Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v7XdAlJMLM7ZCZcWkOwi1MZeIGk.roa
File: v7XdAlJMLM7ZCZcWkOwi1MZeIGk.roa (raw, json)
Hash identifier: i/Ew7GdcB6IR1xO4mZSu1srPOAgL4+CdpeZX6+VHS40=
Subject key identifier: BF:B5:DD:02:52:4C:2C:CE:D9:09:97:16:90:EC:22:D4:C6:5E:20:69
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1697
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v7XdAlJMLM7ZCZcWkOwi1MZeIGk.roa
Signing time: Sun 07 Feb 2021 12:13:00 +0000
ROA not before: Sun 07 Feb 2021 12:13:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.144.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5783 (0x1697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:13:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BFB5DD02524C2CCED909971690EC22D4C65E2069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:7b:8e:17:e2:05:b7:06:9f:b1:70:13:ec:
14:79:4c:f5:3b:b3:f0:d8:81:72:0b:88:4d:cd:34:
2c:26:65:67:18:ea:bb:44:f8:c2:16:71:ec:dc:ae:
ff:ab:d6:d8:55:b7:0f:c0:9b:56:b7:d4:2e:c3:17:
5f:b3:70:9b:c3:b2:51:ed:8a:8b:1e:dc:09:28:6f:
fe:04:3f:87:6b:ed:87:39:7e:a5:25:d9:c9:d1:b3:
12:22:da:7f:9c:d1:37:03:30:32:56:1c:5d:af:b8:
63:ec:b7:0e:d1:62:f6:05:ce:c8:4a:36:0d:0e:64:
b2:b2:9b:f2:4f:01:a4:71:8b:b6:8b:25:ba:0b:bb:
e6:f3:c1:2a:22:d3:84:0b:d7:f0:12:6c:8e:07:5a:
15:6c:8e:04:72:7d:f4:62:7b:ba:15:07:26:51:4a:
d9:2a:90:0f:38:d7:91:c2:2a:09:34:fd:77:62:3b:
12:39:da:95:71:65:6d:58:8e:6c:63:8c:c0:9e:a7:
ee:dd:8b:01:70:b5:be:5b:5f:11:64:de:eb:76:d8:
ee:79:3d:f5:fe:2a:30:84:8c:ae:e7:20:6d:d0:b3:
16:84:8f:68:3e:b0:74:bf:5a:f4:a6:6e:27:10:8b:
ea:1f:d4:f4:b4:31:26:4c:15:19:25:98:87:17:b9:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B5:DD:02:52:4C:2C:CE:D9:09:97:16:90:EC:22:D4:C6:5E:20:69
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v7XdAlJMLM7ZCZcWkOwi1MZeIGk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.144.0/21
Signature Algorithm: sha256WithRSAEncryption
37:e8:38:c5:39:3d:e0:55:34:ec:7c:c9:16:1b:b7:fa:fe:39:
34:cd:2c:97:d0:1f:0c:aa:a7:d3:4c:19:d2:41:4d:d0:80:c0:
fc:d6:e2:48:ad:87:0e:e5:e5:0d:ba:05:18:57:5f:fd:c9:23:
d9:8e:6e:34:3a:16:9b:b5:9f:67:df:a4:2d:ef:5f:c9:10:4a:
fe:e5:d0:f1:a5:1d:a9:6c:73:52:21:ab:e0:5b:47:8e:7f:ae:
b0:4f:e8:13:f7:95:21:09:a3:10:6a:00:c5:d8:52:a8:12:53:
05:4b:55:c9:7d:55:1b:ae:4b:32:93:d0:57:a1:b9:e3:1a:f6:
70:9e:12:41:4d:79:fb:a0:f4:0e:9d:d9:b0:ec:9b:1f:10:66:
87:03:6d:14:53:53:e9:0e:e0:b2:1a:0b:40:23:cf:4c:ef:ae:
e5:15:09:8e:cf:56:cf:bb:6f:42:ff:53:fb:c7:ee:7c:a5:74:
a6:03:82:84:90:24:63:59:18:c6:08:f8:8b:ae:71:8b:d5:08:
16:9b:44:bd:74:0e:6c:2e:26:82:96:5d:51:8e:ec:df:7d:52:
24:c2:5d:1f:2c:a8:a0:23:a8:7c:0a:d6:1c:6e:04:b6:24:3d:
fc:d5:08:b2:bb:e9:95:16:4a:72:a2:3f:af:97:99:0e:44:3e:
84:5e:cb:cb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFpcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjEzMDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEJGQjVERDAyNTI0QzJD
Q0VEOTA5OTcxNjkwRUMyMkQ0QzY1RTIwNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6BXuOF+IFtwafsXAT7BR5TPU7s/DYgXILiE3NNCwmZWcY6rtE
+MIWcezcrv+r1thVtw/Am1a31C7DF1+zcJvDslHtiose3Akob/4EP4dr7Yc5fqUl
2cnRsxIi2n+c0TcDMDJWHF2vuGPstw7RYvYFzshKNg0OZLKym/JPAaRxi7aLJboL
u+bzwSoi04QL1/ASbI4HWhVsjgRyffRie7oVByZRStkqkA8415HCKgk0/XdiOxI5
2pVxZW1YjmxjjMCep+7diwFwtb5bXxFk3ut22O55PfX+KjCEjK7nIG3QsxaEj2g+
sHS/WvSmbicQi+of1PS0MSZMFRklmIcXuVFzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUv7XdAlJMLM7ZCZcWkOwi1MZeIGkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Y3WGRBbEpNTE03WkNaY1dr
T3dpMU1aZUlHay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sZAwDQYJKoZIhvcNAQELBQADggEBADfoOMU5PeBVNOx8yRYbt/r+OTTNLJfQHwyq
p9NMGdJBTdCAwPzW4kithw7l5Q26BRhXX/3JI9mObjQ6Fpu1n2ffpC3vX8kQSv7l
0PGlHalsc1Ihq+BbR45/rrBP6BP3lSEJoxBqAMXYUqgSUwVLVcl9VRuuSzKT0Feh
ueMa9nCeEkFNefug9A6d2bDsmx8QZocDbRRTU+kO4LIaC0Ajz0zvruUVCY7PVs+7
b0L/U/vH7nyldKYDgoSQJGNZGMYI+IuucYvVCBabRL10DmwuJoKWXVGO7N99UiTC
XR8sqKAjqHwK1hxuBLYkPfzVCLK76ZUWSnKiP6+XmQ5EPoRey8s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org