Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZIl6WT2OP5kIXuV6XQQsX9i6oOY.roa
File: ZIl6WT2OP5kIXuV6XQQsX9i6oOY.roa (raw, json)
Hash identifier: 1M7mi6YqYOvCCWs10pQ4ere3flbYGrvLPS09Mpzpvc8=
Subject key identifier: 64:89:7A:59:3D:8E:3F:99:08:5E:E5:7A:5D:04:2C:5F:D8:BA:A0:E6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E92
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZIl6WT2OP5kIXuV6XQQsX9i6oOY.roa
Signing time: Tue 29 Sep 2020 09:55:54 +0000
ROA not before: Tue 29 Sep 2020 09:55:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3730 (0xe92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:54 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=64897A593D8E3F99085EE57A5D042C5FD8BAA0E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:36:20:27:e7:cd:db:39:91:21:2b:f5:bb:
e8:0d:8a:a7:54:cb:d3:8d:2e:24:e9:93:eb:d9:ac:
d8:49:02:f9:06:0c:9e:f1:22:1f:3d:5f:ed:64:e6:
2f:eb:3c:16:b7:d7:61:dc:9d:8a:91:c3:0e:08:6e:
64:83:53:e9:39:7d:14:11:71:4f:5c:59:73:7a:7f:
c9:7c:99:88:13:b4:74:9c:79:b3:ad:88:6a:95:b1:
ba:42:62:33:2d:b2:47:db:77:a3:87:f3:35:9e:64:
6a:fa:db:5c:f1:72:68:13:e7:50:51:30:89:52:93:
c0:ac:93:7c:67:2a:ea:5b:5b:a7:de:bf:a6:6f:d7:
dd:2e:38:6a:4f:f1:79:e7:15:74:a7:d1:0f:f3:d3:
19:cf:1d:a1:d3:b5:c6:b0:72:a6:3a:21:6e:d1:48:
b2:a3:3b:81:05:67:9e:cf:15:28:7a:06:d0:b6:9a:
30:b2:0c:91:45:be:4c:65:3d:fa:dd:17:19:0e:56:
b0:e5:4c:86:f1:55:23:c8:71:89:9d:d4:84:0c:83:
2c:4a:72:be:8f:11:06:bc:04:85:83:39:91:af:9b:
89:b8:86:15:f5:9e:de:d5:a0:c1:c5:71:b6:70:e3:
73:47:f5:80:23:2b:43:92:ab:04:78:fb:31:d0:c3:
e4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:89:7A:59:3D:8E:3F:99:08:5E:E5:7A:5D:04:2C:5F:D8:BA:A0:E6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZIl6WT2OP5kIXuV6XQQsX9i6oOY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.0.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:fb:cf:3c:09:2c:89:43:b2:42:0f:90:98:cc:1f:15:fb:55:
39:72:2c:0f:9b:f7:64:e1:1a:22:ad:0b:b5:56:a7:da:7a:85:
4c:9c:64:94:14:30:ac:06:81:65:ac:e7:c1:33:07:2c:61:8e:
c5:8f:7e:9c:29:43:58:45:03:63:79:fa:13:43:df:d0:79:19:
84:92:a3:c8:87:01:7e:95:bf:42:e2:f3:28:7b:ab:82:3f:44:
56:51:b4:e4:45:7c:c6:b2:1e:f5:b3:3b:41:62:1b:11:cf:a2:
6e:bc:e0:fa:c8:50:f8:01:9a:a5:5f:cb:45:30:a8:9e:42:00:
3d:5c:b3:79:39:3f:12:68:c7:aa:71:8f:6b:04:23:ce:60:d4:
24:af:c2:56:e1:9c:a3:13:0c:36:ae:05:35:9b:fd:47:17:07:
07:ce:b7:1f:30:1e:32:87:dd:b3:2d:b2:23:5b:31:ff:a3:fa:
a6:1f:80:98:93:a0:43:8d:21:60:78:fa:7e:ce:e9:c2:85:97:
f3:53:f9:57:59:87:7b:4c:f8:e4:f4:d1:31:c8:ba:17:56:52:
25:b6:90:8a:30:6e:7a:2d:54:53:c7:57:60:45:d5:c0:c8:a7:
ab:fe:fb:77:67:96:90:57:9f:24:a7:3d:8f:c0:49:b7:d8:45:
e3:43:5b:41
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDpIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1NTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDY0ODk3QTU5M0Q4RTNG
OTkwODVFRTU3QTVEMDQyQzVGRDhCQUEwRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFGDYgJ+fN2zmRISv1u+gNiqdUy9ONLiTpk+vZrNhJAvkGDJ7x
Ih89X+1k5i/rPBa312HcnYqRww4IbmSDU+k5fRQRcU9cWXN6f8l8mYgTtHScebOt
iGqVsbpCYjMtskfbd6OH8zWeZGr621zxcmgT51BRMIlSk8Csk3xnKupbW6fev6Zv
190uOGpP8XnnFXSn0Q/z0xnPHaHTtcawcqY6IW7RSLKjO4EFZ57PFSh6BtC2mjCy
DJFFvkxlPfrdFxkOVrDlTIbxVSPIcYmd1IQMgyxKcr6PEQa8BIWDOZGvm4m4hhX1
nt7VoMHFcbZw43NH9YAjK0OSqwR4+zHQw+TbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZIl6WT2OP5kIXuV6XQQsX9i6oOYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pJbDZXVDJPUDVrSVh1VjZY
UVFzWDlpNm9PWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa0
sAAwDQYJKoZIhvcNAQELBQADggEBAB37zzwJLIlDskIPkJjMHxX7VTlyLA+b92Th
GiKtC7VWp9p6hUycZJQUMKwGgWWs58EzByxhjsWPfpwpQ1hFA2N5+hND39B5GYSS
o8iHAX6Vv0Li8yh7q4I/RFZRtORFfMayHvWzO0FiGxHPom684PrIUPgBmqVfy0Uw
qJ5CAD1cs3k5PxJox6pxj2sEI85g1CSvwlbhnKMTDDauBTWb/UcXBwfOtx8wHjKH
3bMtsiNbMf+j+qYfgJiToEONIWB4+n7O6cKFl/NT+VdZh3tM+OT00THIuhdWUiW2
kIowbnotVFPHV2BF1cDIp6v++3dnlpBXnySnPY/ASbfYReNDW0E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org