Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tH92S1qKFeqbwg4dIdTn0ZPlAYQ.roa
File: tH92S1qKFeqbwg4dIdTn0ZPlAYQ.roa (raw, json)
Hash identifier: Yz+BWXpQ+gXSQyNMrJfWjVQa5BWNTpO/BPXw8J43Zyc=
Subject key identifier: B4:7F:76:4B:5A:8A:15:EA:9B:C2:0E:1D:21:D4:E7:D1:93:E5:01:84
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E48
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tH92S1qKFeqbwg4dIdTn0ZPlAYQ.roa
Signing time: Tue 29 Sep 2020 09:55:33 +0000
ROA not before: Tue 29 Sep 2020 09:55:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.124.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3656 (0xe48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:33 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B47F764B5A8A15EA9BC20E1D21D4E7D193E50184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:64:0a:a2:7a:f9:f3:b9:28:82:24:b8:3c:dd:
8b:37:d4:dc:21:c0:b2:95:50:0b:01:e6:a8:84:81:
3b:57:1a:1d:02:c0:ae:ef:da:b9:29:c7:64:9e:46:
0f:23:65:5d:66:38:c7:6a:ae:88:a6:62:11:59:f6:
3f:d9:7b:e1:68:79:cc:11:26:e4:7c:97:43:f8:02:
1d:74:b1:cc:6a:a1:cd:39:71:3b:6e:4f:5e:3f:e8:
fc:8a:3f:8a:f5:0b:5b:da:fe:85:9b:78:c1:fc:33:
89:2f:27:da:85:55:13:97:3c:45:0a:77:6c:ce:ae:
91:03:f0:24:b2:79:6c:51:38:56:fd:fa:02:9c:09:
2f:77:7f:5a:82:e0:a5:06:39:b0:d0:2b:ef:e0:95:
90:68:de:49:08:61:c4:df:2c:7c:c8:8b:26:43:16:
4c:97:9f:e4:80:11:24:46:3b:d9:79:71:00:25:76:
76:07:48:38:4b:bd:b0:85:03:a0:3c:79:fe:0b:3b:
b4:c9:fa:0d:af:e9:2b:c2:06:82:79:3a:c1:da:b7:
95:cc:c4:b8:cb:52:11:24:29:ea:4a:5a:b1:80:e3:
37:17:82:c0:f0:65:da:5b:81:a9:eb:8c:b7:b1:a2:
92:1a:0c:ea:71:93:c4:55:ca:89:03:15:c0:bb:19:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7F:76:4B:5A:8A:15:EA:9B:C2:0E:1D:21:D4:E7:D1:93:E5:01:84
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tH92S1qKFeqbwg4dIdTn0ZPlAYQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.124.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:37:37:ea:7f:35:bf:28:41:65:df:c3:65:35:01:0b:71:61:
aa:55:ec:30:31:33:36:9f:a0:3c:46:e6:b3:ab:3a:be:44:91:
73:73:0b:59:af:e0:2d:d2:58:33:0a:b8:99:44:f2:67:d6:06:
b8:38:77:fe:21:ee:f4:a0:13:69:6e:4e:c0:82:86:52:db:ca:
34:9e:82:9c:6a:f2:1b:02:83:93:a8:e9:25:71:ef:8f:22:c6:
82:7f:d9:7d:6e:d2:f0:8a:e6:09:b9:78:de:47:b6:3f:ca:e2:
c1:6d:68:92:48:21:22:ce:d2:9f:d9:7d:45:75:c2:1f:48:b1:
94:15:bc:9a:02:90:1f:61:fa:2d:b5:9e:64:15:ca:b1:45:32:
db:c9:89:3b:71:a2:1f:8a:73:1f:25:8b:cb:b4:92:de:14:fd:
7a:92:b6:d8:19:39:74:76:26:8f:fb:3d:c2:af:c1:3e:a2:73:
4b:32:14:79:61:31:76:3d:99:02:07:6d:85:91:f1:cd:be:85:
eb:dd:59:72:b7:ff:93:84:83:d9:c1:dc:95:01:79:70:7f:03:
4c:e8:0e:ef:01:df:4f:4a:b7:0d:7c:c8:f2:7d:3c:93:e5:45:
d2:c4:9b:34:b6:01:d5:9d:f1:85:c8:11:3b:7e:80:a6:bc:c0:
6a:5d:e9:dc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDkgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MzNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI0N0Y3NjRCNUE4QTE1
RUE5QkMyMEUxRDIxRDRFN0QxOTNFNTAxODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdZAqievnzuSiCJLg83Ys31NwhwLKVUAsB5qiEgTtXGh0CwK7v
2rkpx2SeRg8jZV1mOMdqroimYhFZ9j/Ze+FoecwRJuR8l0P4Ah10scxqoc05cTtu
T14/6PyKP4r1C1va/oWbeMH8M4kvJ9qFVROXPEUKd2zOrpED8CSyeWxROFb9+gKc
CS93f1qC4KUGObDQK+/glZBo3kkIYcTfLHzIiyZDFkyXn+SAESRGO9l5cQAldnYH
SDhLvbCFA6A8ef4LO7TJ+g2v6SvCBoJ5OsHat5XMxLjLUhEkKepKWrGA4zcXgsDw
ZdpbganrjLexopIaDOpxk8RVyokDFcC7GYBhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtH92S1qKFeqbwg4dIdTn0ZPlAYQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RIOTJTMXFLRmVxYndnNGRJ
ZFRuMFpQbEFZUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0
sXwwDQYJKoZIhvcNAQELBQADggEBAFw3N+p/Nb8oQWXfw2U1AQtxYapV7DAxMzaf
oDxG5rOrOr5EkXNzC1mv4C3SWDMKuJlE8mfWBrg4d/4h7vSgE2luTsCChlLbyjSe
gpxq8hsCg5Oo6SVx748ixoJ/2X1u0vCK5gm5eN5Htj/K4sFtaJJIISLO0p/ZfUV1
wh9IsZQVvJoCkB9h+i21nmQVyrFFMtvJiTtxoh+Kcx8li8u0kt4U/XqSttgZOXR2
Jo/7PcKvwT6ic0syFHlhMXY9mQIHbYWR8c2+hevdWXK3/5OEg9nB3JUBeXB/A0zo
Du8B309Ktw18yPJ9PJPlRdLEmzS2AdWd8YXIETt+gKa8wGpd6dw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org