Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IN6OmClYQWd-VZ9Dg6yoIxtJUHE.roa
File: IN6OmClYQWd-VZ9Dg6yoIxtJUHE.roa (raw, json)
Hash identifier: SaUr7HR7/0rMPnx6onMY7hPb3MiEai1hsrZJ+Q21H8U=
Subject key identifier: 20:DE:8E:98:29:58:41:67:7E:55:9F:43:83:AC:A8:23:1B:49:50:71
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 209D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IN6OmClYQWd-VZ9Dg6yoIxtJUHE.roa
Signing time: Fri 25 Nov 2022 04:38:55 +0000
ROA not before: Fri 25 Nov 2022 04:38:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8349 (0x209d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=20DE8E98295841677E559F4383ACA8231B495071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a0:f7:63:2d:4f:c5:8e:47:7b:92:d9:e3:99:
2a:7d:06:f3:14:5b:4f:1c:b7:e9:cb:44:d0:ae:69:
7e:7d:06:a0:f3:78:0c:cd:5b:08:5a:45:d5:09:fa:
54:e3:10:b1:2d:bb:18:09:83:05:04:b1:8e:6b:f1:
2d:db:3c:12:49:a4:8a:32:8f:8f:b5:b2:ce:bc:da:
a6:b9:37:1a:a9:ff:ce:df:bc:cf:63:7d:eb:56:86:
17:13:0a:df:57:69:5c:eb:4e:a2:5e:ad:da:f2:e8:
da:75:a0:f0:b8:e4:d5:78:2f:d0:9b:89:a4:e2:f9:
fc:17:5f:15:e6:55:64:fd:27:f1:99:de:df:73:50:
b0:2f:03:d7:5d:6c:68:45:40:1a:d3:ac:86:60:33:
b4:fb:a0:ff:1b:69:eb:10:e4:31:d4:c7:75:55:2c:
49:51:ea:0b:05:f4:7a:84:87:31:d5:f7:d7:6c:37:
43:10:fa:5a:9b:40:a0:5b:ee:b6:a3:c2:4e:07:b1:
be:9a:4a:b9:52:60:d1:20:0b:31:39:47:12:c5:f6:
a6:37:a1:be:32:6b:46:6e:cc:88:03:ee:80:a7:02:
dd:d5:e0:db:4e:b2:56:24:42:41:a3:37:73:02:2f:
1d:d8:72:cd:56:8e:f3:20:9f:12:54:7d:29:6a:15:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DE:8E:98:29:58:41:67:7E:55:9F:43:83:AC:A8:23:1B:49:50:71
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IN6OmClYQWd-VZ9Dg6yoIxtJUHE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.132.0/22
Signature Algorithm: sha256WithRSAEncryption
32:c6:4b:7f:7d:18:28:80:57:da:86:67:bd:87:e8:6b:d7:30:
4c:e0:73:f7:7b:88:38:be:a5:da:11:04:20:0d:8b:aa:79:25:
25:19:e3:c3:d8:88:ee:54:1b:c0:d7:7c:5c:b1:37:47:ce:6c:
60:a3:f4:56:21:9d:b9:f4:ae:d7:46:d9:c5:e9:bf:68:af:47:
d9:5f:7f:18:36:91:36:de:da:da:46:bb:bb:2d:6c:1e:fa:a1:
3d:10:ba:b4:11:0a:9d:cc:ea:83:dd:b0:f7:57:0e:ea:61:9e:
37:5c:14:70:74:bb:16:f6:be:45:1d:b7:78:15:4c:4c:1c:b6:
2a:88:f5:7f:bb:60:3b:90:93:b9:01:17:88:c7:df:04:65:a9:
99:d4:f2:41:73:12:7c:2b:ab:4a:3f:31:fa:80:61:08:4d:25:
b7:76:4c:25:5d:00:42:9a:38:c1:09:96:9b:a7:d6:61:ff:1d:
73:a5:db:ae:7d:f5:33:c4:f1:58:34:49:ac:e1:2a:cf:99:d2:
53:4a:b5:9d:97:03:56:30:e8:e4:f6:62:dc:88:69:b8:5b:70:
27:8c:42:3b:53:df:0b:e1:6e:1f:e6:42:41:a7:ff:b6:4e:a1:
88:d6:0d:c0:36:63:af:ee:f2:a4:67:cf:24:e0:2e:df:83:52:
4a:e4:91:d3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4NTVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDIwREU4RTk4Mjk1ODQx
Njc3RTU1OUY0MzgzQUNBODIzMUI0OTUwNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD5oPdjLU/Fjkd7ktnjmSp9BvMUW08ct+nLRNCuaX59BqDzeAzN
WwhaRdUJ+lTjELEtuxgJgwUEsY5r8S3bPBJJpIoyj4+1ss682qa5Nxqp/87fvM9j
fetWhhcTCt9XaVzrTqJerdry6Np1oPC45NV4L9CbiaTi+fwXXxXmVWT9J/GZ3t9z
ULAvA9ddbGhFQBrTrIZgM7T7oP8baesQ5DHUx3VVLElR6gsF9HqEhzHV99dsN0MQ
+lqbQKBb7rajwk4Hsb6aSrlSYNEgCzE5RxLF9qY3ob4ya0ZuzIgD7oCnAt3V4NtO
slYkQkGjN3MCLx3Ycs1WjvMgnxJUfSlqFaM7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUIN6OmClYQWd+VZ9Dg6yoIxtJUHEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lONk9tQ2xZUVdkLVZaOURn
NnlvSXh0SlVIRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sYQwDQYJKoZIhvcNAQELBQADggEBADLGS399GCiAV9qGZ72H6GvXMEzgc/d7iDi+
pdoRBCANi6p5JSUZ48PYiO5UG8DXfFyxN0fObGCj9FYhnbn0rtdG2cXpv2ivR9lf
fxg2kTbe2tpGu7stbB76oT0QurQRCp3M6oPdsPdXDuphnjdcFHB0uxb2vkUdt3gV
TEwctiqI9X+7YDuQk7kBF4jH3wRlqZnU8kFzEnwrq0o/MfqAYQhNJbd2TCVdAEKa
OMEJlpun1mH/HXOl26599TPE8Vg0SazhKs+Z0lNKtZ2XA1Yw6OT2YtyIabhbcCeM
QjtT3wvhbh/mQkGn/7ZOoYjWDcA2Y6/u8qRnzyTgLt+DUkrkkdM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org