Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oCZypkTDf4n3LRVqQ1D5liACQJg.roa
File: oCZypkTDf4n3LRVqQ1D5liACQJg.roa (raw, json)
Hash identifier: cPEwK7uf2XIRrrfaRlLzFFVnS1oebziJBE3MTRMr/Oc=
Subject key identifier: A0:26:72:A6:44:C3:7F:89:F7:2D:15:6A:43:50:F9:96:20:02:40:98
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DF9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oCZypkTDf4n3LRVqQ1D5liACQJg.roa
Signing time: Tue 29 Sep 2020 09:55:12 +0000
ROA not before: Tue 29 Sep 2020 09:55:12 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3577 (0xdf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:12 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A02672A644C37F89F72D156A4350F99620024098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:17:a0:01:de:28:e9:62:69:fb:2c:f6:6e:
06:86:61:7e:a2:90:45:8e:a6:37:12:a1:bf:52:86:
d2:8b:f6:03:d5:68:ba:b3:7d:0e:bc:04:16:7d:bd:
e3:56:13:15:9a:fa:c5:bc:7e:8e:1a:bb:95:ca:d4:
47:71:d7:ce:4f:fa:5c:5f:4e:a6:0a:23:ac:e9:78:
ca:a9:51:5c:38:24:39:03:75:44:bb:a2:d3:37:26:
3d:55:b4:cc:a3:89:ce:e3:c0:83:ea:94:db:f1:eb:
d1:d8:86:37:22:0a:5d:46:04:1d:30:23:cc:9f:dc:
5d:6a:9d:63:c4:6f:98:3f:84:2b:ff:d6:2d:19:3b:
3c:c2:19:8f:ae:37:fa:d8:ff:b8:a6:fc:c7:d5:ff:
c7:e4:85:8b:ee:6e:1d:81:ea:d6:d1:f3:a8:90:10:
d9:bf:58:59:1e:de:36:2e:fb:65:cd:ea:66:ad:cc:
35:f8:6d:01:10:40:71:5e:bd:98:33:b0:bd:a3:d8:
b4:c1:9d:f3:b5:be:5c:bc:79:03:92:3b:74:10:dc:
94:29:6f:c9:66:92:c2:97:e3:32:ab:dd:83:37:41:
c8:f9:34:8c:8f:c2:df:09:1d:99:45:58:78:b7:82:
41:b3:4a:f9:a6:fd:3c:b0:cc:1d:ef:d4:93:d1:44:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:26:72:A6:44:C3:7F:89:F7:2D:15:6A:43:50:F9:96:20:02:40:98
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oCZypkTDf4n3LRVqQ1D5liACQJg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:3a:93:ff:04:14:2d:5a:62:e6:2a:1b:d1:32:1b:18:3c:9e:
fb:37:ae:8b:34:d7:0c:d4:94:8f:23:9e:a6:93:a2:fa:2a:b2:
34:3b:bb:10:53:4a:65:6f:89:cc:0c:bc:ee:e2:98:0c:01:5f:
d2:63:77:83:1c:22:d1:6d:45:cf:fb:c7:f3:a0:10:8d:53:11:
e3:d1:db:25:7a:19:09:ea:ff:9e:32:1f:84:b1:18:32:22:85:
9c:3e:64:0c:75:21:64:26:97:7b:6d:d8:a9:3e:b5:93:6a:bd:
fb:f5:ee:84:48:b1:48:55:e3:aa:ec:60:79:8f:fd:2d:4d:da:
d5:ce:d5:f0:3d:09:79:3e:50:11:9a:e5:af:37:a5:42:dd:60:
7f:3c:cc:ea:68:66:ce:b7:d0:88:27:91:b5:48:14:16:51:22:
03:f4:ae:fa:4b:77:64:99:c2:37:f5:a5:0d:d0:51:04:90:8e:
e7:33:db:02:b9:10:c9:97:f6:28:38:d9:8e:6c:51:70:bc:a1:
bd:06:d0:98:f5:fb:4e:f8:09:fd:ff:bc:df:a2:e8:54:0a:eb:
a1:7d:20:9b:19:28:67:28:e7:d8:dc:67:87:b3:33:b0:41:2d:
8f:a8:f7:24:7c:d5:43:b4:1a:49:6d:57:9b:cd:7f:f2:f2:02:
a6:fd:ea:8e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDfkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEEwMjY3MkE2NDRDMzdG
ODlGNzJEMTU2QTQzNTBGOTk2MjAwMjQwOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0kxegAd4o6WJp+yz2bgaGYX6ikEWOpjcSob9ShtKL9gPVaLqz
fQ68BBZ9veNWExWa+sW8fo4au5XK1Edx185P+lxfTqYKI6zpeMqpUVw4JDkDdUS7
otM3Jj1VtMyjic7jwIPqlNvx69HYhjciCl1GBB0wI8yf3F1qnWPEb5g/hCv/1i0Z
OzzCGY+uN/rY/7im/MfV/8fkhYvubh2B6tbR86iQENm/WFke3jYu+2XN6matzDX4
bQEQQHFevZgzsL2j2LTBnfO1vly8eQOSO3QQ3JQpb8lmksKX4zKr3YM3Qcj5NIyP
wt8JHZlFWHi3gkGzSvmm/TywzB3v1JPRRD33AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUoCZypkTDf4n3LRVqQ1D5liACQJgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29DWnlwa1REZjRuM0xSVnFR
MUQ1bGlBQ1FKZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sJQwDQYJKoZIhvcNAQELBQADggEBALI6k/8EFC1aYuYqG9EyGxg8nvs3ros01wzU
lI8jnqaTovoqsjQ7uxBTSmVvicwMvO7imAwBX9Jjd4McItFtRc/7x/OgEI1TEePR
2yV6GQnq/54yH4SxGDIihZw+ZAx1IWQml3tt2Kk+tZNqvfv17oRIsUhV46rsYHmP
/S1N2tXO1fA9CXk+UBGa5a83pULdYH88zOpoZs630IgnkbVIFBZRIgP0rvpLd2SZ
wjf1pQ3QUQSQjucz2wK5EMmX9ig42Y5sUXC8ob0G0Jj1+074Cf3/vN+i6FQK66F9
IJsZKGco59jcZ4ezM7BBLY+o9yR81UO0GkltV5vNf/LyAqb96o4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org