Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ygNYftUOquEQMe5Ia3hoQtJoI_E.roa
File: ygNYftUOquEQMe5Ia3hoQtJoI_E.roa (raw, json)
Hash identifier: q8zJRxjuYBf+RQhEnM7QSHP/DIpgUgwfnTPRStOmWvw=
Subject key identifier: CA:03:58:7E:D5:0E:AA:E1:10:31:EE:48:6B:78:68:42:D2:68:23:F1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 178B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ygNYftUOquEQMe5Ia3hoQtJoI_E.roa
Signing time: Sun 07 Feb 2021 12:20:07 +0000
ROA not before: Sun 07 Feb 2021 12:20:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6027 (0x178b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:20:07 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CA03587ED50EAAE11031EE486B786842D26823F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:ba:a0:60:a5:44:d5:fa:fd:9e:77:22:5a:
49:cc:7b:2d:20:73:95:00:c6:0e:f3:36:e3:03:41:
59:48:5c:ee:5f:8a:13:f1:2f:de:18:d4:9b:2f:d8:
76:37:71:8c:59:fe:ab:87:9c:95:c9:2c:1d:91:37:
e9:aa:b3:05:44:31:65:08:df:30:05:05:1f:c8:ac:
25:07:ac:d7:7b:06:40:4c:46:cf:32:8b:ad:f4:83:
24:e0:f5:98:fb:cf:64:36:a8:fb:8e:16:9b:59:d3:
eb:69:5a:7a:de:ca:22:0c:71:b3:6f:49:99:92:cc:
17:68:d9:43:bd:d0:9a:34:b6:3a:aa:d7:19:24:f6:
64:4d:71:f4:c4:fb:8a:b6:88:b3:81:97:e5:a3:ba:
67:90:55:6b:7b:26:d3:6c:a2:9c:82:16:ab:0e:d3:
06:a4:04:ab:f9:97:e3:75:30:54:5d:03:54:c9:8c:
1d:27:f4:09:99:d0:90:09:a4:18:ee:e5:dc:b7:8c:
9c:b6:b2:0e:0a:ad:e3:07:74:b0:c8:e5:26:f5:04:
81:8a:db:ac:8b:04:89:f4:15:c5:9d:06:54:65:eb:
2b:25:97:4f:4f:13:27:d1:d2:f7:4a:08:f7:2a:04:
fd:70:45:a7:6b:f1:08:d3:8b:f3:86:a4:c3:ff:59:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:03:58:7E:D5:0E:AA:E1:10:31:EE:48:6B:78:68:42:D2:68:23:F1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ygNYftUOquEQMe5Ia3hoQtJoI_E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.160.0/21
Signature Algorithm: sha256WithRSAEncryption
92:f1:a7:da:9e:51:7f:c9:1c:1c:a7:14:ad:23:7d:67:79:2f:
3b:64:b5:33:b9:16:bc:b1:f1:35:97:1f:28:e4:4a:e0:5f:b0:
76:32:45:f3:15:7a:00:47:96:61:d0:7b:6d:0d:65:d9:75:43:
cf:e3:b4:92:29:b1:8e:37:1e:6a:75:66:0e:2d:24:64:cb:cf:
4d:55:f9:0c:7d:3b:e4:3a:37:72:19:af:65:81:84:cc:df:4e:
fa:07:c0:d6:2c:9a:f0:e6:e0:e5:b3:31:c1:ab:4e:d7:85:e2:
ae:9d:9f:ec:80:19:d8:c5:b6:13:b4:19:32:2f:2b:ef:d2:d2:
06:8a:f1:e0:b0:a1:4a:4c:76:9e:d2:8b:a6:92:8b:e3:11:87:
fb:49:60:6b:aa:3c:36:0a:c4:e5:6c:1b:21:5c:b4:c8:bb:07:
f8:98:c1:50:38:21:6b:f9:c9:49:db:80:06:41:39:36:ac:f4:
78:81:13:ee:71:32:f7:2e:14:cc:27:d9:52:1d:94:f6:d0:4e:
32:c0:4b:6f:e4:62:9a:be:09:01:f7:7b:c0:c5:d9:f7:3a:c8:
71:75:60:69:33:8b:da:f0:6b:2c:90:db:c0:2a:b2:00:91:4c:
ad:5f:35:d5:4c:c7:38:b3:79:15:fb:76:a6:52:83:81:6d:a3:
fc:c9:2e:cf
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF4swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjIwMDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKENBMDM1ODdFRDUwRUFB
RTExMDMxRUU0ODZCNzg2ODQyRDI2ODIzRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2trqgYKVE1fr9nnciWknMey0gc5UAxg7zNuMDQVlIXO5fihPx
L94Y1Jsv2HY3cYxZ/quHnJXJLB2RN+mqswVEMWUI3zAFBR/IrCUHrNd7BkBMRs8y
i630gyTg9Zj7z2Q2qPuOFptZ0+tpWnreyiIMcbNvSZmSzBdo2UO90Jo0tjqq1xkk
9mRNcfTE+4q2iLOBl+WjumeQVWt7JtNsopyCFqsO0wakBKv5l+N1MFRdA1TJjB0n
9AmZ0JAJpBju5dy3jJy2sg4KreMHdLDI5Sb1BIGK26yLBIn0FcWdBlRl6ysll09P
EyfR0vdKCPcqBP1wRadr8QjTi/OGpMP/WZtpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUygNYftUOquEQMe5Ia3hoQtJoI/EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lnTllmdFVPcXVFUU1lNUlh
M2hvUXRKb0lfRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sKAwDQYJKoZIhvcNAQELBQADggEBAJLxp9qeUX/JHBynFK0jfWd5LztktTO5Fryx
8TWXHyjkSuBfsHYyRfMVegBHlmHQe20NZdl1Q8/jtJIpsY43Hmp1Zg4tJGTLz01V
+Qx9O+Q6N3IZr2WBhMzfTvoHwNYsmvDm4OWzMcGrTteF4q6dn+yAGdjFthO0GTIv
K+/S0gaK8eCwoUpMdp7Si6aSi+MRh/tJYGuqPDYKxOVsGyFctMi7B/iYwVA4IWv5
yUnbgAZBOTas9HiBE+5xMvcuFMwn2VIdlPbQTjLAS2/kYpq+CQH3e8DF2fc6yHF1
YGkzi9rwayyQ28AqsgCRTK1fNdVMxzizeRX7dqZSg4Fto/zJLs8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:43 2023 by rpki-client on console-fra.rpki-client.org