Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zx2aN-MOqD_v5gXP2JyzmZxb9T0.roa
File: zx2aN-MOqD_v5gXP2JyzmZxb9T0.roa (raw, json)
Hash identifier: smgdF1G12uEwIcLN4pEv7YWG7KDOXw42p+/qe7Q89o0=
Subject key identifier: CF:1D:9A:37:E3:0E:A8:3F:EF:E6:05:CF:D8:9C:B3:99:9C:5B:F5:3D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FB0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zx2aN-MOqD_v5gXP2JyzmZxb9T0.roa
Signing time: Wed 21 Sep 2022 09:45:06 +0000
ROA not before: Wed 21 Sep 2022 09:45:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.228.0/22 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8112 (0x1fb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 21 09:45:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CF1D9A37E30EA83FEFE605CFD89CB3999C5BF53D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:b6:82:20:30:cb:bb:ac:d6:14:7f:7f:c3:
00:9f:d6:8a:3f:fa:cb:4b:e1:ba:23:2e:00:86:f7:
4c:ec:8e:7f:e0:7a:4f:4b:c2:4c:7b:5d:00:c9:bb:
41:81:9b:9a:40:f3:42:a5:6a:2e:5c:c1:fa:b0:8d:
28:85:7f:11:63:cb:e0:db:59:d5:06:72:a8:84:35:
c2:a2:81:f0:0b:d0:8d:ae:63:58:70:d5:bf:d7:e8:
b2:c8:ca:d3:75:b8:a3:45:f9:14:73:47:e9:e3:f2:
3a:39:5b:86:8c:d0:8a:9f:bb:8c:ce:97:9c:18:a5:
fb:58:59:80:82:a6:9f:20:19:77:10:f0:05:b8:d5:
c0:d5:ae:fc:8c:6f:c0:39:92:a7:ae:76:ec:63:e9:
bb:5a:b0:87:71:d1:aa:31:0e:01:e2:38:1e:49:b7:
ac:d3:fa:02:e8:1d:97:b2:90:4a:25:3b:f1:0f:f0:
97:4d:20:ee:9c:c6:8b:25:f8:06:62:d2:28:61:fa:
76:f8:68:5a:01:3e:92:54:0d:65:80:d2:ad:29:b4:
9d:a7:cc:70:4b:a9:a9:16:14:63:58:ff:f0:a6:86:
0b:5d:31:1d:a4:89:9a:38:20:c4:49:fd:b5:b9:24:
14:a6:bb:18:b1:9e:13:a4:82:65:9a:5c:8d:cf:86:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1D:9A:37:E3:0E:A8:3F:EF:E6:05:CF:D8:9C:B3:99:9C:5B:F5:3D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zx2aN-MOqD_v5gXP2JyzmZxb9T0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.228.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:ab:16:38:0c:b0:06:f9:83:3c:41:16:61:46:1b:48:4f:4f:
f0:18:35:07:66:18:74:af:c1:33:4d:bc:9b:6a:39:a4:0f:25:
e4:44:53:da:9d:bc:55:c8:a7:55:de:db:4d:3c:16:cf:e2:8b:
67:3f:eb:0d:94:98:07:c7:c2:2b:5a:f8:ad:b9:e0:76:dc:c7:
0b:c7:e2:43:6b:f2:9d:a0:2f:e2:05:fd:b9:98:96:34:d5:3d:
56:40:3b:41:ff:4d:24:fa:c9:ee:c1:a1:83:79:ec:41:4e:ee:
cb:89:3d:b2:29:d5:28:2e:95:84:49:68:d7:9c:4f:73:91:da:
f4:13:33:0c:b2:7c:29:ef:38:f6:8a:1f:0d:77:ed:17:5c:6c:
38:55:8e:46:a7:8b:66:40:35:16:72:f8:4a:db:54:e7:bb:8c:
8e:a8:84:68:ec:4a:23:89:fb:9b:93:b1:b5:de:85:37:dd:81:
68:a2:e7:3a:77:a5:ac:90:02:2a:0d:ef:e3:a3:cc:6f:da:60:
33:bd:c5:65:d7:a5:b1:c1:8a:b6:e5:4f:23:5c:dc:3f:22:dd:
06:bd:a3:87:cd:7b:2d:7f:e1:03:0e:29:1b:33:9e:d2:09:ea:
56:ca:be:db:6f:21:b3:6b:b8:7c:50:da:e8:48:89:f2:61:34:
b6:18:65:bb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH7AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MjEw
OTQ1MDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKENGMUQ5QTM3RTMwRUE4
M0ZFRkU2MDVDRkQ4OUNCMzk5OUM1QkY1M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKALaCIDDLu6zWFH9/wwCf1oo/+stL4bojLgCG90zsjn/gek9L
wkx7XQDJu0GBm5pA80Klai5cwfqwjSiFfxFjy+DbWdUGcqiENcKigfAL0I2uY1hw
1b/X6LLIytN1uKNF+RRzR+nj8jo5W4aM0Iqfu4zOl5wYpftYWYCCpp8gGXcQ8AW4
1cDVrvyMb8A5kqeuduxj6btasIdx0aoxDgHiOB5Jt6zT+gLoHZeykEolO/EP8JdN
IO6cxosl+AZi0ihh+nb4aFoBPpJUDWWA0q0ptJ2nzHBLqakWFGNY//CmhgtdMR2k
iZo4IMRJ/bW5JBSmuxixnhOkgmWaXI3PhiWTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUzx2aN+MOqD/v5gXP2JyzmZxb9T0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3p4MmFOLU1PcURfdjVnWFAy
Snl6bVp4YjlUMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
seQwDQYJKoZIhvcNAQELBQADggEBAKSrFjgMsAb5gzxBFmFGG0hPT/AYNQdmGHSv
wTNNvJtqOaQPJeREU9qdvFXIp1Xe2008Fs/ii2c/6w2UmAfHwita+K254HbcxwvH
4kNr8p2gL+IF/bmYljTVPVZAO0H/TST6ye7BoYN57EFO7suJPbIp1SgulYRJaNec
T3OR2vQTMwyyfCnvOPaKHw137RdcbDhVjkani2ZANRZy+ErbVOe7jI6ohGjsSiOJ
+5uTsbXehTfdgWii5zp3payQAioN7+OjzG/aYDO9xWXXpbHBirblTyNc3D8i3Qa9
o4fNey1/4QMOKRszntIJ6lbKvttvIbNruHxQ2uhIifJhNLYYZbs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org