Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f11Hy3nAYRe_7ZfwIvqkTuPyjBY.roa
File: f11Hy3nAYRe_7ZfwIvqkTuPyjBY.roa (raw, json)
Hash identifier: F8sChIJKZZliqNybe6Y9W1E3QC8IKow5V/6Mfeve4PA=
Subject key identifier: 7F:5D:47:CB:79:C0:61:17:BF:ED:97:F0:22:FA:A4:4E:E3:F2:8C:16
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2281
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f11Hy3nAYRe_7ZfwIvqkTuPyjBY.roa
Signing time: Fri 25 Nov 2022 04:41:16 +0000
ROA not before: Fri 25 Nov 2022 04:41:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8833 (0x2281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7F5D47CB79C06117BFED97F022FAA44EE3F28C16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:8d:db:3b:2d:d6:c4:a0:15:cf:e6:2c:70:
e9:4f:a0:2e:11:eb:6e:49:9a:93:54:ae:df:d8:a3:
0d:74:57:d9:34:a9:cc:4d:f4:7e:76:71:02:c7:15:
9d:73:e3:ca:f1:b6:98:26:b8:62:c6:cb:3a:0e:46:
ea:a2:47:ff:a4:bc:f6:d3:4a:9c:05:2f:8f:3e:ed:
ed:56:74:a3:24:28:70:47:12:ea:e2:69:8e:4a:97:
09:c2:cc:53:0c:8c:2f:67:58:c5:49:ee:ba:86:22:
67:f7:ac:71:30:9e:8a:ce:81:6a:5c:46:d0:8d:df:
3d:4c:03:1b:10:a4:75:bf:8e:5b:61:c3:41:65:c5:
0f:c7:6a:de:a6:7b:1a:6e:a8:d7:58:0e:7c:07:73:
c2:7d:e3:3b:cb:c6:c4:c6:e1:04:7a:db:c4:d9:a3:
62:5c:f7:5e:01:cd:67:50:f7:cd:bd:2a:f2:b9:12:
6f:3c:69:a2:ce:ab:12:a3:de:d0:06:58:7b:60:7b:
0e:ff:f7:4b:95:cf:f7:d5:2f:5e:bf:fa:11:5c:d4:
b8:39:47:d1:62:5b:d0:03:67:eb:97:84:41:3c:db:
c9:c0:94:d1:b7:3f:2e:f6:21:1e:f6:62:2f:db:68:
f0:00:b3:9e:a8:4f:38:a4:7e:72:b9:4e:4f:f7:67:
ad:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5D:47:CB:79:C0:61:17:BF:ED:97:F0:22:FA:A4:4E:E3:F2:8C:16
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f11Hy3nAYRe_7ZfwIvqkTuPyjBY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.68.0/22
Signature Algorithm: sha256WithRSAEncryption
33:7e:42:9d:07:54:4f:75:3f:77:2a:a1:59:d4:5b:2b:d6:14:
2c:60:c2:30:5a:02:2f:66:00:62:2f:6b:39:7e:f0:7f:d2:8a:
b4:6a:9c:3d:f8:22:d4:79:6a:20:1f:a3:00:c6:40:4b:52:5e:
5e:bb:d7:96:7f:85:de:a2:e5:ec:c2:c1:3d:0a:63:d0:56:62:
c5:77:7c:81:e1:1f:52:3f:b0:47:6b:59:5e:81:97:f3:c7:86:
15:83:af:17:d1:4f:c3:03:ff:db:d9:8a:0e:f7:45:9b:fc:ed:
f4:fe:27:03:ab:ce:dc:ea:c0:2b:42:8e:d4:56:5b:3c:92:53:
09:01:54:15:d7:bd:95:7c:82:bb:a3:dc:a6:e0:1e:3e:43:00:
c3:dc:07:8c:a1:61:37:3a:55:52:00:32:49:62:77:d4:51:14:
ee:c7:6c:e3:52:0b:f3:da:ad:23:39:fe:08:bf:72:30:a5:52:
74:03:f0:2f:02:2f:c7:c4:5a:a3:40:ba:90:19:72:fe:ad:20:
38:0f:fd:17:e3:92:27:1b:a0:f8:ab:75:dd:04:37:00:48:49:
21:c6:1a:c2:f8:72:33:06:97:a5:d5:a3:0a:58:2d:a8:db:39:
b0:87:be:6f:60:22:e8:86:07:4c:84:2a:86:5b:d3:3e:1b:b0:
8b:79:6b:63
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIoEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxMTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDdGNUQ0N0NCNzlDMDYx
MTdCRkVEOTdGMDIyRkFBNDRFRTNGMjhDMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgXY3bOy3WxKAVz+YscOlPoC4R625JmpNUrt/Yow10V9k0qcxN
9H52cQLHFZ1z48rxtpgmuGLGyzoORuqiR/+kvPbTSpwFL48+7e1WdKMkKHBHEuri
aY5KlwnCzFMMjC9nWMVJ7rqGImf3rHEwnorOgWpcRtCN3z1MAxsQpHW/jlthw0Fl
xQ/Hat6mexpuqNdYDnwHc8J94zvLxsTG4QR628TZo2Jc914BzWdQ9829KvK5Em88
aaLOqxKj3tAGWHtgew7/90uVz/fVL16/+hFc1Lg5R9FiW9ADZ+uXhEE828nAlNG3
Py72IR72Yi/baPAAs56oTzikfnK5Tk/3Z617AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUf11Hy3nAYRe/7ZfwIvqkTuPyjBYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2YxMUh5M25BWVJlXzdaZndJ
dnFrVHVQeWpCWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sUQwDQYJKoZIhvcNAQELBQADggEBADN+Qp0HVE91P3cqoVnUWyvWFCxgwjBaAi9m
AGIvazl+8H/SirRqnD34ItR5aiAfowDGQEtSXl6715Z/hd6i5ezCwT0KY9BWYsV3
fIHhH1I/sEdrWV6Bl/PHhhWDrxfRT8MD/9vZig73RZv87fT+JwOrztzqwCtCjtRW
WzySUwkBVBXXvZV8gruj3KbgHj5DAMPcB4yhYTc6VVIAMklid9RRFO7HbONSC/Pa
rSM5/gi/cjClUnQD8C8CL8fEWqNAupAZcv6tIDgP/RfjkicboPirdd0ENwBISSHG
GsL4cjMGl6XVowpYLajbObCHvm9gIuiGB0yEKoZb0z4bsIt5a2M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org