Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cW8cJzarmcxhOLCxleKdhlKceK0.roa
File: cW8cJzarmcxhOLCxleKdhlKceK0.roa (raw, json)
Hash identifier: zoA6ZzfE/dUinwSaKPwT5bGHyH2Y4agNe1psqdBsn14=
Subject key identifier: 71:6F:1C:27:36:AB:99:CC:61:38:B0:B1:95:E2:9D:86:52:9C:78:AD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1F8E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cW8cJzarmcxhOLCxleKdhlKceK0.roa
Signing time: Thu 08 Sep 2022 10:05:51 +0000
ROA not before: Thu 08 Sep 2022 10:05:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.216.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8078 (0x1f8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 8 10:05:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=716F1C2736AB99CC6138B0B195E29D86529C78AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:15:c0:33:8d:0e:61:e0:60:fe:75:b3:e3:
0d:c8:a3:80:6c:0f:47:d5:55:06:67:af:bd:a8:59:
ca:f5:d7:e9:ff:56:3b:10:80:f5:74:4f:ae:4b:6b:
d4:8f:d5:8a:6c:fc:60:12:97:62:52:35:ed:95:bd:
a0:39:4e:90:a3:b4:c3:a4:38:a9:2c:49:b4:ea:b4:
a9:d3:1f:cf:4e:57:6d:59:7a:5e:8d:1a:93:a7:ce:
ca:25:3e:15:a6:90:22:61:b8:2a:40:44:65:d6:79:
da:f0:03:8c:ff:cb:cf:b2:b8:16:66:fd:fa:7f:4b:
9c:23:39:f8:04:26:f7:9a:e9:cd:7c:76:12:b7:6c:
30:64:4f:59:fd:38:18:b4:d0:f1:c1:cd:d2:90:76:
f9:ce:62:fd:e5:bb:87:f1:35:b0:c3:43:f0:44:27:
31:de:58:9a:e2:33:14:d9:62:64:0f:1d:2f:dd:c5:
f6:4d:6c:83:b1:29:b9:9e:fd:47:0a:c8:b6:0f:cc:
ec:5b:f3:ce:e1:06:28:75:7e:ab:9a:4f:21:d8:5e:
84:8c:4c:2a:d3:58:25:75:c5:3e:9f:b4:94:f8:77:
89:ec:08:15:68:97:d2:eb:c2:cb:e0:7d:db:07:d9:
8b:e8:3f:93:1a:37:e8:db:5b:86:fe:b0:53:2c:71:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6F:1C:27:36:AB:99:CC:61:38:B0:B1:95:E2:9D:86:52:9C:78:AD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cW8cJzarmcxhOLCxleKdhlKceK0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.216.0/21
Signature Algorithm: sha256WithRSAEncryption
23:0b:39:a1:db:30:08:3e:1d:03:69:a5:77:61:71:c5:44:82:
ac:fb:14:ab:26:f6:51:bd:e2:9f:5d:9a:ef:5e:62:ab:89:48:
c6:23:a0:a3:17:32:4c:e1:ed:6e:68:96:9d:e0:04:d5:6b:87:
57:42:b4:2d:8a:90:01:36:37:81:26:2b:df:3e:74:4f:97:b1:
f5:44:d5:1b:74:e5:74:56:52:02:85:e8:39:38:30:5f:e8:f4:
9a:71:39:7a:69:1d:7a:b7:27:6a:bd:4d:79:5f:b5:ee:80:19:
9b:fa:1b:8f:94:09:b9:5f:5d:e5:13:5c:e0:80:8c:aa:01:5c:
07:7d:0d:15:87:4c:1a:73:b5:7e:be:d1:13:3d:4c:b9:95:1f:
15:af:89:2a:26:1f:a0:53:d4:a4:b0:7b:2c:e5:b3:77:ba:27:
2a:5e:8f:b4:7d:79:da:a6:20:c1:08:e5:20:b3:02:e8:0c:68:
d3:17:3b:93:6c:8a:2b:37:e0:80:8a:c6:fc:13:6d:91:70:d1:
90:cf:0c:a5:9a:30:5e:43:f7:2b:5c:c6:42:17:32:b6:9e:22:
3f:82:7c:c3:a3:08:da:3f:86:5e:c0:95:d9:2e:4a:18:a7:ff:
79:31:be:06:59:a0:d8:cd:e6:87:30:ca:4a:5e:3a:71:b4:d2:
db:fa:e3:3b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MDgx
MDA1NTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDcxNkYxQzI3MzZBQjk5
Q0M2MTM4QjBCMTk1RTI5RDg2NTI5Qzc4QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCx9hXAM40OYeBg/nWz4w3Io4BsD0fVVQZnr72oWcr11+n/VjsQ
gPV0T65La9SP1Yps/GASl2JSNe2VvaA5TpCjtMOkOKksSbTqtKnTH89OV21Zel6N
GpOnzsolPhWmkCJhuCpARGXWedrwA4z/y8+yuBZm/fp/S5wjOfgEJvea6c18dhK3
bDBkT1n9OBi00PHBzdKQdvnOYv3lu4fxNbDDQ/BEJzHeWJriMxTZYmQPHS/dxfZN
bIOxKbme/UcKyLYPzOxb887hBih1fquaTyHYXoSMTCrTWCV1xT6ftJT4d4nsCBVo
l9LrwsvgfdsH2YvoP5MaN+jbW4b+sFMscX3dAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcW8cJzarmcxhOLCxleKdhlKceK0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NXOGNKemFybWN4aE9MQ3hs
ZUtkaGxLY2VLMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sdgwDQYJKoZIhvcNAQELBQADggEBACMLOaHbMAg+HQNppXdhccVEgqz7FKsm9lG9
4p9dmu9eYquJSMYjoKMXMkzh7W5olp3gBNVrh1dCtC2KkAE2N4EmK98+dE+XsfVE
1Rt05XRWUgKF6Dk4MF/o9JpxOXppHXq3J2q9TXlfte6AGZv6G4+UCblfXeUTXOCA
jKoBXAd9DRWHTBpztX6+0RM9TLmVHxWviSomH6BT1KSweyzls3e6Jypej7R9edqm
IMEI5SCzAugMaNMXO5Nsiis34ICKxvwTbZFw0ZDPDKWaMF5D9ytcxkIXMraeIj+C
fMOjCNo/hl7AldkuShin/3kxvgZZoNjN5ocwykpeOnG00tv64zs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org