:21
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE5RjdCRUNFRDM0OTIz
OEJEMDY2NDIyRUVEODc4NEMwOTgxMjk5RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1vwMLJORrlKJOiLoMxaxhGsVc4aFe7P/d7JhddpvHR5Dtbc4v
oqDH4olpNmTIFP84ywXS8wyOYz6xgRt0gs8GRGCeDnx/HN68aLP9X5Dkd6Eb13/6
BkiR8UZltsANrnrMCgYNVKRAa1wbUUE4uZsp9dgzKHDMxDuF9qbdxdBlwbb3tQKi
wfdEDeTeX06ytB20LUh9SShmpcaVFCRI9DjwUT31+ehcSGIKlygV1+uzLfrg3/Tv
atfjaNaMSFeBx1lc08bECoLETTim2lCLbF7a69Gv4PqXXt70DPAAp9PDTjx9kGJj
kieR5iuVPmC2EtDVHSgumC1g5KAcsAkta2mbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGfe+ztNJI4vQZkIu7YeEwJgSmdcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dmZS16dE5KSTR2UVprSXU3
WWVFd0pnU21kYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sRwwDQYJKoZIhvcNAQELBQADggEBAKSVZu98RV7kE/GBQolX/IappabeaGNVT++x
1+oST0B3P03TlTnf3q0Y1sOCEHEBCi2TR6svYVXCfD5m2pCVwqSJhrNuSHIP4rBk
fR9FeIshPDXmztCtnHI++WadsGxb05Ww3JDeB/yfv4T3+dnUPOgYVK6rTUl7xcR8
FfQNbtFwFVanqRYNWKd9fG+u4TtQVj32ppt6pEI16nEmmCWBWqPlZAOewCrzKULn
SJXxksQNfymdqYVeINu3yk9FCkfZM2E5W1P7NrBkX5RtjxKGcKeL/PDbN1ZkqGdj
o0OqFMR3SWgMP5sKXLtkiPpBhZF8b9Mtkc6MVnN5q7TpO1XmdyE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org