Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1eBdD7Rjm5R5PtBvRSaO_68Ls3A.roa
File: 1eBdD7Rjm5R5PtBvRSaO_68Ls3A.roa (raw, json)
Hash identifier: DStXZC+r0JRVdHXQa1Wpf9EV5fd4vawnRz48qzRNciE=
Subject key identifier: D5:E0:5D:0F:B4:63:9B:94:79:3E:D0:6F:45:26:8E:FF:AF:0B:B3:70
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1eBdD7Rjm5R5PtBvRSaO_68Ls3A.roa
Signing time: Thu 15 Sep 2022 02:54:06 +0000
ROA not before: Thu 15 Sep 2022 02:54:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.236.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:54:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D5E05D0FB4639B94793ED06F45268EFFAF0BB370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:21:80:12:28:66:1a:5a:40:98:2a:41:76:ec:
98:cf:65:c8:64:3d:33:f0:0f:18:45:9e:db:7e:67:
38:64:07:01:81:a5:b3:51:b7:96:dd:bc:7e:6e:01:
af:d9:a3:be:3c:52:fb:c1:2e:c3:de:c6:80:1c:f5:
9d:ed:79:9c:c7:c4:dd:7b:4b:2e:e2:b9:05:2d:5e:
75:60:8d:89:d5:a9:3f:9f:bf:27:39:9c:af:40:73:
66:f6:65:45:0c:24:7e:4a:87:60:e3:08:ef:5c:50:
a9:f5:50:79:0b:f2:00:83:80:c3:b5:93:22:3e:9f:
57:59:2d:45:bf:3f:f2:a6:0c:91:e8:cc:cc:74:99:
45:39:20:02:76:84:a5:f6:27:d8:2b:50:16:57:e0:
87:54:90:10:a7:72:d3:40:f6:1b:08:9c:d3:ea:4e:
a3:e2:31:45:92:6d:cc:21:8a:56:5f:da:02:61:64:
0c:e3:14:79:87:63:39:bc:7b:4d:77:42:fa:60:c6:
a0:0f:96:79:45:59:82:2f:a6:90:12:4b:cb:8a:11:
f3:bf:79:61:6e:b6:0c:c2:d9:7b:cc:c1:8a:84:b0:
1d:34:17:31:7e:a4:f1:a8:01:38:e6:fd:5f:45:d6:
1e:0f:b4:cc:97:2f:e5:6c:b2:b7:5b:10:21:fa:c9:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E0:5D:0F:B4:63:9B:94:79:3E:D0:6F:45:26:8E:FF:AF:0B:B3:70
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1eBdD7Rjm5R5PtBvRSaO_68Ls3A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.236.0/23
Signature Algorithm: sha256WithRSAEncryption
00:89:18:1e:17:01:df:ab:c3:e8:18:10:9f:de:83:a8:c4:29:
f5:7d:43:a0:2e:58:67:b9:8b:d2:6c:e1:9c:72:f2:0d:cc:69:
c9:b5:b4:b9:ea:c7:ec:1e:83:0f:ed:b7:7d:2d:ed:9d:43:1c:
2c:4e:d4:2d:0d:14:a5:58:72:ef:95:c1:b0:df:e3:7c:45:60:
ab:59:18:e6:c3:0e:c9:24:38:52:cc:67:87:ec:00:a0:05:ff:
79:5c:30:f7:87:43:b2:c6:d9:f9:40:b8:f8:24:b8:f5:33:81:
02:54:e1:1a:6d:73:1a:e7:62:b3:c5:84:b6:d0:9c:9b:ef:a7:
5a:48:1b:5f:b3:ba:e3:40:ed:89:7e:4a:b0:ab:d7:28:e4:41:
65:eb:88:11:cb:d2:c1:e0:f1:af:a9:12:47:46:74:35:87:63:
86:5d:64:d2:07:e5:2b:73:d2:18:23:0a:a1:f1:46:2f:23:76:
d4:e7:b7:33:f7:71:8e:91:b5:86:ca:f4:0e:ab:27:07:a0:0e:
4f:15:91:96:0b:c4:1c:f5:bd:da:54:2f:d1:da:2f:43:55:fa:
90:a6:84:17:fa:d3:82:0b:97:79:8b:ef:63:d0:c7:d2:61:2a:
c9:21:9d:8d:5a:e3:c6:4e:be:66:9e:93:62:88:a9:92:3f:c8:
ec:f4:a9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org