Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1LSHUbWCkob8rnQPSLixuW7iuiY.roa
File: 1LSHUbWCkob8rnQPSLixuW7iuiY.roa (raw, json)
Hash identifier: Hy/VcGBdHKk36dmgZWmEilxEu61D6EPoymClrHImbE8=
Subject key identifier: D4:B4:87:51:B5:82:92:86:FC:AE:74:0F:48:B8:B1:B9:6E:E2:BA:26
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1LSHUbWCkob8rnQPSLixuW7iuiY.roa
Signing time: Thu 15 Sep 2022 02:46:03 +0000
ROA not before: Thu 15 Sep 2022 02:46:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 180.176.184.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D4B48751B5829286FCAE740F48B8B1B96EE2BA26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:49:19:ec:f3:00:40:d8:c9:61:11:96:a5:
97:65:f0:53:ea:12:8c:09:ed:02:e5:f8:86:cb:ba:
7f:be:35:da:d6:92:20:b9:d4:05:63:ca:47:0e:d3:
51:a0:20:e1:69:0c:17:1c:2f:0d:16:69:b8:c7:18:
11:08:dc:84:cb:08:6c:aa:4a:0b:ee:fe:38:c7:e6:
49:a4:54:65:b4:d3:8c:d9:b3:c5:dc:98:a2:66:79:
6e:53:f8:5f:cb:56:e3:a3:fb:8a:20:ba:2d:e2:2c:
b1:92:03:dd:a6:ad:64:30:e4:c1:14:aa:a9:ba:55:
6b:e1:ed:3f:44:65:c5:50:75:2a:d0:2a:61:9e:71:
1a:5b:54:f1:be:a3:f2:af:f2:f2:bc:a2:22:ea:67:
58:c3:e1:f6:61:20:ce:da:24:6a:7d:06:90:54:a9:
69:7c:ef:47:bd:af:2f:51:0c:db:10:bf:07:46:19:
06:de:77:d2:27:ca:f7:14:b5:67:3e:48:b5:cb:13:
8c:d1:21:cb:0a:90:cb:e2:de:8c:21:b5:f0:b4:fb:
1b:08:d6:84:af:9c:dd:97:23:17:10:60:86:29:b8:
f4:30:58:78:31:30:9c:a4:28:9f:74:a0:bf:11:fc:
53:d2:5e:b9:95:52:eb:8a:46:04:0b:8b:7e:1a:87:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B4:87:51:B5:82:92:86:FC:AE:74:0F:48:B8:B1:B9:6E:E2:BA:26
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1LSHUbWCkob8rnQPSLixuW7iuiY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.184.0/21
Signature Algorithm: sha256WithRSAEncryption
53:42:62:68:0d:e6:9d:57:64:70:61:f8:83:2b:05:67:36:32:
a2:46:48:70:c0:78:c5:9c:b5:bf:73:a7:75:bb:4e:aa:7d:cc:
fc:44:b4:67:d8:d2:e0:e6:e7:57:c6:56:dc:33:5a:3b:b3:a9:
68:ca:e5:0f:83:34:38:58:d8:04:af:f6:d1:84:08:de:7f:6b:
5d:c1:7b:eb:37:6d:5a:9b:88:ba:56:f4:3a:63:bc:89:72:d8:
60:49:1f:e0:0c:a2:4c:c7:f1:a7:a6:cb:3c:82:7e:b7:ab:2d:
2a:83:0e:1a:b9:b1:9b:f9:f9:ba:b2:02:66:78:3b:c0:68:0c:
cd:b8:49:f6:e9:74:19:f8:9d:78:11:ca:e4:1c:11:68:ac:b5:
81:7e:b0:b4:9e:83:b3:09:9a:ca:38:83:98:5a:2f:cb:64:77:
57:c0:d3:e6:cf:f4:f7:16:21:79:5b:14:d8:d0:f0:a2:be:67:
57:ab:7c:79:30:69:1a:85:c7:40:f4:11:05:c5:55:86:a9:4a:
16:c9:41:35:7b:5e:66:46:1e:7a:91:ff:76:90:e1:99:0c:f0:
af:0a:ed:39:de:33:10:cf:0c:f2:1d:f6:5b:dc:63:b6:ad:27:
39:03:66:54:61:c1:72:13:d7:cd:5a:34:97:3a:0e:65:a0:af:
fc:19:c2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org