Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1eTrMrRYvDAYS-a_SZLt8OS6Qnk.roa
File: 1eTrMrRYvDAYS-a_SZLt8OS6Qnk.roa (raw, json)
Hash identifier: DE/seRtRxMM9Llg4mpCJmyNK81B/5g+oILj69QXUuxI=
Subject key identifier: D5:E4:EB:32:B4:58:BC:30:18:4B:E6:BF:49:92:ED:F0:E4:BA:42:79
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1583
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1eTrMrRYvDAYS-a_SZLt8OS6Qnk.roa
Signing time: Sun 07 Feb 2021 12:05:02 +0000
ROA not before: Sun 07 Feb 2021 12:05:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5507 (0x1583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:05:02 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D5E4EB32B458BC30184BE6BF4992EDF0E4BA4279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:ce:43:92:d9:d4:71:b1:c2:81:f7:2c:b7:
99:e7:f2:dd:11:e4:f6:5c:2e:e2:fa:dd:91:f2:e4:
a8:da:98:97:8c:5c:b8:73:86:18:0e:7c:46:91:b4:
30:b6:d4:11:42:78:e7:5e:9f:f9:9d:bb:ab:e8:1d:
72:1c:43:34:f1:19:1a:f2:20:6a:e3:94:4c:23:7d:
ba:28:c6:b5:25:c0:e3:90:6d:90:49:5e:c1:de:17:
35:1e:6d:d9:0a:d4:f2:93:9a:a8:85:da:b0:b1:74:
93:24:bc:3b:96:d9:e6:e3:71:93:e4:6e:2f:c3:d0:
c1:2e:02:0d:28:a8:4a:ca:26:1d:95:79:9f:be:4f:
b0:ff:a4:33:df:a6:50:a7:a5:e0:6e:6c:e4:7c:d6:
b7:07:af:e9:e3:8d:5c:69:72:83:ba:dd:90:c3:54:
10:5f:4b:c3:f2:f9:73:ac:0c:4b:c8:1e:61:98:80:
d1:f7:4f:4b:91:6a:c8:e1:da:d4:fe:c5:a3:4b:37:
b3:81:34:80:a5:14:e1:0b:66:0c:d9:03:17:a8:ff:
49:d7:e4:06:36:cc:73:a2:e8:77:f5:3a:be:f3:97:
41:c0:6f:08:b0:4c:e5:6a:d5:6a:80:ec:0e:6e:ce:
c2:18:90:fa:c3:bd:f9:f2:7f:f3:2e:5b:54:a3:5b:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E4:EB:32:B4:58:BC:30:18:4B:E6:BF:49:92:ED:F0:E4:BA:42:79
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1eTrMrRYvDAYS-a_SZLt8OS6Qnk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.12.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:43:d5:51:18:5c:70:90:cd:a0:51:78:4e:d1:00:7a:4a:ae:
d5:d4:19:cf:e4:7c:c8:aa:48:69:ec:a7:cc:c7:8c:49:2a:6c:
d8:67:42:29:b3:cb:87:6a:83:e7:90:f9:7d:68:77:a5:dc:89:
ac:53:5e:c6:a7:0e:e3:3d:e0:fd:ed:71:6c:d6:5d:22:a2:57:
5b:3a:d7:44:fd:21:17:5c:06:77:f2:95:44:1e:61:70:cc:71:
83:9a:8e:78:97:b2:49:23:22:10:70:16:23:fd:12:d9:e0:04:
0c:a0:a5:7d:61:c6:82:55:b5:69:19:96:77:fa:61:56:8a:1f:
7a:be:42:89:7a:6c:14:ee:c6:cb:ae:78:78:ab:cf:1a:75:2a:
4f:8f:44:08:e7:d7:61:5e:2c:db:8b:db:95:4c:1f:0f:81:3a:
4f:c4:5a:bf:4e:4f:de:fe:de:95:ea:78:9c:ea:ae:29:c0:54:
c3:01:10:dd:19:1d:e5:5a:44:6d:de:dd:80:fc:5d:89:02:11:
a4:81:5d:36:2a:39:bf:3b:5a:2e:7f:4f:34:ee:e0:fe:3c:f6:
7a:4f:86:b2:fd:de:f6:96:b5:e6:fe:d5:43:72:43:e1:49:c4:
0e:f7:0d:bb:af:0e:2f:00:20:57:f3:ec:df:a9:21:5d:fa:a9:
d8:df:99:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org