Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-W3Lj2La6Qsgz5cvYfzNhNnako8.roa
File: -W3Lj2La6Qsgz5cvYfzNhNnako8.roa (raw, json)
Hash identifier: 50t+PGR7N45yAqSQg2BnQlhlL2Yw2Qqnno8bIjf2twE=
Subject key identifier: F9:6D:CB:8F:62:DA:E9:0B:20:CF:97:2F:61:FC:CD:84:D9:DA:92:8F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 142D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-W3Lj2La6Qsgz5cvYfzNhNnako8.roa
Signing time: Sun 07 Feb 2021 11:57:40 +0000
ROA not before: Sun 07 Feb 2021 11:57:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5165 (0x142d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:57:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F96DCB8F62DAE90B20CF972F61FCCD84D9DA928F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:08:41:44:d3:cc:11:19:0f:03:d9:b1:82:
ad:6e:ba:cb:79:f3:49:9e:03:02:e1:66:53:b1:54:
76:f1:f9:23:b3:1e:11:34:03:fe:3a:07:12:52:f9:
96:88:7d:1b:12:f5:9a:90:98:e3:75:e3:a3:14:16:
c5:75:12:82:56:07:d3:bf:0a:95:f7:36:d5:46:fa:
e0:58:c2:a5:11:d3:c9:ce:fb:73:40:b0:89:76:4b:
52:d1:85:3f:53:cd:44:8a:7c:b1:93:33:c7:5d:f3:
45:3a:98:95:4a:b2:cb:0e:6c:70:4b:bf:c5:37:1b:
40:15:f8:62:4e:89:c7:28:10:b3:d0:85:de:59:16:
2d:5d:aa:fd:7d:c3:2e:14:e9:4c:d3:fe:36:96:ca:
01:b8:ad:16:ea:bc:e5:d0:ff:e5:c8:b3:01:24:2c:
9a:c6:88:06:47:83:48:ec:46:e3:53:e9:73:0b:b3:
c9:af:0e:05:cf:ad:2f:33:c3:05:ed:c4:08:76:d6:
29:34:72:d6:3e:d0:f4:5b:8d:c4:56:4f:a7:e3:cb:
a5:d4:bf:85:5d:a1:3a:c7:ba:c9:33:cd:98:f8:d0:
c5:d3:da:bd:30:89:90:4e:f5:87:0f:cf:51:c3:4f:
f4:ff:cd:57:16:56:33:cc:8d:b9:ed:30:c9:56:13:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6D:CB:8F:62:DA:E9:0B:20:CF:97:2F:61:FC:CD:84:D9:DA:92:8F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-W3Lj2La6Qsgz5cvYfzNhNnako8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.56.0/21
Signature Algorithm: sha256WithRSAEncryption
37:70:8b:98:f9:31:97:c4:90:d7:45:bd:66:a4:12:90:6c:b3:
22:7d:9d:40:42:02:4e:00:a6:1f:5d:8a:3e:c4:21:df:4c:32:
e5:dd:38:77:51:18:84:90:74:48:70:86:ce:7c:38:26:81:c2:
03:94:a0:23:7d:4a:bc:79:0c:be:8f:c3:2f:ca:fd:09:4d:e4:
8c:fc:b9:65:cb:63:14:f7:cc:54:26:5c:ad:bd:8a:2b:77:06:
2c:d6:32:20:87:54:2b:f1:1a:57:9c:e8:cd:bb:6f:66:32:6e:
67:47:72:1d:d0:8a:0d:d1:74:a2:a4:f9:16:93:61:78:f8:94:
1f:18:94:85:01:a4:7a:60:7e:a5:6c:b5:65:75:14:17:41:ac:
a0:36:a2:b8:1a:f0:0f:0b:a7:d3:cb:62:37:cc:91:26:5a:f9:
38:e2:dc:00:78:b5:2e:ef:88:25:4b:87:38:ea:4f:16:ad:fd:
10:1b:a8:06:cf:75:ee:c2:be:54:51:8b:80:43:2d:41:9f:5b:
f3:37:23:6c:ce:c7:1b:d7:17:3b:ec:72:85:50:12:f1:96:27:
07:f8:aa:c9:fc:5d:3f:39:cb:bb:1d:c4:07:6b:9c:a2:ec:a8:
29:fb:d5:0f:0c:8b:e0:d5:04:13:14:a8:af:ad:75:b0:f0:0b:
40:a1:7b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:07 2023 by rpki-client on console-ams.rpki-client.org