Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iUnlF9GXYHzh8d31_KQTRWBLtm0.roa
File: iUnlF9GXYHzh8d31_KQTRWBLtm0.roa (raw, json)
Hash identifier: OHcClw5rCGdTjc2Nz/+SHL2fSf/iBC7fOaruZc+0Py8=
Subject key identifier: 89:49:E5:17:D1:97:60:7C:E1:F1:DD:F5:FC:A4:13:45:60:4B:B6:6D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B4F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iUnlF9GXYHzh8d31_KQTRWBLtm0.roa
Signing time: Wed 29 Sep 2021 02:46:26 +0000
ROA not before: Wed 29 Sep 2021 02:46:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.177.236.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6991 (0x1b4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8949E517D197607CE1F1DDF5FCA41345604BB66D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:44:57:bf:4c:b8:bc:50:9c:c9:98:37:90:
a3:22:13:43:a6:18:e4:09:87:17:50:01:05:03:05:
0d:19:1d:7d:0f:0f:aa:e0:11:08:72:f3:7a:81:37:
5c:69:fc:f7:d3:bd:b5:23:3e:7b:89:de:d9:2e:d7:
20:89:c1:fc:8e:0d:9c:57:a7:75:d7:9e:4a:af:d7:
d1:90:b4:81:28:16:fa:87:b0:1e:50:4a:58:08:77:
2d:db:71:74:72:a1:e3:37:a9:01:c8:7a:99:4e:90:
77:7b:34:45:98:fe:23:02:bb:9c:8d:34:57:63:dc:
71:b9:d6:50:1c:9a:d8:85:78:8f:79:78:c5:7c:d7:
b7:f7:41:61:97:68:52:28:51:aa:d0:66:ff:71:b6:
24:39:c8:c6:0f:5d:a4:3a:81:07:81:76:e7:38:d5:
3e:56:12:88:c3:90:8c:ef:c2:af:1e:16:1f:48:14:
aa:81:fa:ac:fc:ca:75:1c:43:da:6e:5d:df:a6:8f:
63:5d:a0:1f:07:58:10:e7:ae:52:c2:36:fb:ce:a3:
05:cf:ea:05:cf:63:b4:26:2c:66:75:5f:13:1b:f4:
ae:cb:f5:a1:9e:c5:b9:35:23:a1:0c:56:ed:3b:a3:
d1:ed:3a:b7:2e:45:c1:da:41:9b:ec:7c:3d:6d:0c:
d6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:49:E5:17:D1:97:60:7C:E1:F1:DD:F5:FC:A4:13:45:60:4B:B6:6D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iUnlF9GXYHzh8d31_KQTRWBLtm0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.236.0/23
Signature Algorithm: sha256WithRSAEncryption
23:78:1e:f8:65:c9:32:52:51:02:11:39:07:46:90:d5:da:d6:
ca:f0:5d:9a:3d:c6:45:7c:09:1c:25:28:0e:3b:17:c0:0f:78:
22:cf:36:0b:7a:52:63:bb:43:f7:d2:77:09:fa:35:6f:1d:35:
03:97:5f:16:aa:1f:9c:e4:6e:64:d8:cc:c0:40:60:96:fd:bc:
11:ff:0e:35:b6:a7:1f:cb:ce:5e:0f:6d:c6:6e:2e:53:a3:ec:
e2:cc:c4:42:82:93:ba:e7:64:8d:58:28:96:ed:38:58:e9:8d:
e0:79:2b:f9:1d:48:2d:9d:15:6b:dc:68:83:36:cc:02:dd:5c:
72:d4:5d:d3:cc:ab:f0:05:92:b2:ce:2d:69:ab:d7:38:ec:6a:
38:16:35:12:87:53:4a:79:45:07:3c:df:e8:51:06:db:f5:c9:
35:6f:c5:69:40:22:56:a8:6c:d7:ef:59:a3:0b:06:eb:bd:2f:
da:13:21:bf:23:90:f6:5f:e7:88:a3:37:30:15:a1:6d:e6:7b:
a1:17:a3:09:e5:8e:69:66:e7:eb:d1:1f:2e:92:6d:24:3c:40:
3f:84:01:ed:43:1b:f8:08:02:83:72:5a:d1:06:79:b0:4e:e1:
a4:ba:6b:43:e0:2d:b6:2d:be:bf:1d:93:02:10:e4:95:08:3f:
bd:59:54:f8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG08wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2MjZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDg5NDlFNTE3RDE5NzYw
N0NFMUYxRERGNUZDQTQxMzQ1NjA0QkI2NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLqERXv0y4vFCcyZg3kKMiE0OmGOQJhxdQAQUDBQ0ZHX0PD6rg
EQhy83qBN1xp/PfTvbUjPnuJ3tku1yCJwfyODZxXp3XXnkqv19GQtIEoFvqHsB5Q
SlgIdy3bcXRyoeM3qQHIeplOkHd7NEWY/iMCu5yNNFdj3HG51lAcmtiFeI95eMV8
17f3QWGXaFIoUarQZv9xtiQ5yMYPXaQ6gQeBduc41T5WEojDkIzvwq8eFh9IFKqB
+qz8ynUcQ9puXd+mj2NdoB8HWBDnrlLCNvvOowXP6gXPY7QmLGZ1XxMb9K7L9aGe
xbk1I6EMVu07o9HtOrcuRcHaQZvsfD1tDNbdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUiUnlF9GXYHzh8d31/KQTRWBLtm0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2lVbmxGOUdYWUh6aDhkMzFf
S1FUUldCTHRtMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0
sewwDQYJKoZIhvcNAQELBQADggEBACN4HvhlyTJSUQIROQdGkNXa1srwXZo9xkV8
CRwlKA47F8APeCLPNgt6UmO7Q/fSdwn6NW8dNQOXXxaqH5zkbmTYzMBAYJb9vBH/
DjW2px/Lzl4PbcZuLlOj7OLMxEKCk7rnZI1YKJbtOFjpjeB5K/kdSC2dFWvcaIM2
zALdXHLUXdPMq/AFkrLOLWmr1zjsajgWNRKHU0p5RQc83+hRBtv1yTVvxWlAIlao
bNfvWaMLBuu9L9oTIb8jkPZf54ijNzAVoW3me6EXownljmlm5+vRHy6SbSQ8QD+E
Ae1DG/gIAoNyWtEGebBO4aS6a0PgLbYtvr8dkwIQ5JUIP71ZVPg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org