Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-fsH5FAwqvYQbpFlu0VAWtejdJ0.roa
File: -fsH5FAwqvYQbpFlu0VAWtejdJ0.roa (raw, json)
Hash identifier: sMfr+1hWwAP39DqVsj+10bLbcZnn8XZEMbJZ/Vm4zi4=
Subject key identifier: F9:FB:07:E4:50:30:AA:F6:10:6E:91:65:BB:45:40:5A:D7:A3:74:9D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0CCF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-fsH5FAwqvYQbpFlu0VAWtejdJ0.roa
Signing time: Tue 29 Sep 2020 09:53:50 +0000
ROA not before: Tue 29 Sep 2020 09:53:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3279 (0xccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:53:50 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F9FB07E45030AAF6106E9165BB45405AD7A3749D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e8:1d:e5:19:90:aa:f4:2a:ae:9d:71:f8:c9:
55:5f:d5:23:90:cd:bf:db:27:02:d3:75:62:92:e0:
36:54:c0:97:a6:80:42:a5:53:c6:0d:64:5a:78:1c:
d6:4e:aa:0a:93:c5:e7:92:8b:c6:d5:5a:d7:19:82:
b1:f0:b8:b8:86:81:c2:7c:9a:20:ff:09:d0:08:22:
e2:08:e4:b6:3e:01:84:64:07:ee:26:77:3a:10:5d:
b6:d0:f8:2e:f0:d4:31:f4:19:74:41:ae:05:6f:56:
4a:42:70:8e:54:2e:d5:5f:24:58:7c:13:76:9c:f9:
88:f3:36:20:b1:79:30:3c:19:57:4c:b4:1f:e9:84:
ca:d5:62:8b:74:7f:e7:45:24:f9:fb:dd:e7:ab:b9:
0f:bf:a6:c2:c0:2c:cc:f1:6e:fa:30:6c:bc:1a:aa:
eb:a9:fc:79:7c:a8:eb:26:f1:48:1f:04:bd:e2:87:
2b:15:58:19:68:af:9a:55:da:5e:aa:6f:24:57:5d:
83:11:9d:e7:75:fa:fa:85:56:84:90:db:e4:44:1a:
11:36:70:91:64:cf:e5:72:ff:d2:62:3b:11:63:83:
5c:3d:40:3f:2f:b7:b4:d2:17:77:95:cd:3e:89:59:
9d:2c:58:44:17:23:84:0a:c3:66:96:75:eb:6c:db:
92:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FB:07:E4:50:30:AA:F6:10:6E:91:65:BB:45:40:5A:D7:A3:74:9D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-fsH5FAwqvYQbpFlu0VAWtejdJ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.151.0/24
Signature Algorithm: sha256WithRSAEncryption
97:10:0b:ef:4f:0d:d2:48:69:86:5e:ca:c5:3c:c7:af:6e:f3:
24:77:1d:04:e1:d8:26:48:57:ec:36:cd:56:30:60:44:c9:ad:
d4:ea:fc:77:3a:d8:47:f8:81:be:ac:bc:b6:f7:63:f2:9d:fd:
73:e6:f0:93:8d:20:d9:b3:73:a7:60:97:d6:d3:b9:19:f3:2b:
fe:5b:0c:4d:b5:b8:90:12:59:4c:4c:bf:a4:2c:f6:41:ff:b1:
ed:a4:1a:1a:11:de:8b:84:66:c0:02:ec:bd:80:27:00:35:d4:
f1:7e:aa:f7:c4:63:7e:05:45:3c:cd:cd:27:6f:af:2a:e4:fc:
6e:e5:d6:38:93:6a:47:7c:42:22:f9:ce:fc:9d:a0:be:ea:ef:
f5:9d:98:35:98:2f:30:d9:a7:b5:d9:5d:b4:e4:78:57:fc:fc:
4c:bd:05:1c:1a:d2:eb:b4:77:f7:ef:2d:9d:60:30:be:60:e5:
a5:9d:13:74:91:ca:c0:9a:30:58:5e:0e:e6:58:83:f8:3a:e3:
d4:3d:71:0d:d4:74:da:e6:c3:eb:bd:70:32:7e:58:fc:7c:e4:
28:ca:08:5c:e8:4e:13:13:cc:ec:e1:3c:9a:68:ae:8e:4e:6a:
c3:2c:6e:1f:21:99:cf:7c:fe:f1:10:ba:74:71:fb:ad:f3:f8:
0d:31:2b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org