Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uQIHRKSr4O-bTRRQLMhXH0ws9tg.roa
File: uQIHRKSr4O-bTRRQLMhXH0ws9tg.roa (raw, json)
Hash identifier: SQsIf+bLEVD0q7U2thsHrKgvQeDy+WXn0Voeg+EoTwE=
Subject key identifier: B9:02:07:44:A4:AB:E0:EF:9B:4D:14:50:2C:C8:57:1F:4C:2C:F6:D8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B12
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uQIHRKSr4O-bTRRQLMhXH0ws9tg.roa
Signing time: Wed 29 Sep 2021 02:46:06 +0000
ROA not before: Wed 29 Sep 2021 02:46:06 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.176.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6930 (0x1b12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:06 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B9020744A4ABE0EF9B4D14502CC8571F4C2CF6D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:d3:90:29:f5:ae:03:4a:7d:66:47:e5:a9:
1f:b0:a5:0e:7f:03:69:71:20:c4:de:5f:0a:40:23:
d7:94:3a:61:5a:12:82:87:e6:cc:ec:fb:1b:75:2a:
9a:c7:a8:3f:9e:a8:6d:41:b6:ed:50:a8:ff:71:11:
7e:19:dc:16:e0:c8:31:6e:38:cf:c0:33:5f:87:41:
2d:4e:8d:88:bb:dd:cd:76:8b:9e:f4:66:f7:95:8e:
f9:1f:84:76:3b:5e:92:d2:a0:a7:ce:b0:3b:d6:1d:
0d:ed:9a:94:e1:23:69:12:4a:72:95:3c:4a:c5:40:
a5:5b:ed:63:55:0f:80:4b:d1:6a:9f:38:9a:7f:a5:
60:4e:d5:0c:c3:33:95:a7:fa:1a:66:ec:13:c8:15:
75:95:f5:05:ba:b2:a3:93:04:fe:97:0c:6d:8c:6a:
1d:00:75:62:cd:b5:fd:8f:98:f8:4b:48:f6:2a:9a:
cb:26:2d:c0:0c:bd:3a:94:4b:d0:05:d7:ad:c7:f5:
80:66:93:bc:d5:bc:e4:a0:f4:b2:4b:87:c3:c0:43:
09:51:8a:61:52:49:25:1d:97:ec:2d:74:de:96:42:
85:70:24:a7:9f:79:2e:be:cf:d2:c8:c4:96:e3:2f:
6a:83:67:2c:f7:78:f6:12:3b:ad:e5:3b:50:1d:21:
ce:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:02:07:44:A4:AB:E0:EF:9B:4D:14:50:2C:C8:57:1F:4C:2C:F6:D8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uQIHRKSr4O-bTRRQLMhXH0ws9tg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.104.0/22
Signature Algorithm: sha256WithRSAEncryption
05:b3:e7:ff:57:47:c9:8c:e4:1b:20:7f:ea:30:fb:ab:e9:d7:
97:d3:dd:b8:dc:06:dd:04:f7:23:d4:c6:d6:bf:cb:9e:9e:ad:
14:2e:a5:c7:a0:26:02:0e:bd:6b:9a:52:02:fb:09:db:63:d6:
9e:fe:7b:d2:31:4a:40:ee:a1:c3:52:78:41:38:d3:f8:0d:1a:
42:04:66:8b:7f:f9:7e:06:e3:80:08:a5:8f:34:33:a1:52:0b:
f1:f9:f3:d5:88:e0:6f:b7:61:71:ff:e2:82:e6:35:c0:c5:2c:
03:1f:33:99:96:c0:da:92:5d:2b:62:37:03:91:88:83:9c:2c:
53:04:41:10:19:8a:ee:9d:83:92:66:b1:43:df:b2:f6:54:cd:
60:bc:6c:ad:6f:60:c6:01:99:53:b7:d9:b8:43:ed:60:6a:11:
cf:7f:19:fe:67:57:a8:6a:0c:0c:78:47:e7:93:ea:81:d3:88:
3b:4f:39:e1:d1:7f:f1:91:9b:4f:72:29:bb:2a:ac:eb:23:08:
78:2b:e9:03:c6:db:41:bd:99:b1:3a:2d:a0:10:2a:e2:9d:83:
cb:a3:19:32:67:e5:e8:ba:db:5b:f0:30:6c:ac:5b:9f:fc:fa:
44:c8:f6:3a:cc:b4:ce:40:e6:d1:66:6e:21:71:a9:b3:f5:c6:
17:e1:0f:dc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGxIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2MDZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEI5MDIwNzQ0QTRBQkUw
RUY5QjREMTQ1MDJDQzg1NzFGNEMyQ0Y2RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvvdOQKfWuA0p9ZkflqR+wpQ5/A2lxIMTeXwpAI9eUOmFaEoKH
5szs+xt1KprHqD+eqG1Btu1QqP9xEX4Z3BbgyDFuOM/AM1+HQS1OjYi73c12i570
ZveVjvkfhHY7XpLSoKfOsDvWHQ3tmpThI2kSSnKVPErFQKVb7WNVD4BL0WqfOJp/
pWBO1QzDM5Wn+hpm7BPIFXWV9QW6sqOTBP6XDG2Mah0AdWLNtf2PmPhLSPYqmssm
LcAMvTqUS9AF163H9YBmk7zVvOSg9LJLh8PAQwlRimFSSSUdl+wtdN6WQoVwJKef
eS6+z9LIxJbjL2qDZyz3ePYSO63lO1AdIc7pAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuQIHRKSr4O+bTRRQLMhXH0ws9tgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VRSUhSS1NyNE8tYlRSUlFM
TWhYSDB3czl0Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sGgwDQYJKoZIhvcNAQELBQADggEBAAWz5/9XR8mM5Bsgf+ow+6vp15fT3bjcBt0E
9yPUxta/y56erRQupcegJgIOvWuaUgL7Cdtj1p7+e9IxSkDuocNSeEE40/gNGkIE
Zot/+X4G44AIpY80M6FSC/H589WI4G+3YXH/4oLmNcDFLAMfM5mWwNqSXStiNwOR
iIOcLFMEQRAZiu6dg5JmsUPfsvZUzWC8bK1vYMYBmVO32bhD7WBqEc9/Gf5nV6hq
DAx4R+eT6oHTiDtPOeHRf/GRm09yKbsqrOsjCHgr6QPG20G9mbE6LaAQKuKdg8uj
GTJn5ei621vwMGysW5/8+kTI9jrMtM5A5tFmbiFxqbP1xhfhD9w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org