Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XhAN2P9OzDfcM9hwcmhTziEexso.roa
File: XhAN2P9OzDfcM9hwcmhTziEexso.roa (raw, json)
Hash identifier: K1AeWD6fLnHSp+NvRl27pvsGIdP52GJaYRPWC6IDrzc=
Subject key identifier: 5E:10:0D:D8:FF:4E:CC:37:DC:33:D8:70:72:68:53:CE:21:1E:C6:CA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1795
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XhAN2P9OzDfcM9hwcmhTziEexso.roa
Signing time: Sun 07 Feb 2021 12:20:27 +0000
ROA not before: Sun 07 Feb 2021 12:20:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6037 (0x1795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:20:27 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5E100DD8FF4ECC37DC33D870726853CE211EC6CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:ce:6e:0b:79:b4:bd:97:92:6a:b7:a0:3b:
b0:65:4d:52:19:24:de:ce:9b:30:2d:fa:21:95:ed:
52:f1:86:9f:57:1e:f1:4a:ff:dd:5a:0b:6b:96:9a:
a8:47:12:71:3c:16:00:b8:a5:b4:ef:3c:91:ba:ad:
f5:6a:cd:9a:07:6a:5a:3b:9c:08:ed:96:bc:a5:a1:
49:90:72:c3:52:b9:c7:36:2c:24:85:7c:97:93:d5:
a9:5f:41:87:2f:5b:b0:1e:45:88:47:e9:1c:65:c9:
c9:06:34:6e:89:26:f8:fe:85:87:5d:4b:00:2e:fe:
4d:b9:2a:c9:06:9e:7b:b4:c9:75:cf:50:c4:7e:fe:
2d:31:78:82:1e:af:b7:18:50:03:75:97:a1:b8:0d:
e5:38:e2:b8:cb:18:ee:9f:bd:6d:c5:d0:fc:3d:9b:
78:a6:f3:72:9d:c7:05:53:63:78:7e:01:27:94:2c:
b4:e8:64:35:b1:08:9b:73:ac:5b:65:2b:af:d3:7c:
55:5b:6c:f0:bc:be:00:43:cc:b8:ae:21:a3:1d:ee:
10:85:87:a2:28:39:07:2f:7d:3d:ba:32:9d:6f:27:
d1:7c:02:ab:bd:54:c2:2c:be:5a:08:89:5b:d5:d8:
2c:39:fe:7d:f3:5b:7d:f8:2a:4c:77:79:20:56:91:
99:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:10:0D:D8:FF:4E:CC:37:DC:33:D8:70:72:68:53:CE:21:1E:C6:CA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XhAN2P9OzDfcM9hwcmhTziEexso.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.244.0/22
Signature Algorithm: sha256WithRSAEncryption
79:8e:85:fc:82:df:05:13:6b:1d:54:2e:a2:fb:a2:45:66:57:
73:da:b2:d2:f0:bb:9d:6a:31:02:ec:98:e5:71:83:20:ae:a9:
71:fe:ee:cc:dc:53:38:f8:e4:55:f6:fe:37:9b:78:2c:e1:1c:
e8:75:00:91:45:dc:0d:f2:78:82:36:0b:9a:81:b3:cd:55:23:
62:b1:80:01:3a:56:ed:9b:19:a4:db:17:ac:f2:6c:a9:d2:19:
8b:31:77:69:87:d2:94:98:fe:5f:56:1c:0a:68:82:5d:c6:ae:
b0:bf:7e:51:f2:ba:83:b4:4f:20:eb:d3:6f:fe:66:e3:c9:47:
e5:76:35:cc:84:42:09:2a:c4:20:1c:90:32:d2:4d:61:ce:7d:
b4:f1:1a:da:47:12:73:c6:78:10:07:26:50:e3:1b:37:90:5c:
2e:b5:b4:3c:bf:28:76:84:5c:59:d4:ab:f1:a4:f7:f2:df:83:
b5:f9:8e:3c:6b:ff:5e:63:42:25:4b:b0:d4:38:55:1f:db:90:
24:45:94:d0:93:f3:2f:85:ca:83:a3:3b:65:66:b1:7a:2a:38:
3a:6f:61:64:8a:99:5a:54:df:36:2e:e0:fa:fb:9e:0e:69:20:
13:4d:9a:92:51:75:92:89:40:7b:b7:43:39:ef:15:39:2e:13:
4f:76:a5:3d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF5UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjIwMjdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVFMTAwREQ4RkY0RUND
MzdEQzMzRDg3MDcyNjg1M0NFMjExRUM2Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSh85uC3m0vZeSaregO7BlTVIZJN7OmzAt+iGV7VLxhp9XHvFK
/91aC2uWmqhHEnE8FgC4pbTvPJG6rfVqzZoHalo7nAjtlryloUmQcsNSucc2LCSF
fJeT1alfQYcvW7AeRYhH6RxlyckGNG6JJvj+hYddSwAu/k25KskGnnu0yXXPUMR+
/i0xeIIer7cYUAN1l6G4DeU44rjLGO6fvW3F0Pw9m3im83KdxwVTY3h+ASeULLTo
ZDWxCJtzrFtlK6/TfFVbbPC8vgBDzLiuIaMd7hCFh6IoOQcvfT26Mp1vJ9F8Aqu9
VMIsvloIiVvV2Cw5/n3zW334Kkx3eSBWkZnBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUXhAN2P9OzDfcM9hwcmhTziEexsowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hoQU4yUDlPekRmY005aHdj
bWhUemlFZXhzby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sPQwDQYJKoZIhvcNAQELBQADggEBAHmOhfyC3wUTax1ULqL7okVmV3PastLwu51q
MQLsmOVxgyCuqXH+7szcUzj45FX2/jebeCzhHOh1AJFF3A3yeII2C5qBs81VI2Kx
gAE6Vu2bGaTbF6zybKnSGYsxd2mH0pSY/l9WHApogl3GrrC/flHyuoO0TyDr02/+
ZuPJR+V2NcyEQgkqxCAckDLSTWHOfbTxGtpHEnPGeBAHJlDjGzeQXC61tDy/KHaE
XFnUq/Gk9/Lfg7X5jjxr/15jQiVLsNQ4VR/bkCRFlNCT8y+FyoOjO2VmsXoqODpv
YWSKmVpU3zYu4Pr7ng5pIBNNmpJRdZKJQHu3QznvFTkuE092pT0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org