Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-cZnCcNpo5ecnuzj5_vyacdfhdc.roa
File: -cZnCcNpo5ecnuzj5_vyacdfhdc.roa (raw, json)
Hash identifier: UpsFnEBrg8VbwH02FA4HjMn5tgqDwopcsZQHrUekDXM=
Subject key identifier: F9:C6:67:09:C3:69:A3:97:9C:9E:EC:E3:E7:FB:F2:69:C7:5F:85:D7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 16A7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-cZnCcNpo5ecnuzj5_vyacdfhdc.roa
Signing time: Sun 07 Feb 2021 12:13:26 +0000
ROA not before: Sun 07 Feb 2021 12:13:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5799 (0x16a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:13:26 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F9C66709C369A3979C9EECE3E7FBF269C75F85D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:76:41:45:2f:1c:6f:be:53:cb:13:f7:a0:
4c:d5:bb:5c:86:86:ed:3a:8b:a0:53:7f:fb:2d:cb:
d7:61:e9:2e:3a:ba:ff:dc:45:15:38:ea:d0:97:72:
c6:1e:2e:6f:e8:7a:8f:58:65:e9:bf:7d:af:2d:52:
9b:5a:7a:aa:c3:de:84:aa:15:f4:96:e9:41:85:07:
63:5d:2d:5c:76:b3:ae:f3:25:7f:b3:44:c7:43:39:
47:16:69:85:d6:80:75:e8:28:d2:da:3b:8d:17:9b:
04:f0:ea:ba:cf:35:6f:51:ac:88:fd:a4:01:82:9e:
53:0d:d4:27:7b:f8:68:90:5d:e9:bd:28:3b:9a:79:
1a:1c:3e:ea:db:18:34:c8:77:f8:f7:68:35:df:bb:
39:99:c4:26:4b:ef:69:6b:dd:9f:67:b1:21:cb:ec:
80:4d:6b:c7:14:0c:ba:c1:eb:ba:2f:1e:8b:39:4d:
c3:9a:b8:3e:ce:1b:7f:12:53:ec:3a:2a:64:33:17:
13:bd:ed:ae:03:61:db:06:1c:1f:6d:62:bf:b8:03:
98:34:0f:3f:d3:ee:69:6a:f2:b9:fd:84:12:ba:68:
ab:3e:e8:ec:8b:75:81:50:15:3d:4f:62:88:66:8d:
67:31:8d:bf:18:1e:a8:4f:10:53:1d:23:8a:da:df:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C6:67:09:C3:69:A3:97:9C:9E:EC:E3:E7:FB:F2:69:C7:5F:85:D7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-cZnCcNpo5ecnuzj5_vyacdfhdc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.216.0/22
Signature Algorithm: sha256WithRSAEncryption
66:86:af:5e:54:40:a3:08:84:76:82:ce:3c:e6:ae:3c:99:89:
f6:cc:0b:8d:4e:14:84:d5:9a:22:d0:24:78:1b:88:b8:a0:8a:
ab:7a:c3:ec:c3:e9:54:10:94:db:4b:cf:3a:5e:c7:40:e0:47:
b1:5f:da:a8:59:29:c6:a8:fe:9d:6e:ef:e5:06:35:f7:8c:76:
35:a9:49:06:d7:d1:2b:cd:29:e6:94:eb:2e:d7:00:f4:b1:31:
32:2e:bb:3c:35:6d:62:f3:64:68:bc:1d:8a:b6:33:e7:98:7b:
60:69:d9:13:e7:a6:b3:de:c8:0b:aa:4f:02:57:d5:ae:e2:cf:
d8:0f:26:c9:81:ba:79:9f:ef:54:5f:c1:a4:e0:85:3a:b8:32:
23:91:2f:0d:9f:2b:45:94:52:e8:c3:c6:c8:d0:ae:aa:26:ff:
1b:09:27:9b:04:f7:b6:15:31:1d:da:b7:16:98:fc:fc:d2:b6:
8a:e0:0b:2f:14:d6:d5:2d:ad:9b:5e:30:a0:a8:b8:de:d6:c8:
c8:a0:62:e8:77:b2:63:1c:9e:30:85:4f:0f:1a:02:04:59:62:
da:37:c1:3d:ab:c0:47:97:04:8b:58:f2:14:7a:89:71:d2:5a:
4a:98:77:e2:16:b4:02:53:9e:8f:77:18:fa:eb:35:43:61:b9:
36:88:fa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:19 2023 by rpki-client on console-fra.rpki-client.org