Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wY8OpYzA5ISNr-MuLwia-KuGig4.roa
File: wY8OpYzA5ISNr-MuLwia-KuGig4.roa (raw, json)
Hash identifier: YvTEjxB2HNq2cXxpoPWDvMT87K5mBEAzUO4OSmz+AKY=
Subject key identifier: C1:8F:0E:A5:8C:C0:E4:84:8D:AF:E3:2E:2F:08:9A:F8:AB:86:8A:0E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 154D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wY8OpYzA5ISNr-MuLwia-KuGig4.roa
Signing time: Sun 07 Feb 2021 12:03:53 +0000
ROA not before: Sun 07 Feb 2021 12:03:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.234.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5453 (0x154d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:03:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C18F0EA58CC0E4848DAFE32E2F089AF8AB868A0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:d4:bb:40:eb:3c:c3:6f:3e:c3:ad:94:c8:
9a:02:d5:5a:1a:b0:28:12:e9:1a:58:dd:9e:6c:36:
8b:b8:40:ab:18:38:e1:cc:3d:a8:a2:3b:4a:75:98:
c6:87:b2:1c:0e:e4:c6:28:eb:13:49:de:13:a0:cc:
bd:12:5c:1c:91:ec:84:a3:be:50:e1:cd:28:04:8b:
3d:13:24:ed:d3:31:47:6a:0d:0c:e0:2b:34:c8:c7:
9c:a2:c3:54:46:ae:8a:07:aa:d0:54:e6:a8:14:d3:
17:e1:a0:03:54:d9:1b:83:8d:2f:42:39:d7:88:b2:
a2:ff:9e:ae:67:c8:12:c1:6c:11:ea:19:fd:db:04:
ed:53:66:6d:65:b8:fa:d4:82:96:4c:f9:2b:8a:e9:
aa:a9:af:1b:7d:0d:c2:26:ac:a8:d2:63:13:ad:53:
14:32:e7:40:50:fb:03:d5:d5:68:d7:86:a0:94:33:
31:1d:d8:43:a1:e2:6b:5c:42:8a:73:aa:9e:3b:a3:
dd:5d:82:40:46:cd:aa:e4:78:28:85:c1:4f:c2:7f:
ca:05:e4:41:f5:66:4b:7b:3e:fb:13:76:3b:fa:01:
3b:7f:15:a1:67:eb:f9:2c:19:d2:99:f6:45:67:2a:
c2:ae:f1:89:ca:e5:0a:6d:7f:58:3c:3b:f7:5c:08:
b3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8F:0E:A5:8C:C0:E4:84:8D:AF:E3:2E:2F:08:9A:F8:AB:86:8A:0E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wY8OpYzA5ISNr-MuLwia-KuGig4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.234.0/23
Signature Algorithm: sha256WithRSAEncryption
95:6b:ab:56:ac:89:ef:ca:a4:6d:a6:52:83:47:66:8f:22:00:
0f:fc:8f:29:ac:29:58:a0:b1:0d:08:30:ff:d7:85:ac:54:3c:
cb:a6:de:8a:b5:0e:79:a4:46:c9:fc:e6:8a:57:42:d0:73:c2:
41:ff:b7:33:24:68:18:4d:9e:e1:43:1e:a2:f0:7d:e3:f2:cf:
7f:3f:40:95:79:c8:be:2a:1a:11:e7:3f:2e:cd:0b:81:fd:ac:
20:5e:85:46:75:b4:45:aa:41:d5:c1:94:c9:08:67:fb:ae:1d:
4f:6b:63:b2:a9:6c:40:7f:c3:42:cf:ec:b1:73:0c:87:39:ae:
d7:5b:90:7c:be:78:2a:b2:a4:81:61:26:98:43:9e:ab:24:8f:
d1:63:5c:da:77:76:2f:23:2f:8c:ac:c7:15:7f:7c:10:21:38:
30:28:ea:f8:9d:e2:a1:ad:2b:8a:df:9b:1d:cd:3f:e2:16:92:
9d:ff:5b:d4:78:db:63:de:b7:2f:c2:a2:83:75:46:4c:b9:f5:
83:8a:9b:35:c7:d3:32:40:2f:45:1c:b0:07:06:e7:16:79:4d:
26:2c:eb:25:05:17:ed:54:c2:d7:d0:42:6b:88:f5:93:8e:bf:
96:48:28:36:d7:de:b0:9f:46:49:e4:37:e7:88:4c:b5:22:d4:
8f:b1:99:dc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFU0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjAzNTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEMxOEYwRUE1OENDMEU0
ODQ4REFGRTMyRTJGMDg5QUY4QUI4NjhBMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPjtS7QOs8w28+w62UyJoC1VoasCgS6RpY3Z5sNou4QKsYOOHM
PaiiO0p1mMaHshwO5MYo6xNJ3hOgzL0SXByR7ISjvlDhzSgEiz0TJO3TMUdqDQzg
KzTIx5yiw1RGrooHqtBU5qgU0xfhoANU2RuDjS9COdeIsqL/nq5nyBLBbBHqGf3b
BO1TZm1luPrUgpZM+SuK6aqprxt9DcImrKjSYxOtUxQy50BQ+wPV1WjXhqCUMzEd
2EOh4mtcQopzqp47o91dgkBGzarkeCiFwU/Cf8oF5EH1Zkt7PvsTdjv6ATt/FaFn
6/ksGdKZ9kVnKsKu8YnK5Qptf1g8O/dcCLPDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUwY8OpYzA5ISNr+MuLwia+KuGig4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dZOE9wWXpBNUlTTnItTXVM
d2lhLUt1R2lnNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0
seowDQYJKoZIhvcNAQELBQADggEBAJVrq1asie/KpG2mUoNHZo8iAA/8jymsKVig
sQ0IMP/XhaxUPMum3oq1DnmkRsn85opXQtBzwkH/tzMkaBhNnuFDHqLwfePyz38/
QJV5yL4qGhHnPy7NC4H9rCBehUZ1tEWqQdXBlMkIZ/uuHU9rY7KpbEB/w0LP7LFz
DIc5rtdbkHy+eCqypIFhJphDnqskj9FjXNp3di8jL4ysxxV/fBAhODAo6vid4qGt
K4rfmx3NP+IWkp3/W9R422Pety/CooN1Rky59YOKmzXH0zJAL0UcsAcG5xZ5TSYs
6yUFF+1UwtfQQmuI9ZOOv5ZIKDbX3rCfRknkN+eITLUi1I+xmdw=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:42 2023 by rpki-client on console-fra.rpki-client.org