Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OLxKo3vO6HIVyXRdpQaxVT2qVhU.roa
File: OLxKo3vO6HIVyXRdpQaxVT2qVhU.roa (raw, json)
Hash identifier: EuRWZYkhqmFBCkv2p6ijOTLSvbLIYc//Av581AfqZNU=
Subject key identifier: 38:BC:4A:A3:7B:CE:E8:72:15:C9:74:5D:A5:06:B1:55:3D:AA:56:15
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22B5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OLxKo3vO6HIVyXRdpQaxVT2qVhU.roa
Signing time: Fri 25 Nov 2022 04:41:33 +0000
ROA not before: Fri 25 Nov 2022 04:41:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8885 (0x22b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=38BC4AA37BCEE87215C9745DA506B1553DAA5615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:9a:a7:e3:70:1d:2a:91:94:37:e0:0c:45:
98:b7:34:0c:b6:59:af:87:35:5e:cb:ff:fc:65:b6:
8b:88:df:cd:83:07:be:a7:a9:b9:d3:27:70:ab:45:
58:93:fe:ce:55:28:7a:a6:df:de:c7:87:d2:9b:d6:
f7:12:75:68:ed:a9:2d:25:09:a4:a0:d7:b2:ad:fa:
04:d3:67:b4:73:3f:b5:6f:78:de:15:ff:03:0f:52:
17:99:dd:ce:0b:fa:cf:b9:a4:7c:b9:df:6a:3d:c8:
a8:f0:0a:fa:9c:9d:ef:9f:ac:6a:c0:77:8f:ee:d0:
9c:fd:cc:30:65:36:4b:64:ad:93:97:63:b0:63:36:
3d:63:ac:3b:c0:ac:28:ed:dd:4f:53:26:01:5c:95:
74:f7:2d:87:16:65:c6:a2:4f:f3:f4:82:bc:17:6a:
b6:57:e6:d2:fb:1b:e3:c5:f4:30:a0:af:a2:0a:ae:
c3:e1:b1:07:8f:fb:04:44:4c:2d:b9:3f:84:2d:82:
d5:ac:b3:72:0a:f8:bc:88:46:98:b3:5a:87:7b:b7:
8b:85:f7:ef:a8:ad:0a:06:06:5d:5e:9e:5f:c9:9e:
a5:e0:01:6e:4b:71:d3:de:ef:79:2d:67:63:fd:89:
97:62:02:70:6e:08:99:85:b0:4b:30:5e:24:5f:6a:
fb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BC:4A:A3:7B:CE:E8:72:15:C9:74:5D:A5:06:B1:55:3D:AA:56:15
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OLxKo3vO6HIVyXRdpQaxVT2qVhU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.168.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:af:50:5e:9e:bb:53:8d:a7:0d:4f:9e:fa:27:93:72:43:70:
97:30:9a:f6:c0:e3:15:1b:e6:6f:c7:61:55:e8:1b:8a:ed:82:
75:b3:fd:ae:62:87:c5:4d:ba:1a:31:d7:b5:e7:64:52:13:3f:
9d:99:93:7d:67:11:9f:f4:bc:ec:30:c7:75:34:68:73:2a:73:
39:5b:f3:ad:11:c9:00:8c:3d:55:bc:88:a7:ac:fb:19:93:a2:
b3:fd:e2:00:8b:ae:d7:fc:6f:09:9d:d4:97:22:58:9a:b8:a7:
61:13:25:81:38:a1:a0:65:1a:f9:3d:c9:33:18:45:5b:79:79:
24:03:f2:11:4e:6f:de:be:b0:fb:bd:f9:a0:60:2f:31:18:c4:
c0:46:5b:42:63:9b:18:b7:93:4b:78:57:33:b1:69:b9:e5:2a:
c9:da:a2:97:61:a1:83:51:d6:ec:b4:58:98:e8:87:f7:fc:77:
1e:14:73:b9:4d:ed:61:3a:81:5b:6d:15:85:e3:f4:40:ff:4e:
5c:cc:85:43:18:1a:c8:ba:0e:4b:26:db:32:c0:36:58:71:7f:
84:02:f3:20:fa:66:7a:0c:55:b6:51:22:42:c4:69:60:fc:4c:
00:d0:38:ba:ec:63:2a:ae:7c:b4:14:54:5e:d0:c6:11:f0:2d:
c4:c3:2f:ef
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIrUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxMzNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDM4QkM0QUEzN0JDRUU4
NzIxNUM5NzQ1REE1MDZCMTU1M0RBQTU2MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDc5qn43AdKpGUN+AMRZi3NAy2Wa+HNV7L//xltouI382DB76n
qbnTJ3CrRViT/s5VKHqm397Hh9Kb1vcSdWjtqS0lCaSg17Kt+gTTZ7RzP7VveN4V
/wMPUheZ3c4L+s+5pHy532o9yKjwCvqcne+frGrAd4/u0Jz9zDBlNktkrZOXY7Bj
Nj1jrDvArCjt3U9TJgFclXT3LYcWZcaiT/P0grwXarZX5tL7G+PF9DCgr6IKrsPh
sQeP+wRETC25P4QtgtWss3IK+LyIRpizWod7t4uF9++orQoGBl1enl/JnqXgAW5L
cdPe73ktZ2P9iZdiAnBuCJmFsEswXiRfavuDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUOLxKo3vO6HIVyXRdpQaxVT2qVhUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09MeEtvM3ZPNkhJVnlYUmRw
UWF4VlQycVZoVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sagwDQYJKoZIhvcNAQELBQADggEBAB2vUF6eu1ONpw1Pnvonk3JDcJcwmvbA4xUb
5m/HYVXoG4rtgnWz/a5ih8VNuhox17XnZFITP52Zk31nEZ/0vOwwx3U0aHMqczlb
860RyQCMPVW8iKes+xmTorP94gCLrtf8bwmd1JciWJq4p2ETJYE4oaBlGvk9yTMY
RVt5eSQD8hFOb96+sPu9+aBgLzEYxMBGW0Jjmxi3k0t4VzOxabnlKsnaopdhoYNR
1uy0WJjoh/f8dx4Uc7lN7WE6gVttFYXj9ED/TlzMhUMYGsi6Dksm2zLANlhxf4QC
8yD6ZnoMVbZRIkLEaWD8TADQOLrsYyqufLQUVF7QxhHwLcTDL+8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org