Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0Dz4nzpA5FHHOirDLFQCU3ExQ7k.roa
File: 0Dz4nzpA5FHHOirDLFQCU3ExQ7k.roa (raw, json)
Hash identifier: 7UFsbUdSiiVPBtixcXjr8t6pZz596fMKoKmBr6GH05g=
Subject key identifier: D0:3C:F8:9F:3A:40:E4:51:C7:3A:2A:C3:2C:54:02:53:71:31:43:B9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2206
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0Dz4nzpA5FHHOirDLFQCU3ExQ7k.roa
Signing time: Fri 25 Nov 2022 04:40:41 +0000
ROA not before: Fri 25 Nov 2022 04:40:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8710 (0x2206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D03CF89F3A40E451C73A2AC32C540253713143B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:1b:5f:a0:3e:ec:46:56:4c:d3:c6:9a:be:
a1:2b:be:e0:53:ba:9e:d5:a3:45:b9:9b:70:d0:1d:
e3:de:65:84:73:4a:3d:b7:5b:49:95:bf:3a:cd:87:
4d:6e:da:57:c1:04:b9:d5:3d:4e:8a:fa:a7:0d:fe:
70:a0:2d:43:52:b8:92:40:0e:0c:ba:c8:fe:1f:b5:
93:e5:10:a8:fc:b3:93:e2:a0:73:82:62:9e:5d:5d:
57:e0:52:d8:02:ae:db:53:11:05:1f:cb:e9:fc:f8:
14:c0:e6:22:ee:fa:58:c6:c5:9d:00:b5:1e:6e:4f:
4a:56:2a:21:fd:a2:6c:fe:87:8f:e4:f3:1b:e6:35:
3a:93:d6:4b:f4:1c:8d:25:a3:61:80:bd:92:20:cf:
cd:58:62:51:6f:96:a3:e9:e3:25:93:a2:81:1d:f0:
13:a0:5e:50:3c:e8:56:ba:39:f7:75:21:7b:62:c5:
79:1d:c5:2f:52:f3:6c:7e:4e:b3:68:fc:18:36:72:
cd:ea:33:59:e7:90:23:01:51:a8:59:12:3f:27:06:
02:7b:cb:d8:d0:b9:06:03:9b:bc:db:5e:40:ee:e5:
d1:47:81:9b:c7:da:f3:da:05:81:50:52:f6:bb:8c:
bf:d5:bc:4c:f9:b1:4d:04:7c:0d:9a:2f:86:fc:ab:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3C:F8:9F:3A:40:E4:51:C7:3A:2A:C3:2C:54:02:53:71:31:43:B9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0Dz4nzpA5FHHOirDLFQCU3ExQ7k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.96.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:40:6c:c5:e4:6b:8e:1b:02:c1:e3:eb:40:f1:0e:13:41:67:
2d:9c:92:31:e6:d1:3c:b1:61:a2:85:bd:77:d6:db:e4:d1:bb:
a0:3c:3d:a5:76:3f:b0:46:56:54:bd:8a:2d:62:30:02:e4:a4:
de:15:5b:30:d5:e3:2f:92:a2:e0:0f:b2:ab:74:a2:e5:e9:34:
ac:da:ef:55:f0:29:05:58:c3:8f:ed:9a:c9:ee:87:1f:6b:37:
c5:cf:1f:30:6a:10:c6:e9:4d:a6:84:2b:37:3e:4c:b0:b7:d8:
7f:b5:82:36:5c:07:ef:6a:bc:5a:81:28:7d:2a:b0:6a:d6:b7:
27:9b:67:4e:7a:e9:dd:32:2f:78:75:03:0a:41:5f:cd:82:d1:
f9:e6:c6:ec:15:48:46:cd:08:79:08:71:d2:70:5b:a6:f4:90:
ca:30:24:19:cd:fa:3b:39:ca:ff:b8:92:d6:0b:58:00:ac:32:
51:9f:c5:3c:d7:26:76:df:b0:bf:2e:62:17:3f:66:ab:2e:12:
6c:bd:ff:49:1d:13:7e:f6:95:a4:67:51:ab:03:25:67:a0:17:
11:b8:73:e3:04:9e:e3:16:08:12:21:e3:2c:cf:77:20:dd:a1:
8f:fd:0f:f3:f5:5a:45:5e:8a:1f:98:ed:da:81:8c:3a:c6:7e:
78:f0:9b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org