Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cZYpJ4Ogzv2n8p6XI5FprV2RcDI.roa
File: cZYpJ4Ogzv2n8p6XI5FprV2RcDI.roa (raw, json)
Hash identifier: J4s88W2LM43i+z89tGVHvTXcMuTwinhaGPBFhg1bgVg=
Subject key identifier: 71:96:29:27:83:A0:CE:FD:A7:F2:9E:97:23:91:69:AD:5D:91:70:32
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15E9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cZYpJ4Ogzv2n8p6XI5FprV2RcDI.roa
Signing time: Sun 07 Feb 2021 12:07:13 +0000
ROA not before: Sun 07 Feb 2021 12:07:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5609 (0x15e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:07:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7196292783A0CEFDA7F29E97239169AD5D917032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:ec:a2:95:f6:12:6c:45:0c:0e:6e:0d:ff:
bd:66:4e:71:ef:a8:f0:6a:18:5d:07:65:e3:12:fb:
98:f8:55:31:ce:12:6a:37:a9:8f:f5:56:c6:c5:0b:
43:b9:77:bf:21:04:38:5e:ea:ec:e9:16:4b:85:ab:
f6:84:63:8d:b7:b2:f4:25:95:7b:a1:dd:70:55:fd:
38:e6:c2:1d:a6:43:f8:6b:72:19:89:bd:1e:4f:94:
8f:b2:8e:72:e9:9c:35:74:0d:15:f9:9d:d1:ac:e7:
f4:6a:44:25:10:a9:4c:ef:35:24:1a:5d:7c:d1:82:
3a:7c:ea:48:87:02:d1:3d:f9:78:7d:1e:4a:d4:b8:
da:62:87:eb:07:8d:8f:fb:58:46:f9:68:69:1e:2d:
fb:68:77:ec:22:2d:e0:3e:57:66:94:4e:7c:ed:98:
36:e6:e0:15:64:3d:16:35:3f:b5:c9:16:6b:a2:5b:
4e:01:3d:1c:ff:af:c2:cb:31:e6:b8:f1:34:f1:5b:
8d:ee:ac:cc:37:87:5d:6b:d2:0c:d8:27:a8:d3:21:
6d:f9:cb:aa:c9:2f:50:6c:3d:1f:56:b7:c3:ce:c4:
f1:c4:24:82:eb:5f:e1:23:5b:92:6d:da:c9:4b:13:
86:55:16:de:78:89:81:d5:9e:d6:66:9a:65:58:f6:
ad:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:96:29:27:83:A0:CE:FD:A7:F2:9E:97:23:91:69:AD:5D:91:70:32
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cZYpJ4Ogzv2n8p6XI5FprV2RcDI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.236.0/22
Signature Algorithm: sha256WithRSAEncryption
43:77:9b:c1:92:c3:90:ae:af:be:f4:74:35:09:19:18:c2:a6:
e6:da:94:fd:4d:5e:04:fb:03:cf:40:b7:15:19:2d:4f:fc:a1:
ca:ab:32:c8:78:d1:ab:10:cd:b8:19:bd:6e:85:90:16:e6:87:
19:b1:b8:78:19:3e:c3:e3:01:58:e6:95:b1:20:ba:5c:5d:91:
bb:16:1f:b4:e4:5e:7e:15:fd:6c:f3:88:f4:f0:30:d9:10:06:
08:6b:45:e8:2b:09:bf:d9:4a:56:2a:3c:9a:87:7c:d0:c2:82:
9e:a7:bc:1c:ec:95:39:f0:4a:9b:61:7d:c5:38:c6:11:95:3e:
70:7e:a6:7d:80:e8:e9:cf:5b:7f:0f:f0:2b:8e:fb:cb:6c:1f:
3c:fc:3d:c9:88:db:df:76:b4:ea:a7:fb:ba:51:bb:fe:56:57:
a6:f9:b8:bd:16:11:4b:9e:51:07:0f:93:1f:9f:9f:f3:ef:67:
1f:69:84:65:52:1f:b3:52:a6:ba:12:d4:10:a3:66:a5:74:3c:
bb:1c:11:ce:80:3d:0b:19:82:79:67:0e:24:3b:f2:3a:e8:1d:
97:c8:84:15:51:a7:32:0f:b4:db:e7:a4:a7:3e:12:9c:68:00:
3c:2f:52:f0:55:71:c2:21:0d:15:1d:c5:b1:42:bf:18:19:7f:
9a:3c:60:66
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjA3MTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDcxOTYyOTI3ODNBMENF
RkRBN0YyOUU5NzIzOTE2OUFENUQ5MTcwMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJ7uyilfYSbEUMDm4N/71mTnHvqPBqGF0HZeMS+5j4VTHOEmo3
qY/1VsbFC0O5d78hBDhe6uzpFkuFq/aEY423svQllXuh3XBV/Tjmwh2mQ/hrchmJ
vR5PlI+yjnLpnDV0DRX5ndGs5/RqRCUQqUzvNSQaXXzRgjp86kiHAtE9+Xh9HkrU
uNpih+sHjY/7WEb5aGkeLftod+wiLeA+V2aUTnztmDbm4BVkPRY1P7XJFmuiW04B
PRz/r8LLMea48TTxW43urMw3h11r0gzYJ6jTIW35y6rJL1BsPR9Wt8POxPHEJILr
X+EjW5Jt2slLE4ZVFt54iYHVntZmmmVY9q3jAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcZYpJ4Ogzv2n8p6XI5FprV2RcDIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NaWXBKNE9nenYybjhwNlhJ
NUZwclYyUmNESS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sOwwDQYJKoZIhvcNAQELBQADggEBAEN3m8GSw5Cur770dDUJGRjCpubalP1NXgT7
A89AtxUZLU/8ocqrMsh40asQzbgZvW6FkBbmhxmxuHgZPsPjAVjmlbEgulxdkbsW
H7TkXn4V/WzziPTwMNkQBghrRegrCb/ZSlYqPJqHfNDCgp6nvBzslTnwSpthfcU4
xhGVPnB+pn2A6OnPW38P8CuO+8tsHzz8PcmI2992tOqn+7pRu/5WV6b5uL0WEUue
UQcPkx+fn/PvZx9phGVSH7NSproS1BCjZqV0PLscEc6APQsZgnlnDiQ78jroHZfI
hBVRpzIPtNvnpKc+EpxoADwvUvBVccIhDRUdxbFCvxgZf5o8YGY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org