Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zbQfxCzlB3JRBSYVu751d4MoEmc.roa
File: zbQfxCzlB3JRBSYVu751d4MoEmc.roa (raw, json)
Hash identifier: pouxwpjvDfrxhyxQsl8+/luzF11VNPtZH+jJ0fj+AyE=
Subject key identifier: CD:B4:1F:C4:2C:E5:07:72:51:05:26:15:BB:BE:75:77:83:28:12:67
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F13
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zbQfxCzlB3JRBSYVu751d4MoEmc.roa
Signing time: Tue 29 Sep 2020 09:56:28 +0000
ROA not before: Tue 29 Sep 2020 09:56:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3859 (0xf13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CDB41FC42CE5077251052615BBBE757783281267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0d:79:ed:de:70:1e:80:fc:02:bf:29:b7:b8:
11:78:43:d1:93:ed:fa:71:45:30:a9:e0:ee:61:be:
1c:c5:ae:8a:79:6c:bb:70:01:8f:13:8d:7e:e4:18:
32:76:fb:1e:74:89:26:af:79:e0:c7:be:9d:2d:e9:
8c:59:21:de:95:0a:bc:28:f9:9f:05:77:4b:5b:7b:
0a:18:90:fc:f0:af:5c:0c:8b:89:7d:14:3b:88:de:
b3:52:4f:b3:0e:87:72:d6:b4:4a:78:bb:f6:cb:71:
a1:c8:1a:46:9b:5c:0f:96:f1:a3:8a:07:78:b0:f2:
34:78:ed:f6:5b:6c:73:81:23:a3:fc:19:42:9c:c6:
58:f0:a2:43:e2:11:b2:f8:5c:5b:f3:2e:8d:cf:29:
89:23:28:87:df:f1:fa:65:64:02:51:19:30:bd:c0:
fe:46:58:d7:58:e6:ab:cd:5d:9a:5a:af:6a:1a:4e:
30:8e:24:64:84:55:a6:73:bf:4f:6d:d0:c7:b2:bc:
d2:8d:2f:6b:75:be:23:7c:0c:f4:35:22:dd:f9:ff:
c9:4f:75:5b:87:ea:30:75:0b:88:ef:a4:1c:0e:7e:
6a:65:45:df:fa:2b:1c:22:54:dd:2f:f0:0a:2f:12:
6c:27:86:b7:3f:26:6a:93:29:3d:04:f6:d6:e5:10:
3a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:1F:C4:2C:E5:07:72:51:05:26:15:BB:BE:75:77:83:28:12:67
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zbQfxCzlB3JRBSYVu751d4MoEmc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.156.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ab:7f:24:cf:e9:d6:f0:79:17:f7:18:29:2f:a4:a7:ca:93:
71:cb:21:04:e2:1f:7d:8c:b9:56:fa:18:b9:a1:a6:24:56:aa:
cb:4c:bc:69:65:01:6e:b3:fb:e8:96:e9:bc:6d:00:a6:0a:63:
7b:6c:de:6b:ac:b8:ce:3d:72:54:88:e8:99:3f:d7:ec:d3:cf:
9e:ee:5a:cd:e8:5c:dd:df:75:7d:67:4c:4b:d5:c8:be:50:1f:
ca:af:77:16:28:3e:b1:4b:31:36:29:0c:c8:04:ef:02:b8:76:
b0:ab:54:b0:28:cb:93:cd:cf:f4:7a:a7:20:12:ed:e6:88:ed:
b0:26:e0:e1:9a:44:8a:bd:f7:b8:0b:1d:c0:8c:7c:41:5c:ca:
f1:c4:6d:e5:a3:2a:60:cb:c1:5c:a7:f2:07:a6:2f:e5:d5:cd:
39:36:63:91:fe:b6:8f:0d:19:51:ed:03:cd:77:03:64:2e:97:
75:be:0e:7a:b8:c4:98:8a:e4:14:0b:a1:d4:71:11:22:8f:bd:
5c:08:1a:f9:e5:3a:17:6e:a4:5a:9c:6a:65:d7:5b:79:ab:19:
47:ae:af:1f:3b:49:0b:6a:e7:48:19:32:dc:d9:5c:4e:1d:a5:
ba:d5:d4:6c:50:3b:cc:17:87:40:f9:2e:21:07:fc:3c:b4:03:
dc:52:e0:57
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDxMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MjhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKENEQjQxRkM0MkNFNTA3
NzI1MTA1MjYxNUJCQkU3NTc3ODMyODEyNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbDXnt3nAegPwCvym3uBF4Q9GT7fpxRTCp4O5hvhzFrop5bLtw
AY8TjX7kGDJ2+x50iSaveeDHvp0t6YxZId6VCrwo+Z8Fd0tbewoYkPzwr1wMi4l9
FDuI3rNST7MOh3LWtEp4u/bLcaHIGkabXA+W8aOKB3iw8jR47fZbbHOBI6P8GUKc
xljwokPiEbL4XFvzLo3PKYkjKIff8fplZAJRGTC9wP5GWNdY5qvNXZpar2oaTjCO
JGSEVaZzv09t0MeyvNKNL2t1viN8DPQ1It35/8lPdVuH6jB1C4jvpBwOfmplRd/6
KxwiVN0v8AovEmwnhrc/JmqTKT0E9tblEDpxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUzbQfxCzlB3JRBSYVu751d4MoEmcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3piUWZ4Q3psQjNKUkJTWVZ1
NzUxZDRNb0VtYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
sJwwDQYJKoZIhvcNAQELBQADggEBACWrfyTP6dbweRf3GCkvpKfKk3HLIQTiH32M
uVb6GLmhpiRWqstMvGllAW6z++iW6bxtAKYKY3ts3musuM49clSI6Jk/1+zTz57u
Ws3oXN3fdX1nTEvVyL5QH8qvdxYoPrFLMTYpDMgE7wK4drCrVLAoy5PNz/R6pyAS
7eaI7bAm4OGaRIq997gLHcCMfEFcyvHEbeWjKmDLwVyn8gemL+XVzTk2Y5H+to8N
GVHtA813A2Qul3W+Dnq4xJiK5BQLodRxESKPvVwIGvnlOhdupFqcamXXW3mrGUeu
rx87SQtq50gZMtzZXE4dpbrV1GxQO8wXh0D5LiEH/Dy0A9xS4Fc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org