Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TpCKiZcbvyG2txM4poEFmoioxas.roa
File: TpCKiZcbvyG2txM4poEFmoioxas.roa (raw, json)
Hash identifier: +0LgDPWe4SMnaOaYXPnsiRPJIBWoc6JfJobsly42xSM=
Subject key identifier: 4E:90:8A:89:97:1B:BF:21:B6:B7:13:38:A6:81:05:9A:88:A8:C5:AB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 169B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TpCKiZcbvyG2txM4poEFmoioxas.roa
Signing time: Sun 07 Feb 2021 12:13:07 +0000
ROA not before: Sun 07 Feb 2021 12:13:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5787 (0x169b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:13:07 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4E908A89971BBF21B6B71338A681059A88A8C5AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:2f:7c:da:c1:b5:2a:8a:72:53:fa:0d:05:
7e:5e:cb:5a:b5:bb:d2:1e:33:43:cd:e8:91:8c:e9:
09:86:1d:1e:bf:f0:bb:34:f5:62:bf:60:48:8b:f3:
a6:d4:33:84:d7:e2:97:f3:0d:ec:30:27:4c:eb:ba:
e6:df:5a:09:ec:62:be:f8:e9:71:7c:3e:e1:45:ac:
29:1b:f6:1e:9b:ee:91:40:10:79:75:76:55:83:bc:
a7:e8:ef:b8:d1:9c:e4:9c:68:0d:b9:ea:16:c2:f8:
7e:84:1f:18:29:1d:19:b4:87:0e:1d:4f:92:af:d9:
26:50:26:f0:7b:4f:ca:6a:51:61:47:e7:fd:50:be:
39:8f:c1:19:83:68:71:df:05:2e:8c:19:69:fa:df:
06:9f:2d:42:48:42:8d:c0:16:2b:8c:14:e5:dd:c1:
a3:6b:85:6c:44:d2:be:f4:26:cb:b5:eb:ff:fa:70:
f2:b3:4b:25:54:ae:78:bb:af:d0:0d:f1:7f:6f:27:
f6:b3:d2:b2:01:8e:1d:06:7e:14:8f:5b:03:6b:20:
48:79:bf:1a:ca:09:63:f8:41:26:d7:66:1e:9e:fb:
37:00:52:82:93:94:95:33:4c:36:22:cf:12:da:cc:
88:1f:02:16:50:f1:1f:ed:38:dc:ec:6c:b1:33:5b:
00:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:90:8A:89:97:1B:BF:21:B6:B7:13:38:A6:81:05:9A:88:A8:C5:AB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TpCKiZcbvyG2txM4poEFmoioxas.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.152.0/21
Signature Algorithm: sha256WithRSAEncryption
29:13:7c:bd:85:2e:b1:74:ae:df:77:8f:dd:29:19:b3:30:5f:
35:92:f4:2f:be:7a:4a:c9:9d:ba:57:a3:a8:29:dc:b1:9a:3a:
0a:bf:c3:65:c3:bb:70:dc:fe:71:8f:75:d9:c1:dd:f6:69:0f:
73:36:e6:59:53:b2:10:42:20:fd:bd:4c:74:cf:84:03:e9:68:
24:a6:f1:83:36:3e:89:de:8c:1b:31:88:11:e6:36:af:68:24:
7f:d0:f1:88:31:16:59:90:c3:33:ea:3f:61:3e:6a:09:1f:1d:
18:2a:72:4e:1b:26:eb:eb:57:68:71:1c:61:b4:57:5f:5e:2c:
9d:3b:d7:8e:57:c9:9c:11:5e:f9:25:8c:9a:16:00:be:3b:94:
e9:55:d5:cd:c6:bf:9d:2b:77:1a:17:cc:42:a8:70:c1:d8:2e:
90:69:67:d0:a7:65:43:30:29:78:e4:66:dc:1e:d1:ca:d4:2e:
60:e3:30:43:f4:95:dc:7b:4c:25:1a:f4:88:93:cb:bd:c4:9f:
07:64:e8:d2:32:e1:dc:03:b6:9e:20:d4:d7:69:ec:78:de:99:
9f:0b:81:21:b3:3f:58:42:ea:71:dc:21:80:a9:bc:bc:2b:53:
e9:60:c6:ad:94:50:54:2d:3c:02:89:31:8d:3e:f0:af:94:ed:
97:4b:29:b6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFpswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjEzMDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDRFOTA4QTg5OTcxQkJG
MjFCNkI3MTMzOEE2ODEwNTlBODhBOEM1QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzYS982sG1KopyU/oNBX5ey1q1u9IeM0PN6JGM6QmGHR6/8Ls0
9WK/YEiL86bUM4TX4pfzDewwJ0zruubfWgnsYr746XF8PuFFrCkb9h6b7pFAEHl1
dlWDvKfo77jRnOScaA256hbC+H6EHxgpHRm0hw4dT5Kv2SZQJvB7T8pqUWFH5/1Q
vjmPwRmDaHHfBS6MGWn63wafLUJIQo3AFiuMFOXdwaNrhWxE0r70Jsu16//6cPKz
SyVUrni7r9AN8X9vJ/az0rIBjh0GfhSPWwNrIEh5vxrKCWP4QSbXZh6e+zcAUoKT
lJUzTDYizxLazIgfAhZQ8R/tONzsbLEzWwBjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUTpCKiZcbvyG2txM4poEFmoioxaswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RwQ0tpWmNidnlHMnR4TTRw
b0VGbW9pb3hhcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sZgwDQYJKoZIhvcNAQELBQADggEBACkTfL2FLrF0rt93j90pGbMwXzWS9C++ekrJ
nbpXo6gp3LGaOgq/w2XDu3Dc/nGPddnB3fZpD3M25llTshBCIP29THTPhAPpaCSm
8YM2PonejBsxiBHmNq9oJH/Q8YgxFlmQwzPqP2E+agkfHRgqck4bJuvrV2hxHGG0
V19eLJ07145XyZwRXvkljJoWAL47lOlV1c3Gv50rdxoXzEKocMHYLpBpZ9CnZUMw
KXjkZtwe0crULmDjMEP0ldx7TCUa9IiTy73Enwdk6NIy4dwDtp4g1Ndp7HjemZ8L
gSGzP1hC6nHcIYCpvLwrU+lgxq2UUFQtPAKJMY0+8K+U7ZdLKbY=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:20 2023 by rpki-client on console-ams.rpki-client.org