Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NtTJKDo3CWpBehCkVKKkzu9_d5g.roa
File: NtTJKDo3CWpBehCkVKKkzu9_d5g.roa (raw, json)
Hash identifier: E5zGmz5/hWEfHGtFw7OcNY4WFhSXn+ew8K4zSQ14ZhU=
Subject key identifier: 36:D4:C9:28:3A:37:09:6A:41:7A:10:A4:54:A2:A4:CE:EF:7F:77:98
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NtTJKDo3CWpBehCkVKKkzu9_d5g.roa
Signing time: Thu 15 Sep 2022 02:46:13 +0000
ROA not before: Thu 15 Sep 2022 02:46:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=36D4C9283A37096A417A10A454A2A4CEEF7F7798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:c8:1f:1b:1f:9f:36:d5:68:4f:0a:40:cc:
71:6a:5c:db:7e:ae:b2:61:f2:0c:3e:5e:76:89:78:
0e:47:24:04:ea:9d:33:c7:0e:48:89:66:94:f8:a5:
d5:90:44:59:ab:b0:f2:91:a8:b1:e4:e0:dd:5c:9c:
fa:5d:64:ed:74:12:7b:7e:c3:3a:0b:8d:a8:4f:c1:
d2:71:ed:cb:6a:5b:c2:ae:74:a2:61:5c:81:78:28:
22:22:ed:e8:91:a0:61:b9:23:03:a7:37:49:f4:99:
90:ef:ef:72:aa:ff:34:bf:c0:e5:9d:c8:ca:8b:52:
e5:bc:66:4e:e7:98:70:aa:d7:36:2d:8d:12:ce:19:
cf:c3:f9:70:7c:58:40:30:82:94:d1:6d:f5:12:bd:
4b:8e:61:de:8e:8b:7d:df:a8:49:9d:eb:61:0b:d3:
a3:0b:f8:f6:b4:01:a3:af:94:f8:f3:f6:a1:d4:3c:
bc:54:ab:21:97:d9:5f:f4:3a:d8:8e:a4:a0:9a:6b:
9f:96:47:2b:f9:7f:0d:5e:c4:0a:4e:2b:88:72:bd:
8c:52:71:38:12:4c:06:94:2c:1a:9f:ba:61:ee:c2:
41:71:75:39:5c:cb:96:bb:06:7b:e8:4f:09:ff:88:
b1:8d:48:25:75:be:f1:23:9f:7d:69:1f:25:0f:43:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D4:C9:28:3A:37:09:6A:41:7A:10:A4:54:A2:A4:CE:EF:7F:77:98
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NtTJKDo3CWpBehCkVKKkzu9_d5g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.140.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:7f:e1:be:32:e2:2d:ec:5b:82:34:ba:90:ee:0d:d6:2e:13:
78:df:b4:83:89:4f:f2:00:71:04:a7:b2:92:d8:3e:66:ae:68:
1c:09:0f:38:53:c5:0a:60:79:18:33:ff:54:8d:c6:fd:cf:d9:
c8:50:cb:fd:88:97:df:e4:36:47:72:d7:04:85:d7:ce:75:29:
2a:b6:5d:be:29:2b:ad:b3:97:59:3f:1e:1b:88:18:d7:c8:88:
65:fb:d4:93:a5:9c:4e:bb:a0:83:fc:81:c1:ce:4a:0f:d7:d4:
2f:fc:32:7e:71:da:20:82:4c:fa:84:23:4e:c5:56:a6:9c:68:
a5:36:7c:94:d9:38:83:3d:80:9f:65:b8:da:c4:65:db:da:06:
bb:da:2f:ee:02:46:5a:41:f3:ab:60:cc:28:13:a2:21:c0:09:
31:ae:fc:1e:b4:94:69:bc:64:02:90:fb:72:38:77:7a:c9:a7:
bb:47:69:84:6f:08:4f:e8:ab:11:64:e3:94:cc:36:1d:48:f9:
91:30:a2:4d:0a:69:d1:d3:d0:24:49:b9:89:92:59:b5:75:48:
f4:3c:8d:a3:c3:4a:aa:6d:8b:c9:54:33:c3:80:15:84:49:79:
49:51:1d:68:fa:b3:21:bf:9e:68:2f:21:c9:8b:93:d1:cf:32:
87:ac:75:65
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ2MTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDM2RDRDOTI4M0EzNzA5
NkE0MTdBMTBBNDU0QTJBNENFRUY3Rjc3OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr7cgfGx+fNtVoTwpAzHFqXNt+rrJh8gw+XnaJeA5HJATqnTPH
DkiJZpT4pdWQRFmrsPKRqLHk4N1cnPpdZO10Ent+wzoLjahPwdJx7ctqW8KudKJh
XIF4KCIi7eiRoGG5IwOnN0n0mZDv73Kq/zS/wOWdyMqLUuW8Zk7nmHCq1zYtjRLO
Gc/D+XB8WEAwgpTRbfUSvUuOYd6Oi33fqEmd62EL06ML+Pa0AaOvlPjz9qHUPLxU
qyGX2V/0OtiOpKCaa5+WRyv5fw1exApOK4hyvYxScTgSTAaULBqfumHuwkFxdTlc
y5a7BnvoTwn/iLGNSCV1vvEjn31pHyUPQxzrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUNtTJKDo3CWpBehCkVKKkzu9/d5gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL050VEpLRG8zQ1dwQmVoQ2tW
S0trenU5X2Q1Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sIwwDQYJKoZIhvcNAQELBQADggEBAK5/4b4y4i3sW4I0upDuDdYuE3jftIOJT/IA
cQSnspLYPmauaBwJDzhTxQpgeRgz/1SNxv3P2chQy/2Il9/kNkdy1wSF1851KSq2
Xb4pK62zl1k/HhuIGNfIiGX71JOlnE67oIP8gcHOSg/X1C/8Mn5x2iCCTPqEI07F
VqacaKU2fJTZOIM9gJ9luNrEZdvaBrvaL+4CRlpB86tgzCgToiHACTGu/B60lGm8
ZAKQ+3I4d3rJp7tHaYRvCE/oqxFk45TMNh1I+ZEwok0KadHT0CRJuYmSWbV1SPQ8
jaPDSqpti8lUM8OAFYRJeUlRHWj6syG/nmgvIcmLk9HPMoesdWU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org