Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YZwC6ZyKAMtvFF3UyFZR5tVb7rU.roa
File: YZwC6ZyKAMtvFF3UyFZR5tVb7rU.roa (raw, json)
Hash identifier: ZGDZcDxByIqgjTAOA+gNpfGLpcPC0/VEodHL+s8TDpY=
Subject key identifier: 61:9C:02:E9:9C:8A:00:CB:6F:14:5D:D4:C8:56:51:E6:D5:5B:EE:B5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1EB7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YZwC6ZyKAMtvFF3UyFZR5tVb7rU.roa
Signing time: Wed 04 May 2022 07:51:15 +0000
ROA not before: Wed 04 May 2022 07:51:15 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 180.176.184.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7863 (0x1eb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: May 4 07:51:15 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=619C02E99C8A00CB6F145DD4C85651E6D55BEEB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:fd:b8:fe:34:84:a0:9f:d6:c0:a7:2f:03:
2a:5c:67:5d:d3:99:eb:ec:b4:41:0c:1d:24:f4:00:
5a:c7:b6:69:be:51:59:03:5e:aa:ec:98:1c:6c:81:
f7:c8:d1:56:90:e3:35:0f:1e:f0:ee:5d:8e:ee:65:
2f:b5:b3:35:7c:11:3b:6f:9c:51:3c:55:64:62:85:
dd:fe:b4:36:3d:13:de:77:06:7a:c7:ee:a7:de:41:
0c:6d:d6:7e:71:46:83:ca:5b:32:cb:2c:e0:07:92:
70:4b:76:20:f7:1e:6e:6e:9d:aa:98:03:71:1d:a6:
71:2b:d8:9f:cc:30:e8:69:c4:45:0e:54:89:11:ca:
ac:98:d3:8e:dc:0d:52:08:3f:b1:77:a1:da:1e:4c:
df:76:d2:11:05:53:a5:17:6a:d4:86:9f:2b:e3:ee:
6c:c0:09:34:a9:f4:9d:cd:95:eb:c9:e5:76:80:8c:
3f:ee:69:52:90:64:07:1c:53:8b:e0:db:3a:a1:87:
71:5c:02:f4:d9:90:d3:19:64:01:74:24:10:a8:0e:
ad:17:8b:2e:fd:9c:2f:2a:ff:b1:78:25:d3:02:f1:
78:4f:ec:20:a8:18:d5:a8:78:17:f5:00:19:c5:3c:
da:ca:b3:91:f8:26:0d:f3:c2:73:f8:c1:a8:94:2a:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9C:02:E9:9C:8A:00:CB:6F:14:5D:D4:C8:56:51:E6:D5:5B:EE:B5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YZwC6ZyKAMtvFF3UyFZR5tVb7rU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.184.0/21
Signature Algorithm: sha256WithRSAEncryption
53:3b:32:eb:09:da:71:ea:73:52:59:73:66:16:6a:6a:05:c7:
ba:d6:7d:f7:25:4f:d4:71:25:a4:9c:82:88:50:70:8b:2c:09:
bd:23:36:1f:b9:98:34:e5:2e:4f:f0:ca:7f:4f:48:78:1a:58:
b0:e0:cb:9f:db:3a:64:17:5a:9c:8d:f9:90:dc:71:7f:5f:57:
52:70:9f:4f:b6:03:7b:eb:fa:de:69:2a:d0:64:f1:0e:76:0b:
ad:06:c5:a7:f2:6f:bf:3c:8a:95:5c:5f:ba:9b:e4:da:8e:51:
a1:72:be:f4:02:a7:ad:a1:7b:28:d2:63:f4:08:65:f1:2c:67:
81:33:fe:9f:4f:af:df:06:3a:71:6c:d6:1b:9c:0d:3c:38:b1:
6f:4e:b1:b9:9b:f3:24:9e:d2:41:c7:c0:da:86:7d:78:8f:ea:
97:bd:38:9f:b4:02:66:a5:cd:fe:5f:26:44:c1:70:b1:0e:66:
30:4e:69:d0:83:c8:22:da:36:7a:fb:ec:fc:51:de:f8:b6:73:
d5:c6:7a:2f:c4:e4:16:ca:5e:63:8a:3f:c8:93:28:4a:1f:ce:
bb:48:1f:b9:39:05:a3:e6:02:94:be:8d:5b:c4:f0:cc:b2:6b:
ee:8a:60:93:eb:30:98:05:f8:9b:7a:69:82:ea:bd:9f:73:d2:
31:5f:9c:ea
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHrcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA1MDQw
NzUxMTVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDYxOUMwMkU5OUM4QTAw
Q0I2RjE0NURENEM4NTY1MUU2RDU1QkVFQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmvf24/jSEoJ/WwKcvAypcZ13TmevstEEMHST0AFrHtmm+UVkD
XqrsmBxsgffI0VaQ4zUPHvDuXY7uZS+1szV8ETtvnFE8VWRihd3+tDY9E953BnrH
7qfeQQxt1n5xRoPKWzLLLOAHknBLdiD3Hm5unaqYA3EdpnEr2J/MMOhpxEUOVIkR
yqyY047cDVIIP7F3odoeTN920hEFU6UXatSGnyvj7mzACTSp9J3NlevJ5XaAjD/u
aVKQZAccU4vg2zqhh3FcAvTZkNMZZAF0JBCoDq0Xiy79nC8q/7F4JdMC8XhP7CCo
GNWoeBf1ABnFPNrKs5H4Jg3zwnP4waiUKixzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYZwC6ZyKAMtvFF3UyFZR5tVb7rUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lad0M2WnlLQU10dkZGM1V5
RlpSNXRWYjdyVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sLgwDQYJKoZIhvcNAQELBQADggEBAFM7MusJ2nHqc1JZc2YWamoFx7rWffclT9Rx
JaScgohQcIssCb0jNh+5mDTlLk/wyn9PSHgaWLDgy5/bOmQXWpyN+ZDccX9fV1Jw
n0+2A3vr+t5pKtBk8Q52C60Gxafyb788ipVcX7qb5NqOUaFyvvQCp62heyjSY/QI
ZfEsZ4Ez/p9Pr98GOnFs1hucDTw4sW9Osbmb8ySe0kHHwNqGfXiP6pe9OJ+0Amal
zf5fJkTBcLEOZjBOadCDyCLaNnr77PxR3vi2c9XGei/E5BbKXmOKP8iTKEofzrtI
H7k5BaPmApS+jVvE8Myya+6KYJPrMJgF+Jt6aYLqvZ9z0jFfnOo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org