Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mpltj5KyuplUlSqee07Z1xgHmlY.roa
File: mpltj5KyuplUlSqee07Z1xgHmlY.roa (raw, json)
Hash identifier: mBiC9KhcOSQtfZv1VbLWnUr511X8KhQafldna3CpJL4=
Subject key identifier: 9A:99:6D:8F:92:B2:BA:99:54:95:2A:9E:7B:4E:D9:D7:18:07:9A:56
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1421
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mpltj5KyuplUlSqee07Z1xgHmlY.roa
Signing time: Sun 07 Feb 2021 11:57:30 +0000
ROA not before: Sun 07 Feb 2021 11:57:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5153 (0x1421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:57:30 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9A996D8F92B2BA9954952A9E7B4ED9D718079A56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:49:80:42:a3:06:78:b2:62:de:fa:51:f1:
43:e0:5c:b4:01:c2:0a:ac:35:fe:88:cb:46:d9:9e:
2c:e1:34:01:ca:63:82:4e:d1:ff:df:50:d3:e7:1f:
01:00:d5:2a:ff:74:2e:6d:1a:99:53:1d:d8:6d:47:
1d:f2:ee:89:d7:aa:a4:64:5a:62:f8:6f:0d:f4:63:
53:3c:18:7c:28:fc:a0:70:e2:9c:b2:4b:8c:d9:7a:
9b:aa:be:de:97:5b:ca:e0:97:3a:50:ec:27:46:64:
5a:36:b9:72:48:74:f1:7b:4b:2e:3d:73:cb:4b:e9:
63:4b:81:79:4c:1e:57:7f:bf:7e:3f:d1:2e:fd:64:
a0:eb:a2:96:48:ec:06:e2:f1:91:f9:ad:ce:af:60:
53:a7:42:13:72:22:f9:7f:50:c2:5f:01:43:21:04:
55:0a:5c:17:77:ac:81:ed:7c:c2:a6:7a:2c:d1:02:
4b:38:74:a5:4a:51:1e:a4:76:66:a9:10:fe:8b:4e:
17:23:ae:d8:d8:a7:9b:86:99:29:52:56:be:6a:c3:
26:6e:85:f6:2a:fe:4f:0d:7d:9b:93:95:13:1d:4e:
ac:1d:3b:ea:ad:1a:8a:25:1d:c7:c2:48:90:a8:ce:
e2:07:50:e5:45:d0:ab:ca:f2:81:50:31:91:26:0a:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:99:6D:8F:92:B2:BA:99:54:95:2A:9E:7B:4E:D9:D7:18:07:9A:56
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mpltj5KyuplUlSqee07Z1xgHmlY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.23.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b8:4b:01:f9:f1:98:9f:19:35:2c:aa:51:4f:8d:02:06:09:
c9:ec:28:2b:a2:49:e9:4b:6e:53:3e:5e:b4:49:e3:7b:74:ce:
1a:26:52:9b:27:22:b8:6b:70:58:d5:98:e2:70:ad:56:bf:6a:
29:3e:0e:98:56:19:98:42:0f:90:5f:f2:81:6a:f4:48:20:05:
69:85:aa:d7:80:88:3d:5f:f1:9b:db:f8:0d:b4:83:eb:f9:50:
ed:e7:40:74:5d:d4:df:f9:2b:79:d1:dc:b8:96:02:6c:56:78:
73:45:56:8e:29:4c:54:00:7f:b9:59:1d:75:95:8a:2f:8f:39:
c8:8f:fe:7a:8a:7f:2f:7b:3f:6d:d5:51:86:88:b2:f1:1a:00:
94:ab:a4:64:fb:b9:05:6f:79:6d:dc:f9:6e:5a:59:fd:44:74:
8e:74:c1:48:50:9c:aa:2c:a8:e1:d0:88:7e:f6:c9:67:ac:d9:
3c:75:5a:e6:f5:ff:6e:cb:c1:08:d2:11:e1:bd:6f:f9:6b:cc:
2d:b8:47:3b:b1:fd:7b:df:95:f8:62:93:4b:7a:05:a4:6c:e0:
2c:16:da:6f:82:7d:9c:0e:53:86:33:8d:13:3b:e2:4e:d5:f1:
ed:df:c0:5d:90:6c:4f:18:e5:06:f3:53:09:15:47:b5:1c:fd:
98:01:33:41
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFCEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU3MzBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDlBOTk2RDhGOTJCMkJB
OTk1NDk1MkE5RTdCNEVEOUQ3MTgwNzlBNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC35EmAQqMGeLJi3vpR8UPgXLQBwgqsNf6Iy0bZnizhNAHKY4JO
0f/fUNPnHwEA1Sr/dC5tGplTHdhtRx3y7onXqqRkWmL4bw30Y1M8GHwo/KBw4pyy
S4zZepuqvt6XW8rglzpQ7CdGZFo2uXJIdPF7Sy49c8tL6WNLgXlMHld/v34/0S79
ZKDropZI7Abi8ZH5rc6vYFOnQhNyIvl/UMJfAUMhBFUKXBd3rIHtfMKmeizRAks4
dKVKUR6kdmapEP6LThcjrtjYp5uGmSlSVr5qwyZuhfYq/k8NfZuTlRMdTqwdO+qt
GoolHcfCSJCozuIHUOVF0KvK8oFQMZEmCrS7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmpltj5KyuplUlSqee07Z1xgHmlYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21wbHRqNUt5dXBsVWxTcWVl
MDdaMXhnSG1sWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
sBcwDQYJKoZIhvcNAQELBQADggEBAEC4SwH58ZifGTUsqlFPjQIGCcnsKCuiSelL
blM+XrRJ43t0zhomUpsnIrhrcFjVmOJwrVa/aik+DphWGZhCD5Bf8oFq9EggBWmF
qteAiD1f8Zvb+A20g+v5UO3nQHRd1N/5K3nR3LiWAmxWeHNFVo4pTFQAf7lZHXWV
ii+POciP/nqKfy97P23VUYaIsvEaAJSrpGT7uQVveW3c+W5aWf1EdI50wUhQnKos
qOHQiH72yWes2Tx1Wub1/27LwQjSEeG9b/lrzC24Rzux/Xvflfhik0t6BaRs4CwW
2m+CfZwOU4YzjRM74k7V8e3fwF2QbE8Y5QbzUwkVR7Uc/ZgBM0E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org