Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QmFse7UV5PX7v5FVr67SDMnILlU.roa
File: QmFse7UV5PX7v5FVr67SDMnILlU.roa (raw, json)
Hash identifier: 2AbveH0Q9bBu+hrpIJKlWykddT/fc85CDLmPfUM3QZQ=
Subject key identifier: 42:61:6C:7B:B5:15:E4:F5:FB:BF:91:55:AF:AE:D2:0C:C9:C8:2E:55
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 16A3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QmFse7UV5PX7v5FVr67SDMnILlU.roa
Signing time: Sun 07 Feb 2021 12:13:20 +0000
ROA not before: Sun 07 Feb 2021 12:13:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5795 (0x16a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:13:20 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=42616C7BB515E4F5FBBF9155AFAED20CC9C82E55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:35:b1:69:11:55:2e:af:86:c2:39:26:cf:
94:dd:bb:33:eb:ef:4e:1e:b8:2d:d7:3d:c4:bb:0b:
e2:0b:5f:a5:41:a7:59:df:20:d1:13:1a:cd:80:da:
29:55:95:65:e7:bd:60:0e:e7:1f:52:40:08:8d:8f:
8a:c1:97:5e:9f:95:23:90:bc:6b:b3:bd:d2:5e:07:
51:63:7c:d2:eb:04:8d:e9:8e:f6:29:73:1a:7b:6a:
ff:53:b6:9f:39:7f:0b:23:31:d4:aa:0e:e3:27:03:
fc:a1:03:c8:6b:b3:13:67:0d:78:65:2b:d5:98:34:
c2:72:d3:a5:ce:cb:3e:61:d0:c9:1a:55:71:cc:49:
74:a3:1e:6f:dc:dc:ce:7f:34:1e:70:11:d6:f4:e3:
82:0a:c4:d5:2c:f5:9b:ed:7b:95:ae:62:45:7a:2f:
33:a4:ef:85:10:30:7f:01:fa:9d:8c:6b:57:b7:74:
6c:86:77:2b:76:d8:73:63:25:cd:36:16:59:b2:77:
ea:65:23:fc:dc:e4:08:11:c4:21:c7:b7:09:41:77:
f4:57:d8:bf:fa:b8:3f:10:b5:63:3d:3c:42:be:97:
47:11:c7:3c:ad:36:4c:14:3e:db:b0:5f:f9:19:3a:
58:b0:4d:df:bb:0e:0c:24:8f:12:a2:a1:d1:77:64:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:61:6C:7B:B5:15:E4:F5:FB:BF:91:55:AF:AE:D2:0C:C9:C8:2E:55
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QmFse7UV5PX7v5FVr67SDMnILlU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:3e:c2:c2:a5:1c:11:3d:e5:59:e2:74:e6:91:ff:d6:fb:83:
80:9c:bf:e5:27:93:49:1b:67:98:b2:e4:7c:30:fa:d5:0f:81:
86:12:85:1e:17:71:6b:1c:32:1f:98:28:5c:c2:88:96:64:0b:
9b:61:6a:dd:2e:6e:ef:af:92:41:46:46:3a:32:c1:39:64:b2:
83:0f:da:8e:10:5c:a0:f9:72:89:5a:d3:7d:c0:09:74:69:e0:
4e:8c:4d:6c:b5:76:81:3e:36:91:7d:34:94:6b:e4:09:ab:6a:
a0:a9:de:11:6e:88:f5:5e:31:d5:fc:27:d6:90:5c:16:15:2d:
10:93:00:01:c0:ef:7f:01:82:d6:c8:86:72:a0:a4:8b:6d:cb:
4c:cb:c1:fd:8e:a2:35:8b:70:43:6d:bf:4c:e1:41:9e:34:9a:
15:f1:ea:c9:38:ce:0a:cd:05:3b:b6:69:f5:d8:c5:9e:53:7f:
5b:93:20:e4:20:14:07:df:95:2f:9c:3a:ed:e0:b9:fb:cb:fb:
fd:2d:5b:c8:93:e3:31:c8:a5:e6:84:0b:df:4b:fc:c2:38:de:
ed:e1:0e:5e:15:4e:cf:96:f8:3a:17:e4:5e:a5:75:22:32:d6:
62:6c:69:cd:bc:39:27:52:63:fd:da:b4:5f:2f:47:77:fa:40:
3c:c5:bf:80
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFqMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjEzMjBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDQyNjE2QzdCQjUxNUU0
RjVGQkJGOTE1NUFGQUVEMjBDQzlDODJFNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsijWxaRFVLq+Gwjkmz5TduzPr704euC3XPcS7C+ILX6VBp1nf
INETGs2A2ilVlWXnvWAO5x9SQAiNj4rBl16flSOQvGuzvdJeB1FjfNLrBI3pjvYp
cxp7av9Ttp85fwsjMdSqDuMnA/yhA8hrsxNnDXhlK9WYNMJy06XOyz5h0MkaVXHM
SXSjHm/c3M5/NB5wEdb044IKxNUs9Zvte5WuYkV6LzOk74UQMH8B+p2Ma1e3dGyG
dyt22HNjJc02Flmyd+plI/zc5AgRxCHHtwlBd/RX2L/6uD8QtWM9PEK+l0cRxzyt
NkwUPtuwX/kZOliwTd+7DgwkjxKiodF3ZPOdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUQmFse7UV5PX7v5FVr67SDMnILlUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FtRnNlN1VWNVBYN3Y1RlZy
NjdTRE1uSUxsVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sawwDQYJKoZIhvcNAQELBQADggEBAB8+wsKlHBE95VnidOaR/9b7g4Ccv+Unk0kb
Z5iy5Hww+tUPgYYShR4XcWscMh+YKFzCiJZkC5that0ubu+vkkFGRjoywTlksoMP
2o4QXKD5cola033ACXRp4E6MTWy1doE+NpF9NJRr5AmraqCp3hFuiPVeMdX8J9aQ
XBYVLRCTAAHA738BgtbIhnKgpItty0zLwf2OojWLcENtv0zhQZ40mhXx6sk4zgrN
BTu2afXYxZ5Tf1uTIOQgFAfflS+cOu3gufvL+/0tW8iT4zHIpeaEC99L/MI43u3h
Dl4VTs+W+DoX5F6ldSIy1mJsac28OSdSY/3atF8vR3f6QDzFv4A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org