Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z8sWJ538NuK0KUE2WOcJDCUaGvw.roa
File: Z8sWJ538NuK0KUE2WOcJDCUaGvw.roa (raw, json)
Hash identifier: h1dUgdtqXjyrEI5iDcjVAVWfC3OpFKMUGEo37kcMGvU=
Subject key identifier: 67:CB:16:27:9D:FC:36:E2:B4:29:41:36:58:E7:09:0C:25:1A:1A:FC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z8sWJ538NuK0KUE2WOcJDCUaGvw.roa
Signing time: Thu 15 Sep 2022 02:53:06 +0000
ROA not before: Thu 15 Sep 2022 02:53:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=67CB16279DFC36E2B429413658E7090C251A1AFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:fe:96:aa:bf:ea:f6:53:ad:db:19:49:a3:
e0:99:e8:93:c6:0a:30:bf:64:af:74:c6:a7:cb:f8:
08:c4:50:c7:85:85:49:ab:d9:87:e1:f2:36:05:23:
99:aa:76:74:6a:0e:e8:e9:42:91:e2:8b:a6:b0:96:
a0:b7:0c:bc:26:e2:5d:26:e2:56:37:61:22:45:b1:
b0:8c:21:1c:f1:9f:e3:43:a4:d0:6a:70:c6:ce:e4:
0e:7e:0d:f3:3f:a0:32:e1:8c:c3:86:8d:73:99:c7:
44:01:38:ca:04:c3:77:4e:72:fb:2a:c1:b0:77:a7:
2f:b9:ff:b0:13:0e:47:da:c9:ee:13:da:16:22:de:
8f:cd:31:65:68:d9:c2:b1:43:45:f8:b4:a5:0a:58:
5f:a3:f2:bb:0d:60:77:11:9f:ed:a7:cb:6e:11:05:
37:04:6e:c6:a4:32:1d:62:d7:b1:41:28:f6:4d:6d:
fd:b9:28:3f:85:eb:bd:8c:fb:3f:c9:9b:4d:67:1f:
83:a1:89:c2:bc:87:b8:54:38:02:a5:8f:d3:2a:b5:
77:ad:82:a2:75:96:17:61:c6:c7:f9:45:80:8a:c5:
3d:56:3c:fb:c9:9d:49:82:e7:5f:95:08:04:fe:0f:
45:f7:27:ed:fb:13:87:ed:e5:56:c0:dd:3b:6e:10:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CB:16:27:9D:FC:36:E2:B4:29:41:36:58:E7:09:0C:25:1A:1A:FC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z8sWJ538NuK0KUE2WOcJDCUaGvw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.72.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:f3:25:07:fb:be:49:74:54:a4:1a:81:b4:f8:ad:f7:f0:5c:
f7:3f:53:30:86:9b:48:8d:93:03:d9:f6:b2:f3:46:e4:bd:3c:
51:26:28:8d:fc:90:10:46:8c:7b:f7:14:7f:55:d0:26:93:7e:
4e:2b:a2:c6:6d:1a:2b:80:c3:f1:67:0f:2f:74:82:ec:af:36:
32:69:23:76:a7:8e:f3:6e:9c:74:fd:4f:95:01:e3:ea:e5:b4:
99:0d:b2:93:97:8f:67:16:eb:6e:19:80:de:11:56:b1:24:5a:
44:ba:70:5a:15:ed:15:2e:0a:f9:42:5c:3a:dd:96:47:fd:ea:
b0:d5:bf:4e:34:c7:f1:1d:e6:4e:3c:c8:cf:ef:bc:40:78:67:
25:de:41:87:7b:71:3f:45:0c:ff:43:d9:33:c2:d0:ba:6e:99:
3c:ce:7b:0d:aa:19:23:21:49:ce:de:7b:d0:cc:61:26:2e:e6:
2a:2f:e9:cd:0c:aa:93:12:72:38:cf:a5:03:1a:cb:64:e5:45:
30:79:8d:6a:3a:3f:6a:7d:4b:53:dc:21:61:c9:be:08:ab:04:
d0:c8:8e:ae:a5:a4:05:59:77:ab:cc:82:de:33:f5:c7:b0:3a:
c1:1a:23:e0:2b:e1:30:da:a6:ba:ac:f8:00:21:20:de:2c:22:
40:ba:1e:4f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzMDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDY3Q0IxNjI3OURGQzM2
RTJCNDI5NDEzNjU4RTcwOTBDMjUxQTFBRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1Q/6Wqr/q9lOt2xlJo+CZ6JPGCjC/ZK90xqfL+AjEUMeFhUmr
2Yfh8jYFI5mqdnRqDujpQpHii6awlqC3DLwm4l0m4lY3YSJFsbCMIRzxn+NDpNBq
cMbO5A5+DfM/oDLhjMOGjXOZx0QBOMoEw3dOcvsqwbB3py+5/7ATDkfaye4T2hYi
3o/NMWVo2cKxQ0X4tKUKWF+j8rsNYHcRn+2ny24RBTcEbsakMh1i17FBKPZNbf25
KD+F672M+z/Jm01nH4OhicK8h7hUOAKlj9MqtXetgqJ1lhdhxsf5RYCKxT1WPPvJ
nUmC51+VCAT+D0X3J+37E4ft5VbA3TtuEDS9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZ8sWJ538NuK0KUE2WOcJDCUaGvwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1o4c1dKNTM4TnVLMEtVRTJX
T2NKRENVYUd2dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sEgwDQYJKoZIhvcNAQELBQADggEBAAzzJQf7vkl0VKQagbT4rffwXPc/UzCGm0iN
kwPZ9rLzRuS9PFEmKI38kBBGjHv3FH9V0CaTfk4rosZtGiuAw/FnDy90guyvNjJp
I3anjvNunHT9T5UB4+rltJkNspOXj2cW624ZgN4RVrEkWkS6cFoV7RUuCvlCXDrd
lkf96rDVv040x/Ed5k48yM/vvEB4ZyXeQYd7cT9FDP9D2TPC0LpumTzOew2qGSMh
Sc7ee9DMYSYu5iov6c0MqpMScjjPpQMay2TlRTB5jWo6P2p9S1PcIWHJvgirBNDI
jq6lpAVZd6vMgt4z9cewOsEaI+Ar4TDaprqs+AAhIN4sIkC6Hk8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org