Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Koggdd304qoFzzZxw99YPsqqR1w.roa
File: Koggdd304qoFzzZxw99YPsqqR1w.roa (raw, json)
Hash identifier: yIYP/ZBbXnhjU/uZhnivUoHyr9/m5akZH6ZoAhx97Nw=
Subject key identifier: 2A:88:20:75:DD:F4:E2:AA:05:CF:36:71:C3:DF:58:3E:CA:AA:47:5C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Koggdd304qoFzzZxw99YPsqqR1w.roa
Signing time: Thu 15 Sep 2022 02:45:15 +0000
ROA not before: Thu 15 Sep 2022 02:45:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2A882075DDF4E2AA05CF3671C3DF583ECAAA475C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:5b:c9:fb:db:f8:aa:64:d3:8a:fa:b7:fb:
d6:cc:90:23:2f:29:d6:40:3e:b3:39:a5:cb:66:90:
74:dd:b6:2e:8b:3e:0f:b8:7f:16:2e:dc:0a:d2:50:
6c:0b:3c:40:cb:44:84:52:37:05:7c:01:40:3b:32:
fd:cf:2b:83:62:39:d9:2a:82:ab:7b:6c:81:08:63:
b8:2f:81:2f:b6:c9:b3:c4:bd:db:62:bd:58:77:a8:
06:3b:08:ca:a1:a9:14:f2:3b:81:bd:be:57:d6:63:
fa:c7:85:b8:fb:4a:17:a2:54:a8:be:1a:3d:4b:87:
4f:69:91:b3:3f:2f:c4:7e:6c:7f:f5:c7:97:57:00:
00:cb:87:b8:00:8c:10:9c:ca:19:66:b6:97:5d:4e:
28:e8:eb:f7:94:09:8b:87:80:01:be:da:e9:bb:ec:
56:09:a6:10:6d:63:de:c0:f7:37:a2:0e:8e:f8:ef:
43:42:35:5e:43:51:a4:6c:fb:b5:7f:b9:b9:18:95:
cc:9e:96:91:2b:e3:3c:1b:05:71:1a:86:b1:62:fc:
4c:55:64:4b:2c:36:54:4b:c7:0d:43:80:32:90:ca:
4f:b8:2c:78:b5:f7:c9:bb:5b:47:4d:66:de:4d:91:
75:90:c5:85:8e:f0:26:ac:20:91:58:6b:01:0f:52:
1a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:88:20:75:DD:F4:E2:AA:05:CF:36:71:C3:DF:58:3E:CA:AA:47:5C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Koggdd304qoFzzZxw99YPsqqR1w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.16.0/21
Signature Algorithm: sha256WithRSAEncryption
51:78:24:32:da:63:f6:14:28:af:1b:ff:0e:67:90:3b:87:63:
b5:e8:bb:97:e8:76:05:e6:5c:d8:82:18:5d:44:a1:c0:3d:44:
f7:97:71:1b:bf:03:0a:b9:f8:00:bb:2c:b7:f9:ca:e9:2a:af:
e5:47:89:ac:b7:44:01:df:0b:5c:e0:a6:eb:4f:4a:d3:cf:41:
40:e7:45:68:d4:08:ff:c7:42:dc:91:12:e9:9d:8f:90:33:88:
55:dc:56:f0:7e:d2:6e:e8:f2:c9:89:76:5f:1f:65:80:84:cb:
fa:51:35:1e:4f:e8:26:0b:1e:89:f8:29:9a:dd:60:63:32:cc:
4c:5a:db:3c:8c:0f:bd:9c:75:13:83:5d:3f:bd:1b:53:85:80:
db:a3:c8:e3:9c:0b:b6:6c:9f:4b:cd:9d:55:7c:0f:90:ff:54:
20:a1:9f:35:4b:f7:5a:7b:85:e4:c4:bf:5e:8a:77:3f:b8:9f:
c2:61:1b:90:01:bb:90:46:c2:18:68:63:fb:da:4c:c6:5e:dc:
2a:d3:37:bf:67:e2:ff:8c:34:0e:0e:ac:d5:5b:04:63:cc:f6:
d6:88:8e:95:a0:cc:62:53:d9:93:3b:37:54:4c:74:77:78:07:
1e:db:a9:95:f7:13:01:71:a8:fa:4a:05:dd:46:c7:dd:85:06:
3b:51:82:73
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MTVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJBODgyMDc1RERGNEUy
QUEwNUNGMzY3MUMzREY1ODNFQ0FBQTQ3NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDISFvJ+9v4qmTTivq3+9bMkCMvKdZAPrM5pctmkHTdti6LPg+4
fxYu3ArSUGwLPEDLRIRSNwV8AUA7Mv3PK4NiOdkqgqt7bIEIY7gvgS+2ybPEvdti
vVh3qAY7CMqhqRTyO4G9vlfWY/rHhbj7SheiVKi+Gj1Lh09pkbM/L8R+bH/1x5dX
AADLh7gAjBCcyhlmtpddTijo6/eUCYuHgAG+2um77FYJphBtY97A9zeiDo7470NC
NV5DUaRs+7V/ubkYlcyelpEr4zwbBXEahrFi/ExVZEssNlRLxw1DgDKQyk+4LHi1
98m7W0dNZt5NkXWQxYWO8CasIJFYawEPUhoZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKoggdd304qoFzzZxw99YPsqqR1wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0tvZ2dkZDMwNHFvRnp6Wnh3
OTlZUHNxcVIxdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sRAwDQYJKoZIhvcNAQELBQADggEBAFF4JDLaY/YUKK8b/w5nkDuHY7Xou5fodgXm
XNiCGF1EocA9RPeXcRu/Awq5+AC7LLf5yukqr+VHiay3RAHfC1zgputPStPPQUDn
RWjUCP/HQtyREumdj5AziFXcVvB+0m7o8smJdl8fZYCEy/pRNR5P6CYLHon4KZrd
YGMyzExa2zyMD72cdRODXT+9G1OFgNujyOOcC7Zsn0vNnVV8D5D/VCChnzVL91p7
heTEv16Kdz+4n8JhG5ABu5BGwhhoY/vaTMZe3CrTN79n4v+MNA4OrNVbBGPM9taI
jpWgzGJT2ZM7N1RMdHd4Bx7bqZX3EwFxqPpKBd1Gx92FBjtRgnM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org