Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YDZ1BeN3g20XLn1Uhdt7trz9qIQ.roa
File: YDZ1BeN3g20XLn1Uhdt7trz9qIQ.roa (raw, json)
Hash identifier: zK+1PFWUiU2veJ3Xw2p7XZFy/ktJUHvO3N9JsTQpbcs=
Subject key identifier: 60:36:75:05:E3:77:83:6D:17:2E:7D:54:85:DB:7B:B6:BC:FD:A8:84
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22E9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YDZ1BeN3g20XLn1Uhdt7trz9qIQ.roa
Signing time: Fri 25 Nov 2022 04:41:47 +0000
ROA not before: Fri 25 Nov 2022 04:41:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8937 (0x22e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=60367505E377836D172E7D5485DB7BB6BCFDA884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:88:47:06:d5:97:9c:27:88:1e:eb:73:a1:
35:0f:c6:5a:97:9a:68:83:ac:1d:c7:c5:31:81:f3:
d8:8a:96:f5:c2:a1:b3:f9:e3:f6:ba:52:8d:b4:6c:
e3:0e:4d:af:1b:06:4e:25:17:6f:4d:37:ff:91:ea:
2c:51:99:33:85:2e:48:22:ee:42:9d:58:32:98:50:
e4:58:cc:b5:04:e3:ed:88:dd:a4:e5:b5:e2:f6:55:
0f:8f:43:e0:3e:9c:4f:b3:f5:22:9d:45:b3:fb:b4:
4a:68:73:85:4e:2f:d8:fd:98:43:cb:a0:6e:12:97:
85:18:ce:b8:75:57:6a:fe:d3:65:61:6f:8e:f5:ab:
ec:6c:d4:71:bc:73:2e:56:7c:a2:16:af:12:44:7c:
d6:fc:d5:47:55:77:a3:0b:85:52:d9:94:d6:03:7e:
33:a3:34:c9:8b:a9:13:22:f5:16:50:b2:3d:29:60:
80:8a:c8:be:35:0d:a2:e6:58:41:af:1d:17:d1:e4:
31:7c:fc:72:f2:ae:4c:77:b4:1a:4d:0a:0d:a0:81:
b2:de:1a:8e:2d:d8:54:50:27:69:18:ef:8f:8d:ac:
d7:07:2c:fa:f0:1f:4d:93:01:94:42:cf:b9:a4:05:
d1:6a:c1:3c:25:97:e7:a3:ea:cb:d8:0b:7f:0e:ae:
98:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:36:75:05:E3:77:83:6D:17:2E:7D:54:85:DB:7B:B6:BC:FD:A8:84
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YDZ1BeN3g20XLn1Uhdt7trz9qIQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.88.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:f3:5c:18:d6:ea:09:08:d6:ed:d7:71:c4:ee:28:58:eb:2f:
29:38:9a:e1:37:fc:05:52:6b:f8:2d:68:da:90:10:6c:64:a6:
f0:7a:53:bb:bd:88:49:28:29:9f:6e:01:d8:d5:9e:16:d8:be:
d1:fe:77:f0:1a:db:bf:00:10:a1:6a:91:b1:48:90:c7:6b:bf:
74:6c:19:82:24:66:ed:42:38:23:a0:ff:be:77:5f:0d:4a:f9:
db:20:24:fe:fc:73:e4:74:43:9b:a2:4d:cf:c0:e4:f4:b2:c7:
6a:f3:15:27:e8:78:00:4e:ff:16:3a:a7:4f:34:c4:70:80:76:
0d:9c:30:21:8f:1c:17:82:9d:92:b5:0c:cd:0a:48:80:51:40:
ec:06:72:6a:3c:c5:0e:5b:85:7f:5f:62:c7:ec:e0:5c:96:93:
40:a6:db:8d:6f:95:b3:28:9d:21:7e:d6:19:19:c3:52:7d:ce:
49:97:d8:94:20:d6:ed:23:4b:cc:87:03:cb:84:26:81:31:74:
89:8c:09:ea:d8:e3:10:8f:0b:22:b8:70:f8:90:c5:cb:cc:5e:
9d:a4:6c:45:19:92:1d:a6:12:3e:08:76:91:a0:f2:aa:77:49:
af:e8:49:02:58:75:43:6a:a1:8f:32:46:ac:c5:af:e1:3c:5e:
d4:49:6a:9c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIukwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxNDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDYwMzY3NTA1RTM3Nzgz
NkQxNzJFN0Q1NDg1REI3QkI2QkNGREE4ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCq8YhHBtWXnCeIHutzoTUPxlqXmmiDrB3HxTGB89iKlvXCobP5
4/a6Uo20bOMOTa8bBk4lF29NN/+R6ixRmTOFLkgi7kKdWDKYUORYzLUE4+2I3aTl
teL2VQ+PQ+A+nE+z9SKdRbP7tEpoc4VOL9j9mEPLoG4Sl4UYzrh1V2r+02Vhb471
q+xs1HG8cy5WfKIWrxJEfNb81UdVd6MLhVLZlNYDfjOjNMmLqRMi9RZQsj0pYICK
yL41DaLmWEGvHRfR5DF8/HLyrkx3tBpNCg2ggbLeGo4t2FRQJ2kY74+NrNcHLPrw
H02TAZRCz7mkBdFqwTwll+ej6svYC38OrphbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYDZ1BeN3g20XLn1Uhdt7trz9qIQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lEWjFCZU4zZzIwWExuMVVo
ZHQ3dHJ6OXFJUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sVgwDQYJKoZIhvcNAQELBQADggEBAEzzXBjW6gkI1u3XccTuKFjrLyk4muE3/AVS
a/gtaNqQEGxkpvB6U7u9iEkoKZ9uAdjVnhbYvtH+d/Aa278AEKFqkbFIkMdrv3Rs
GYIkZu1COCOg/753Xw1K+dsgJP78c+R0Q5uiTc/A5PSyx2rzFSfoeABO/xY6p080
xHCAdg2cMCGPHBeCnZK1DM0KSIBRQOwGcmo8xQ5bhX9fYsfs4FyWk0Cm241vlbMo
nSF+1hkZw1J9zkmX2JQg1u0jS8yHA8uEJoExdImMCerY4xCPCyK4cPiQxcvMXp2k
bEUZkh2mEj4IdpGg8qp3Sa/oSQJYdUNqoY8yRqzFr+E8XtRJapw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org