Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2b1xVEwdWGe6aj_9riejr9JHPl8.roa
File: 2b1xVEwdWGe6aj_9riejr9JHPl8.roa (raw, json)
Hash identifier: o4TMPkJyshAW4ZriLKkTrn9e/++8qijVbLhghyhJ660=
Subject key identifier: D9:BD:71:54:4C:1D:58:67:BA:6A:3F:FD:AE:27:A3:AF:D2:47:3E:5F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2b1xVEwdWGe6aj_9riejr9JHPl8.roa
Signing time: Thu 15 Sep 2022 02:53:45 +0000
ROA not before: Thu 15 Sep 2022 02:53:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D9BD71544C1D5867BA6A3FFDAE27A3AFD2473E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:01:ac:66:e6:83:9c:7c:09:b8:5d:b5:4c:9b:
3d:c6:1c:37:4e:69:5b:40:f5:60:4b:1f:9b:54:09:
8a:9d:07:36:8c:57:51:90:06:c2:ba:1c:eb:52:3e:
bf:01:16:39:ac:ee:24:a2:4e:78:34:d1:a4:8d:6e:
4f:6b:da:71:ca:c1:4a:34:0a:5b:d3:f8:96:20:4e:
51:2b:25:18:9f:79:b5:f5:2a:5a:68:4b:71:ff:5f:
83:53:cd:f1:f9:f3:fc:3b:2c:01:da:10:33:30:5f:
c8:1d:98:5c:2b:48:a5:ca:a6:9c:90:63:ab:0a:23:
5a:e2:02:f7:37:32:5d:16:29:27:ba:96:d0:3d:ec:
65:6f:d5:e6:1f:3c:21:19:f3:80:b8:f6:2a:81:99:
27:2c:be:9f:cd:74:28:1f:94:17:26:9f:1a:c8:0e:
b5:a3:30:e3:18:cd:a8:9e:31:d8:c8:2d:cb:d4:ee:
0a:21:72:eb:bf:00:44:90:99:e4:40:20:89:f5:24:
59:ed:f1:ee:61:4a:73:4d:bd:14:10:5e:70:84:b3:
f1:d6:b7:63:6b:f8:eb:78:9b:9f:9f:a2:ac:93:2b:
8c:31:1a:71:e9:ff:38:35:a4:8d:5e:e0:8f:f6:92:
61:55:e1:94:75:69:54:13:0d:e2:dd:b8:ba:60:34:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BD:71:54:4C:1D:58:67:BA:6A:3F:FD:AE:27:A3:AF:D2:47:3E:5F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2b1xVEwdWGe6aj_9riejr9JHPl8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.176.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:81:28:b5:c9:4d:3a:bf:b9:39:b4:58:d2:37:ee:30:9c:41:
e6:c1:7c:0c:0b:08:5a:ba:8c:ce:b5:15:f2:c0:3d:66:2f:f7:
8e:b8:c5:53:6c:84:36:02:35:12:d8:db:db:e5:e7:79:b5:55:
b9:a9:dc:b9:33:8e:8f:c9:18:89:32:a0:96:f7:45:51:6f:23:
06:24:b2:ca:1b:88:46:73:07:7f:25:ab:f3:e0:44:ea:e5:cc:
25:ef:4b:82:a2:c6:cd:30:b4:8b:64:e8:f7:05:f7:38:09:77:
f4:58:5d:e9:0b:1a:f9:4a:82:bd:e8:2a:84:1a:c9:70:d5:8f:
64:c0:f6:76:22:ea:fc:6b:a7:fa:1c:a1:63:b5:fd:c2:e9:4b:
02:13:e5:8b:15:70:50:3f:73:13:45:fc:d0:78:6a:be:60:b7:
76:a1:a3:b4:dc:0a:4d:20:24:6d:e0:1e:11:38:c2:7e:aa:32:
25:a5:06:bc:a6:c1:9c:a9:90:ef:80:c2:17:f1:2b:15:54:1d:
a0:70:e6:1d:84:ec:91:7d:1a:f5:13:77:05:ee:9c:11:88:f8:
f8:e6:59:34:33:fb:20:4a:9a:27:87:52:0c:7a:fd:fd:69:b3:
79:9f:b7:62:a1:fe:f1:73:1e:a3:40:ce:f2:e5:44:91:53:a7:
41:04:36:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org