Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zkKqx4lfMZkzeiYuRc2_BJeomIQ.roa
File: zkKqx4lfMZkzeiYuRc2_BJeomIQ.roa (raw, json)
Hash identifier: v5wGEIDiLmAf6OVdLIY/OSzDd/bDvo8cygHJ2pOxekY=
Subject key identifier: CE:42:AA:C7:89:5F:31:99:33:7A:26:2E:45:CD:BF:04:97:A8:98:84
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E28
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zkKqx4lfMZkzeiYuRc2_BJeomIQ.roa
Signing time: Tue 29 Sep 2020 09:55:24 +0000
ROA not before: Tue 29 Sep 2020 09:55:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3624 (0xe28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:24 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CE42AAC7895F3199337A262E45CDBF0497A89884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:73:96:79:c8:59:b2:e0:a4:96:04:d7:0d:
16:08:fc:2f:9c:07:ff:0b:fc:67:3c:00:45:07:e7:
8d:51:1c:08:be:51:6a:cc:a8:ec:18:e8:1e:12:8c:
fd:42:84:1d:17:c3:7a:62:57:43:b6:25:fc:f7:7f:
21:eb:08:77:05:88:cd:00:64:77:8a:88:e4:5d:cc:
62:ea:b0:66:f3:6a:30:88:9d:2d:3c:a4:df:94:5d:
b5:7d:30:62:a9:f4:d2:e5:34:30:ff:d1:5a:24:9e:
56:b3:9b:18:ef:c8:c9:6c:b5:92:63:52:d5:1a:16:
97:c0:5c:f0:a3:49:61:e7:71:54:d6:aa:f5:6d:53:
16:ec:29:76:e2:73:1c:e6:ee:3a:19:24:8c:23:59:
48:03:77:0d:81:f0:fb:db:b1:bb:d9:88:70:ca:5e:
a8:20:3d:67:4e:2d:86:7a:d6:df:83:1b:04:a2:f0:
34:5f:42:58:8d:51:c7:c5:11:5a:af:5a:05:c6:5f:
45:42:69:36:4f:d1:4c:a5:e8:f1:9a:4b:34:e0:18:
df:16:35:fe:a7:34:bf:e6:1c:a6:89:78:26:83:d0:
1a:a8:3d:6d:f5:e1:3c:11:59:88:ae:dd:b8:a4:e8:
46:49:18:94:ab:15:21:7a:73:67:f7:b2:4c:0f:8b:
92:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:42:AA:C7:89:5F:31:99:33:7A:26:2E:45:CD:BF:04:97:A8:98:84
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zkKqx4lfMZkzeiYuRc2_BJeomIQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:da:ed:49:ad:5e:d6:07:77:f3:19:3f:a3:69:a7:09:da:7c:
5f:6c:7d:d1:5c:15:58:90:03:81:89:f7:11:37:c0:d1:9b:6b:
0f:3b:fd:9b:2a:70:a9:52:02:02:df:c5:fe:98:fb:04:3f:55:
1c:1f:bd:97:87:e9:bb:75:b5:6f:db:77:f8:27:9d:99:25:23:
4b:ef:11:87:26:b6:af:56:9c:f5:c3:8f:69:95:f0:b9:c8:80:
00:22:e0:14:2c:0d:17:1e:a2:27:e0:49:89:c6:ae:f4:71:52:
19:29:6a:24:68:33:5d:a0:0b:8e:a1:3c:b8:e1:f3:c7:3d:15:
6b:4b:79:ca:fe:19:6b:81:95:a2:e4:bd:4f:a0:15:94:9b:38:
51:09:85:ad:22:0d:c7:01:67:4d:e0:01:61:0c:cb:a2:eb:0b:
28:d3:f2:36:7c:8a:22:e0:f5:6c:e0:d5:ac:62:4b:3d:e5:7f:
fc:5b:cf:95:18:b3:d2:29:4a:27:91:e4:5a:90:90:76:be:1d:
29:89:8c:22:c6:38:2b:c0:c6:b5:67:b1:84:f1:7f:d4:04:af:
e7:c8:5a:7e:87:25:98:ee:a3:1a:12:88:e0:52:2b:3f:cb:5a:
70:d8:af:10:14:33:52:9e:e7:a6:7f:75:59:29:61:2b:3f:d6:
26:f9:ed:37
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDigwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MjRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKENFNDJBQUM3ODk1RjMx
OTkzMzdBMjYyRTQ1Q0RCRjA0OTdBODk4ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDc7XOWechZsuCklgTXDRYI/C+cB/8L/Gc8AEUH541RHAi+UWrM
qOwY6B4SjP1ChB0Xw3piV0O2Jfz3fyHrCHcFiM0AZHeKiORdzGLqsGbzajCInS08
pN+UXbV9MGKp9NLlNDD/0VoknlazmxjvyMlstZJjUtUaFpfAXPCjSWHncVTWqvVt
UxbsKXbicxzm7joZJIwjWUgDdw2B8PvbsbvZiHDKXqggPWdOLYZ61t+DGwSi8DRf
QliNUcfFEVqvWgXGX0VCaTZP0Uyl6PGaSzTgGN8WNf6nNL/mHKaJeCaD0BqoPW31
4TwRWYiu3bik6EZJGJSrFSF6c2f3skwPi5K3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUzkKqx4lfMZkzeiYuRc2/BJeomIQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3prS3F4NGxmTVpremVpWXVS
YzJfQkplb21JUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0
sBAwDQYJKoZIhvcNAQELBQADggEBAA7a7UmtXtYHd/MZP6NppwnafF9sfdFcFViQ
A4GJ9xE3wNGbaw87/ZsqcKlSAgLfxf6Y+wQ/VRwfvZeH6bt1tW/bd/gnnZklI0vv
EYcmtq9WnPXDj2mV8LnIgAAi4BQsDRceoifgSYnGrvRxUhkpaiRoM12gC46hPLjh
88c9FWtLecr+GWuBlaLkvU+gFZSbOFEJha0iDccBZ03gAWEMy6LrCyjT8jZ8iiLg
9Wzg1axiSz3lf/xbz5UYs9IpSieR5FqQkHa+HSmJjCLGOCvAxrVnsYTxf9QEr+fI
Wn6HJZjuoxoSiOBSKz/LWnDYrxAUM1Ke56Z/dVkpYSs/1ib57Tc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org