Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zXaCny7lVD1yf0PLVMQvbr_NnOY.roa
File: zXaCny7lVD1yf0PLVMQvbr_NnOY.roa (raw, json)
Hash identifier: GEV6R9ZFFgvZs6iCVFTqMXiXnUn8GQ+s2eBCZwaIgd0=
Subject key identifier: CD:76:82:9F:2E:E5:54:3D:72:7F:43:CB:54:C4:2F:6E:BF:CD:9C:E6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21CE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zXaCny7lVD1yf0PLVMQvbr_NnOY.roa
Signing time: Fri 25 Nov 2022 04:40:25 +0000
ROA not before: Fri 25 Nov 2022 04:40:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.46.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8654 (0x21ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CD76829F2EE5543D727F43CB54C42F6EBFCD9CE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5b:94:77:b9:22:26:12:a0:d6:85:44:08:6b:
8e:d5:f4:8a:8f:c8:9b:41:34:67:49:08:90:a6:4f:
30:07:17:f5:80:67:b2:cf:a2:f8:9d:a2:78:83:47:
61:91:48:1a:ac:9c:7c:5f:8c:0d:36:1c:b4:c3:55:
bc:be:81:d4:40:ae:0b:77:e7:48:66:9a:ef:11:a1:
c2:11:a4:82:86:ea:95:d6:97:c2:00:7c:22:dc:0c:
f6:6e:8d:eb:c3:fc:3d:3c:91:ae:3e:66:f4:0b:10:
89:bb:04:ba:79:ca:5d:a9:a1:f9:88:07:b5:95:17:
c2:05:94:ea:73:c6:82:69:7a:63:03:87:89:eb:3a:
be:6f:bc:a7:64:61:cc:d4:65:6d:ba:ec:c1:95:91:
73:34:6a:07:82:dc:b2:b5:80:d0:ba:e8:fa:e1:a1:
6e:de:7c:ba:2d:23:b9:84:2d:67:36:0c:0c:6d:4a:
af:8d:8c:a3:a8:49:23:d0:d1:5d:64:a2:ff:75:b3:
32:0d:ff:9c:b4:44:f2:82:51:c7:8f:cb:d2:2c:bf:
d5:e2:7d:e2:09:5d:fc:ad:fa:8e:41:e6:41:06:75:
81:7d:6a:42:a3:b3:73:98:40:5a:29:21:a8:00:35:
34:59:f8:01:1d:79:4c:9a:8e:6a:3c:e1:8a:54:1e:
ec:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:76:82:9F:2E:E5:54:3D:72:7F:43:CB:54:C4:2F:6E:BF:CD:9C:E6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zXaCny7lVD1yf0PLVMQvbr_NnOY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.46.0/26
Signature Algorithm: sha256WithRSAEncryption
22:ac:49:52:31:f0:16:2d:0f:b2:4b:f7:6e:74:34:66:f6:e5:
11:a0:56:b5:52:b4:d2:2f:24:b3:b1:e0:a9:28:66:fa:c6:d3:
85:d5:85:ad:e4:1f:62:77:0e:43:61:e5:7b:71:ba:e4:b4:6b:
30:8b:4b:4b:42:dd:41:a5:37:aa:7e:0d:69:a2:8d:9e:9a:f8:
fa:52:f7:e6:c5:3a:c9:e7:74:e7:5a:b9:1f:22:14:5e:55:c7:
e1:11:bd:cf:2b:ac:4f:a1:8a:61:e4:95:36:f9:b4:18:4e:1c:
67:78:4e:7e:e0:7b:2e:cc:c4:26:b1:10:3e:52:1e:56:b3:e1:
59:00:b0:6b:4d:bc:7f:f7:2b:8d:4e:06:23:2c:d5:00:59:d4:
ab:67:58:c9:04:8c:18:6f:92:85:95:93:23:9d:bc:89:70:16:
35:15:b7:ac:6b:e2:56:0f:94:5e:f9:2a:ff:23:bf:9f:f7:35:
3d:57:cf:d5:5b:f7:fa:37:b8:5c:ff:c0:e3:c9:ce:e6:27:7c:
e7:fc:f2:60:5e:c2:3b:59:62:34:bb:d4:ec:d8:1c:1c:66:2b:
67:22:29:1d:17:49:4d:4d:5e:b2:05:e8:e5:44:b3:2e:03:92:
c3:b6:ae:b5:11:f0:64:d9:e4:1a:eb:53:63:5c:28:1b:a8:c3:
05:56:1f:2a
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICIc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMjVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKENENzY4MjlGMkVFNTU0
M0Q3MjdGNDNDQjU0QzQyRjZFQkZDRDlDRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD1W5R3uSImEqDWhUQIa47V9IqPyJtBNGdJCJCmTzAHF/WAZ7LP
ovidoniDR2GRSBqsnHxfjA02HLTDVby+gdRArgt350hmmu8RocIRpIKG6pXWl8IA
fCLcDPZujevD/D08ka4+ZvQLEIm7BLp5yl2pofmIB7WVF8IFlOpzxoJpemMDh4nr
Or5vvKdkYczUZW267MGVkXM0ageC3LK1gNC66PrhoW7efLotI7mELWc2DAxtSq+N
jKOoSSPQ0V1kov91szIN/5y0RPKCUcePy9Isv9XifeIJXfyt+o5B5kEGdYF9akKj
s3OYQFopIagANTRZ+AEdeUyajmo84YpUHuwZAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUzXaCny7lVD1yf0PLVMQvbr/NnOYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3pYYUNueTdsVkQxeWYwUExW
TVF2YnJfTm5PWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQa0
sS4AMA0GCSqGSIb3DQEBCwUAA4IBAQAirElSMfAWLQ+yS/dudDRm9uURoFa1UrTS
LySzseCpKGb6xtOF1YWt5B9idw5DYeV7cbrktGswi0tLQt1BpTeqfg1poo2emvj6
UvfmxTrJ53TnWrkfIhReVcfhEb3PK6xPoYph5JU2+bQYThxneE5+4HsuzMQmsRA+
Uh5Ws+FZALBrTbx/9yuNTgYjLNUAWdSrZ1jJBIwYb5KFlZMjnbyJcBY1Fbesa+JW
D5Re+Sr/I7+f9zU9V8/VW/f6N7hc/8Djyc7mJ3zn/PJgXsI7WWI0u9Ts2BwcZitn
IikdF0lNTV6yBejlRLMuA5LDtq61EfBk2eQa61NjXCgbqMMFVh8q
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org