Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KglGXHSX1v-w5uja2PBLt20VIpk.roa
File: KglGXHSX1v-w5uja2PBLt20VIpk.roa (raw, json)
Hash identifier: KuWl3aOBIaALAEe9+LV4PwuR8VSPs7NrUgGgsB4gQzw=
Subject key identifier: 2A:09:46:5C:74:97:D6:FF:B0:E6:E8:DA:D8:F0:4B:B7:6D:15:22:99
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 16B1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KglGXHSX1v-w5uja2PBLt20VIpk.roa
Signing time: Sun 07 Feb 2021 12:13:42 +0000
ROA not before: Sun 07 Feb 2021 12:13:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5809 (0x16b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:13:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2A09465C7497D6FFB0E6E8DAD8F04BB76D152299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:3f:28:ab:11:14:9e:b7:09:a4:fa:38:6b:
48:08:82:5d:b2:bd:e0:ee:3e:5a:26:06:79:0b:0f:
8f:18:2b:a4:f2:c7:04:5f:2d:8e:2b:f6:69:1f:13:
42:c7:42:98:a6:0e:34:78:41:f2:8b:1f:8f:c9:1a:
05:cf:66:e7:c3:3a:52:b8:78:f7:68:3c:ac:1c:35:
36:f8:5f:45:3d:bd:27:13:bc:44:11:a0:ff:38:c3:
b9:8f:61:6b:c5:6d:38:ac:c0:09:35:64:6a:3e:41:
4a:e8:1b:89:91:3d:ec:22:9d:48:6f:2d:37:e8:e3:
c1:a1:7b:d1:9b:a7:8d:e2:87:6d:13:78:1e:48:33:
55:cc:ea:69:88:03:9c:a9:c4:db:ec:4f:d7:65:6d:
aa:b5:d8:37:e7:d3:1c:61:48:78:c4:2a:fc:c2:6d:
4d:3f:56:e6:aa:89:55:f3:9b:d5:16:2b:ab:1c:b0:
4e:f9:51:1a:d2:02:3c:79:db:b7:9d:c1:5a:e5:d8:
60:02:ac:93:d6:cf:c2:d6:18:4a:eb:fe:29:06:51:
1c:23:7d:df:f7:ea:6a:cb:c2:73:4d:61:39:b7:95:
80:da:86:d6:18:65:e4:34:d2:70:e0:45:e7:38:e7:
f9:7e:7b:39:8f:f6:a8:62:2e:81:4e:be:d8:23:b0:
4b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:09:46:5C:74:97:D6:FF:B0:E6:E8:DA:D8:F0:4B:B7:6D:15:22:99
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KglGXHSX1v-w5uja2PBLt20VIpk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.224.0/22
Signature Algorithm: sha256WithRSAEncryption
38:29:16:6e:8e:21:81:21:13:dd:ac:10:ad:db:e4:ee:4c:52:
d7:4f:a7:e3:86:61:ea:98:0d:c4:03:9a:ff:d7:cb:74:63:cf:
3c:85:f9:01:b6:de:e2:47:b3:04:ca:b4:16:ed:d2:dc:69:d0:
e5:2f:61:13:e9:03:bf:a0:f5:42:ba:33:f9:19:0f:f2:4f:5f:
0e:bf:a9:69:86:bd:3f:43:02:2a:98:08:47:ab:81:aa:c9:17:
de:c6:67:9b:ad:0e:39:0a:77:08:27:f3:6e:89:06:81:4b:08:
ed:62:dd:a6:1d:ab:dc:a1:02:65:17:1c:92:d5:72:cc:6f:7c:
4b:d2:cc:79:41:44:28:5e:00:e2:e3:42:1a:48:8a:1e:f3:d9:
ce:03:0b:c3:fc:02:62:52:04:94:0a:f4:58:0a:31:37:27:39:
c1:2e:ad:33:b4:14:dd:d2:0c:85:42:0c:e3:57:e4:db:cd:a9:
b6:fa:3b:49:78:c9:71:47:6d:34:d6:b2:76:e0:76:bb:36:ba:
c2:c5:35:3e:de:a0:b7:1e:a6:f3:a4:92:2b:e3:db:45:91:dd:
69:16:c1:6b:fe:06:fe:54:2a:a2:20:dc:88:9c:08:42:96:2a:
f3:69:38:72:a2:18:72:7e:75:8d:fa:c2:e7:ad:c0:46:3e:2a:
66:37:cd:39
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFrEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjEzNDJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDJBMDk0NjVDNzQ5N0Q2
RkZCMEU2RThEQUQ4RjA0QkI3NkQxNTIyOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpWj8oqxEUnrcJpPo4a0gIgl2yveDuPlomBnkLD48YK6TyxwRf
LY4r9mkfE0LHQpimDjR4QfKLH4/JGgXPZufDOlK4ePdoPKwcNTb4X0U9vScTvEQR
oP84w7mPYWvFbTiswAk1ZGo+QUroG4mRPewinUhvLTfo48Ghe9Gbp43ih20TeB5I
M1XM6mmIA5ypxNvsT9dlbaq12Dfn0xxhSHjEKvzCbU0/VuaqiVXzm9UWK6scsE75
URrSAjx527edwVrl2GACrJPWz8LWGErr/ikGURwjfd/36mrLwnNNYTm3lYDahtYY
ZeQ00nDgRec45/l+ezmP9qhiLoFOvtgjsEvLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKglGXHSX1v+w5uja2PBLt20VIpkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0tnbEdYSFNYMXYtdzV1amEy
UEJMdDIwVklway5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
seAwDQYJKoZIhvcNAQELBQADggEBADgpFm6OIYEhE92sEK3b5O5MUtdPp+OGYeqY
DcQDmv/Xy3RjzzyF+QG23uJHswTKtBbt0txp0OUvYRPpA7+g9UK6M/kZD/JPXw6/
qWmGvT9DAiqYCEergarJF97GZ5utDjkKdwgn826JBoFLCO1i3aYdq9yhAmUXHJLV
csxvfEvSzHlBRCheAOLjQhpIih7z2c4DC8P8AmJSBJQK9FgKMTcnOcEurTO0FN3S
DIVCDONX5NvNqbb6O0l4yXFHbTTWsnbgdrs2usLFNT7eoLcepvOkkivj20WR3WkW
wWv+Bv5UKqIg3IicCEKWKvNpOHKiGHJ+dY36wuetwEY+KmY3zTk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org