Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jG4Khvr3dPDw8vLZEeZYwnyhcog.roa
File: jG4Khvr3dPDw8vLZEeZYwnyhcog.roa (raw, json)
Hash identifier: mtxfIvrwmMr0I0YWb8yZbr0oQpEHmo84AHsN9RClNxU=
Subject key identifier: 8C:6E:0A:86:FA:F7:74:F0:F0:F2:F2:D9:11:E6:58:C2:7C:A1:72:88
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C6C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jG4Khvr3dPDw8vLZEeZYwnyhcog.roa
Signing time: Wed 29 Sep 2021 02:47:45 +0000
ROA not before: Wed 29 Sep 2021 02:47:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.176.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7276 (0x1c6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8C6E0A86FAF774F0F0F2F2D911E658C27CA17288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:01:b7:07:d7:6b:9e:c3:6a:58:cb:e4:ba:
91:5b:f3:6f:5d:f5:95:32:e7:64:be:1b:72:43:16:
3f:87:18:40:64:de:41:8f:db:cf:cb:f6:ef:11:9c:
5f:7e:31:3e:52:1d:05:d0:ec:2e:fc:19:63:e1:10:
89:8c:d6:2c:e9:c8:f0:91:c6:e5:67:bf:37:2a:60:
68:ae:75:61:ea:da:b4:04:19:3b:b9:53:50:77:ee:
6d:98:b6:6c:5a:73:f9:e0:43:c9:5b:8d:25:90:13:
9f:a4:f9:80:f8:21:c6:53:13:1e:ae:c2:bb:72:e4:
de:3c:b9:5e:b6:75:be:54:90:89:4e:36:58:65:06:
c7:b0:a6:21:54:c6:73:44:3f:2e:e8:d7:e5:76:c9:
f8:f7:2f:48:85:65:27:d2:3c:12:0e:dd:de:67:9f:
65:0c:f5:6c:36:fc:67:79:15:be:b0:ab:f3:59:7a:
19:49:6c:4c:08:43:58:3d:04:ea:76:4b:ce:35:ab:
b6:6d:ac:71:24:58:67:21:31:f1:76:d9:d6:f7:f4:
04:40:7d:20:0d:86:a2:72:cc:7b:6a:2d:e7:41:34:
e9:14:e5:8c:89:5f:5c:1c:2b:47:7c:cc:4a:a8:bf:
22:17:8d:24:e5:a3:9b:ab:74:9e:2d:d9:a9:22:43:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6E:0A:86:FA:F7:74:F0:F0:F2:F2:D9:11:E6:58:C2:7C:A1:72:88
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jG4Khvr3dPDw8vLZEeZYwnyhcog.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.160.0/21
Signature Algorithm: sha256WithRSAEncryption
23:d4:15:d7:d4:7f:9f:da:6b:90:79:a5:e3:e7:82:af:f9:c5:
8b:17:66:04:ac:b8:ef:4f:3d:23:5f:9a:d6:da:f5:5f:f6:30:
6c:25:a7:78:2e:01:ba:e2:82:36:09:1e:4e:93:58:6d:3c:4e:
06:58:6e:f0:44:90:42:e4:b2:33:a3:9a:92:a3:3b:8e:94:60:
15:5a:e1:8a:39:3e:24:5c:a7:c0:99:2a:3f:25:68:20:c8:47:
72:59:f6:4c:3b:28:a1:12:98:7f:aa:34:ad:8f:f7:6a:07:71:
bb:f2:27:a1:7a:c9:ab:43:67:61:c9:66:d7:e5:e5:eb:85:0a:
a6:28:5a:0b:c1:35:e6:27:b3:c7:13:cf:a7:13:e5:bf:fc:a9:
8c:5b:0f:79:25:60:f1:91:76:c5:be:12:87:b8:0f:84:28:1d:
75:b5:1c:db:d5:3c:6b:e5:90:3b:60:ae:cb:c6:36:f4:27:18:
95:3c:ad:da:92:e7:6e:c6:b7:d7:89:6c:84:7f:b0:4a:6c:bc:
b7:bc:19:99:ea:42:d7:f6:14:b4:5b:57:35:47:3a:79:54:7f:
bb:30:ed:f8:59:97:b1:d5:3a:7b:9f:45:59:80:5e:ba:ff:2f:
7b:f9:c4:9f:9f:a0:a1:b9:9d:dd:07:f3:b6:12:69:5d:ed:24:
12:01:38:a7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3NDVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDhDNkUwQTg2RkFGNzc0
RjBGMEYyRjJEOTExRTY1OEMyN0NBMTcyODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3qgG3B9drnsNqWMvkupFb829d9ZUy52S+G3JDFj+HGEBk3kGP
28/L9u8RnF9+MT5SHQXQ7C78GWPhEImM1izpyPCRxuVnvzcqYGiudWHq2rQEGTu5
U1B37m2Ytmxac/ngQ8lbjSWQE5+k+YD4IcZTEx6uwrty5N48uV62db5UkIlONlhl
BsewpiFUxnNEPy7o1+V2yfj3L0iFZSfSPBIO3d5nn2UM9Ww2/Gd5Fb6wq/NZehlJ
bEwIQ1g9BOp2S841q7ZtrHEkWGchMfF22db39ARAfSANhqJyzHtqLedBNOkU5YyJ
X1wcK0d8zEqovyIXjSTlo5urdJ4t2akiQykbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjG4Khvr3dPDw8vLZEeZYwnyhcogwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pHNEtodnIzZFBEdzh2TFpF
ZVpZd255aGNvZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sKAwDQYJKoZIhvcNAQELBQADggEBACPUFdfUf5/aa5B5pePngq/5xYsXZgSsuO9P
PSNfmtba9V/2MGwlp3guAbrigjYJHk6TWG08TgZYbvBEkELksjOjmpKjO46UYBVa
4Yo5PiRcp8CZKj8laCDIR3JZ9kw7KKESmH+qNK2P92oHcbvyJ6F6yatDZ2HJZtfl
5euFCqYoWgvBNeYns8cTz6cT5b/8qYxbD3klYPGRdsW+Eoe4D4QoHXW1HNvVPGvl
kDtgrsvGNvQnGJU8rdqS527Gt9eJbIR/sEpsvLe8GZnqQtf2FLRbVzVHOnlUf7sw
7fhZl7HVOnufRVmAXrr/L3v5xJ+foKG5nd0H87YSaV3tJBIBOKc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org