Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xttpQIu0FiK9iA63amuL1m2YOVc.roa
File: xttpQIu0FiK9iA63amuL1m2YOVc.roa (raw, json)
Hash identifier: 4Cu4/ZWuK8cGQQqYjVghJ7RXwnSSglulAsVdoBxkjiU=
Subject key identifier: C6:DB:69:40:8B:B4:16:22:BD:88:0E:B7:6A:6B:8B:D6:6D:98:39:57
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2076
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xttpQIu0FiK9iA63amuL1m2YOVc.roa
Signing time: Fri 25 Nov 2022 04:38:45 +0000
ROA not before: Fri 25 Nov 2022 04:38:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8310 (0x2076)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C6DB69408BB41622BD880EB76A6B8BD66D983957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:aa:13:8c:31:53:50:89:cd:cc:b3:b5:ec:0a:
4d:35:3e:71:06:61:04:34:7a:63:56:ee:f2:85:4b:
9b:81:3b:d6:3a:6f:64:3c:75:ed:97:4f:dd:bf:c7:
a1:0b:db:f7:5d:d4:05:e6:d8:e0:29:5a:57:ad:be:
e9:c4:e5:d5:59:8d:9c:d5:00:81:72:b2:ee:73:3c:
7a:20:16:5b:a7:9d:61:61:9c:fd:36:e6:62:f5:56:
0e:f1:70:4b:ce:77:c6:78:ee:12:39:5e:c6:6d:aa:
2f:39:06:bb:e4:47:a4:9e:9c:c2:bf:4d:ef:d9:b1:
83:68:8e:97:b2:28:ae:92:d6:f6:16:ec:88:32:26:
7f:81:79:91:bf:94:16:e6:3b:65:07:df:82:99:43:
f4:ab:18:a2:a7:c6:fc:9f:7b:e2:97:13:51:2a:e0:
a8:69:a4:79:03:e6:86:1e:f9:e2:12:22:09:16:b0:
a1:a9:12:7f:4e:90:98:b7:bd:ee:1f:ca:88:a5:5c:
48:a1:e2:68:80:61:1b:30:46:00:45:a4:26:5a:ac:
cb:d3:c9:7d:ce:9e:b9:f6:5c:2e:26:64:3e:f1:bc:
ba:8d:69:a3:a2:bc:1d:93:41:c6:8f:e3:f6:b9:fb:
48:3a:6a:66:0d:76:2b:3a:6e:26:ed:1e:2d:d2:58:
00:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DB:69:40:8B:B4:16:22:BD:88:0E:B7:6A:6B:8B:D6:6D:98:39:57
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xttpQIu0FiK9iA63amuL1m2YOVc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:85:ed:7f:5f:8f:14:dc:91:c2:36:0e:28:78:28:9f:9c:78:
52:61:cc:4c:63:5c:db:40:de:2b:5a:81:d7:9c:4e:fe:f2:ba:
ba:60:64:62:f0:85:30:f1:93:43:ec:70:25:f4:b6:ac:63:3b:
d6:1d:3c:82:57:52:93:01:09:a5:f3:36:f0:d7:c2:e2:55:7f:
6e:87:03:58:2b:fa:bc:7f:7f:9f:27:98:80:57:85:81:c5:e1:
4d:05:68:b4:31:fa:47:07:04:b2:b9:66:dc:83:21:45:e2:a4:
43:85:16:ad:ea:29:b3:0f:55:4d:7a:0f:1f:00:ce:53:0b:52:
c9:20:f5:aa:8b:37:f0:74:ee:05:c3:d8:a8:dc:7d:63:b5:21:
21:79:eb:47:9f:d0:87:bb:4f:50:eb:21:04:37:5a:8a:22:69:
25:02:a9:66:89:56:7e:54:67:fc:9c:a8:a2:e7:e2:21:81:d5:
d1:c5:14:1f:aa:f7:eb:f4:e3:eb:7c:15:c7:cb:8f:64:55:d1:
e8:17:42:72:a9:ac:57:ad:40:69:23:07:df:0f:0b:1c:4f:a8:
70:de:94:5c:7f:27:8c:54:0a:fb:32:71:84:07:56:a2:44:3c:
0b:7d:22:43:ea:5a:05:15:5d:0a:31:ee:ac:23:89:f6:14:d0:
34:b6:77:40
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4NDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEM2REI2OTQwOEJCNDE2
MjJCRDg4MEVCNzZBNkI4QkQ2NkQ5ODM5NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXqhOMMVNQic3Ms7XsCk01PnEGYQQ0emNW7vKFS5uBO9Y6b2Q8
de2XT92/x6EL2/dd1AXm2OApWletvunE5dVZjZzVAIFysu5zPHogFlunnWFhnP02
5mL1Vg7xcEvOd8Z47hI5XsZtqi85BrvkR6SenMK/Te/ZsYNojpeyKK6S1vYW7Igy
Jn+BeZG/lBbmO2UH34KZQ/SrGKKnxvyfe+KXE1Eq4KhppHkD5oYe+eISIgkWsKGp
En9OkJi3ve4fyoilXEih4miAYRswRgBFpCZarMvTyX3Onrn2XC4mZD7xvLqNaaOi
vB2TQcaP4/a5+0g6amYNdis6bibtHi3SWADVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUxttpQIu0FiK9iA63amuL1m2YOVcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3h0dHBRSXUwRmlLOWlBNjNh
bXVMMW0yWU9WYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sQgwDQYJKoZIhvcNAQELBQADggEBABuF7X9fjxTckcI2Dih4KJ+ceFJhzExjXNtA
3itagdecTv7yurpgZGLwhTDxk0PscCX0tqxjO9YdPIJXUpMBCaXzNvDXwuJVf26H
A1gr+rx/f58nmIBXhYHF4U0FaLQx+kcHBLK5ZtyDIUXipEOFFq3qKbMPVU16Dx8A
zlMLUskg9aqLN/B07gXD2KjcfWO1ISF560ef0Ie7T1DrIQQ3WooiaSUCqWaJVn5U
Z/ycqKLn4iGB1dHFFB+q9+v04+t8FcfLj2RV0egXQnKprFetQGkjB98PCxxPqHDe
lFx/J4xUCvsycYQHVqJEPAt9IkPqWgUVXQox7qwjifYU0DS2d0A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org