Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-lbOgXGM7WD3WJ06uTB8Mqe-PyY.roa
File: -lbOgXGM7WD3WJ06uTB8Mqe-PyY.roa (raw, json)
Hash identifier: X90ILk1AxnRBOrex/VcLiqp1T0cARu9NHAyK7Q/MNMA=
Subject key identifier: FA:56:CE:81:71:8C:ED:60:F7:58:9D:3A:B9:30:7C:32:A7:BE:3F:26
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2035
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-lbOgXGM7WD3WJ06uTB8Mqe-PyY.roa
Signing time: Fri 25 Nov 2022 04:38:27 +0000
ROA not before: Fri 25 Nov 2022 04:38:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8245 (0x2035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FA56CE81718CED60F7589D3AB9307C32A7BE3F26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:19:91:e3:6a:f6:65:06:56:dd:f9:9c:75:
1f:af:fc:a3:70:fe:cc:84:4c:b3:2e:20:91:56:90:
ac:ac:c2:34:ac:e7:03:2b:8b:0c:fb:e7:e0:f8:6a:
f5:a6:03:78:a3:f2:08:9f:2a:ae:f9:53:4b:01:b6:
46:fe:a2:db:5d:ca:df:12:12:f7:74:61:47:a3:41:
c7:e3:c8:69:d5:7d:57:45:b2:6f:90:62:cf:b0:c3:
04:48:d1:ad:45:10:14:a6:72:ac:49:b7:46:9d:bb:
64:89:bf:54:27:72:b4:96:d5:3e:40:ac:85:b6:ce:
75:1c:9e:a4:1a:84:af:71:af:bf:f8:b8:f9:65:89:
9e:8d:30:d6:15:88:3f:01:40:35:16:5a:5c:d4:25:
17:bf:36:8f:d5:6d:79:cf:03:3a:1e:d7:b5:09:2d:
e9:2a:4a:b5:26:9f:3d:f3:dc:ef:1b:e3:f6:bf:1f:
e5:78:7b:ca:7c:66:ae:60:2c:ad:ca:79:e3:0c:54:
eb:38:ba:c1:5a:5e:bf:54:cd:75:73:fd:30:7f:4e:
b6:79:2d:86:b1:cf:7c:1b:6b:35:b7:10:b0:9c:fa:
1e:31:71:a3:f7:b1:ec:32:81:d0:98:69:d1:41:10:
d3:49:dd:72:b5:ac:37:ca:84:7e:7f:b5:41:d2:c9:
e2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:56:CE:81:71:8C:ED:60:F7:58:9D:3A:B9:30:7C:32:A7:BE:3F:26
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-lbOgXGM7WD3WJ06uTB8Mqe-PyY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.64.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:54:cc:f8:07:9b:1d:cf:b4:46:ac:6f:97:d1:a2:1d:14:d0:
95:54:57:b8:5b:c5:bf:08:d6:13:88:83:bc:57:fc:17:3e:d5:
01:d7:31:4b:3f:8f:21:48:f9:da:16:85:9b:b9:97:9c:0f:40:
18:0b:0c:f8:36:8a:e4:29:ad:8c:1a:8e:c1:26:54:f0:95:3d:
f7:84:0f:76:c6:41:a1:2d:22:cd:ab:85:99:31:22:95:5e:18:
48:f4:30:ee:d2:5d:e5:78:ea:0e:05:55:3a:23:01:11:19:a4:
7b:f7:0f:e5:b1:92:00:a5:60:06:ea:a0:19:4c:85:0c:c8:dc:
34:f3:49:22:e9:6a:8c:fd:82:7f:e0:1c:10:7f:b5:47:7c:25:
22:2d:02:48:eb:53:4b:2c:6f:71:d4:57:36:ee:ee:36:f5:b7:
3b:c1:f0:f5:9c:e1:ea:52:a4:58:48:8e:3a:79:1f:cf:d3:38:
50:34:42:67:29:ec:3a:58:a6:45:69:5a:aa:3d:09:0a:36:06:
81:99:4c:73:33:a3:3c:33:20:49:5e:21:6b:18:f2:98:f3:1f:
67:1b:c2:15:73:a5:bc:f5:c4:97:9e:1b:ce:1c:82:fa:c3:85:
a5:e5:07:97:4d:dd:38:23:a3:4a:12:3e:79:60:7e:70:3e:a1:
b8:ed:c7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org