Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dQwrCSoyy4U-G_W8i_fmgqm32H4.roa
File: dQwrCSoyy4U-G_W8i_fmgqm32H4.roa (raw, json)
Hash identifier: JrxW/97V7JhXIRDPpXVZ4VKObk7aFwSqQJYnlz53vOw=
Subject key identifier: 75:0C:2B:09:2A:32:CB:85:3E:1B:F5:BC:8B:F7:E6:82:A9:B7:D8:7E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dQwrCSoyy4U-G_W8i_fmgqm32H4.roa
Signing time: Thu 15 Sep 2022 02:52:18 +0000
ROA not before: Thu 15 Sep 2022 02:52:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=750C2B092A32CB853E1BF5BC8BF7E682A9B7D87E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:c9:87:03:88:14:0b:79:ba:e5:d9:f6:64:
24:40:06:8a:d3:4a:64:77:13:e6:9e:df:36:62:a0:
92:c3:64:37:f1:ce:5e:ec:95:fd:c0:eb:8d:07:09:
46:6a:49:23:33:a7:e5:8e:f8:a1:fe:9a:44:e2:2f:
9d:c9:13:65:95:56:dd:33:1f:ef:86:97:0f:12:cc:
6f:29:e2:45:1f:8e:02:d1:d2:aa:a0:7c:88:7d:49:
cb:2f:3a:80:3d:b1:de:9c:1a:1d:3a:7e:70:aa:f7:
bf:c5:5f:a5:36:d6:b1:f4:05:4b:e7:a6:6d:e8:19:
3b:43:63:e1:03:20:19:7b:41:47:ea:43:a5:1a:07:
98:f8:be:79:2c:54:02:05:e8:a1:6f:95:8b:ae:28:
1e:33:1c:fc:a5:19:18:86:8e:50:79:8d:dd:0e:af:
16:1a:bf:67:16:9c:51:36:b7:34:60:62:1f:12:f3:
3d:2f:5b:c3:f0:a7:98:15:97:7f:a1:0f:c3:ea:f0:
f8:10:91:3e:b8:a1:6f:5d:4f:c4:de:36:a8:42:06:
0a:6b:ab:ba:70:d5:fd:82:f9:d7:9b:84:77:be:69:
83:44:6c:bb:b4:b6:56:42:0d:74:ed:15:be:c1:1b:
7a:b5:35:bf:c6:e6:f0:f1:e0:49:f7:b2:dd:9c:b3:
92:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0C:2B:09:2A:32:CB:85:3E:1B:F5:BC:8B:F7:E6:82:A9:B7:D8:7E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dQwrCSoyy4U-G_W8i_fmgqm32H4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.152.0/21
Signature Algorithm: sha256WithRSAEncryption
89:fd:af:3f:e7:e8:68:9f:be:ad:b7:99:63:a0:df:99:7d:33:
f9:21:ac:1c:1c:a0:a3:6c:55:69:14:ac:b8:ba:6c:b3:fe:6f:
bd:3a:e2:9a:d0:66:db:28:21:46:24:5e:da:33:25:59:49:11:
a4:60:c1:52:7a:23:97:8e:0c:2f:4d:a1:9e:bd:47:2a:3a:0b:
a8:be:d3:be:59:e2:60:b5:76:71:af:a4:b5:7e:ba:21:6a:25:
74:6a:4d:f0:7d:cf:bc:22:ec:aa:8c:86:57:34:88:b9:0d:a7:
22:86:37:f6:7a:a3:db:5d:9b:f9:a0:d8:f1:8c:1f:0b:b8:15:
2a:b8:b8:08:07:43:9b:c1:95:97:9b:03:5e:81:f0:fd:70:97:
65:bd:2f:a4:3c:cd:9a:90:ea:42:d8:d2:9d:9f:7b:f2:e2:f5:
49:e0:76:d7:c8:ea:d4:5f:5c:b2:15:bb:1a:28:87:57:88:e9:
33:85:5f:5f:55:e2:38:a3:7d:20:ac:2d:8c:6f:a4:4c:4f:65:
5e:6d:c7:b1:07:60:0f:32:d5:20:96:c6:d8:72:33:14:51:c2:
1d:1e:cc:15:d4:c1:bc:69:a5:b5:c9:f6:93:35:aa:7e:2a:55:
9e:a6:51:56:5c:c8:28:6b:dd:4b:8b:b3:ff:29:09:e2:0e:23:
20:e4:b2:5a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUyMThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDc1MEMyQjA5MkEzMkNC
ODUzRTFCRjVCQzhCRjdFNjgyQTlCN0Q4N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmBsmHA4gUC3m65dn2ZCRABorTSmR3E+ae3zZioJLDZDfxzl7s
lf3A640HCUZqSSMzp+WO+KH+mkTiL53JE2WVVt0zH++Glw8SzG8p4kUfjgLR0qqg
fIh9ScsvOoA9sd6cGh06fnCq97/FX6U21rH0BUvnpm3oGTtDY+EDIBl7QUfqQ6Ua
B5j4vnksVAIF6KFvlYuuKB4zHPylGRiGjlB5jd0OrxYav2cWnFE2tzRgYh8S8z0v
W8Pwp5gVl3+hD8Pq8PgQkT64oW9dT8TeNqhCBgprq7pw1f2C+debhHe+aYNEbLu0
tlZCDXTtFb7BG3q1Nb/G5vDx4En3st2cs5LvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUdQwrCSoyy4U+G/W8i/fmgqm32H4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2RRd3JDU295eTRVLUdfVzhp
X2ZtZ3FtMzJINC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sJgwDQYJKoZIhvcNAQELBQADggEBAIn9rz/n6Gifvq23mWOg35l9M/khrBwcoKNs
VWkUrLi6bLP+b7064prQZtsoIUYkXtozJVlJEaRgwVJ6I5eODC9NoZ69Ryo6C6i+
075Z4mC1dnGvpLV+uiFqJXRqTfB9z7wi7KqMhlc0iLkNpyKGN/Z6o9tdm/mg2PGM
Hwu4FSq4uAgHQ5vBlZebA16B8P1wl2W9L6Q8zZqQ6kLY0p2fe/Li9UngdtfI6tRf
XLIVuxooh1eI6TOFX19V4jijfSCsLYxvpExPZV5tx7EHYA8y1SCWxthyMxRRwh0e
zBXUwbxppbXJ9pM1qn4qVZ6mUVZcyChr3UuLs/8pCeIOIyDkslo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org