Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/32dFdxzgRhGVqXlv8kw9rDCMNsU.roa
File: 32dFdxzgRhGVqXlv8kw9rDCMNsU.roa (raw, json)
Hash identifier: m3R5DYgPKfKMOhK9wIPBpg0h8tmdJ0tw5raIeKR9ALM=
Subject key identifier: DF:67:45:77:1C:E0:46:11:95:A9:79:6F:F2:4C:3D:AC:30:8C:36:C5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15E7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/32dFdxzgRhGVqXlv8kw9rDCMNsU.roa
Signing time: Sun 07 Feb 2021 12:07:10 +0000
ROA not before: Sun 07 Feb 2021 12:07:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5607 (0x15e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:07:10 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DF6745771CE0461195A9796FF24C3DAC308C36C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:cc:45:ff:1d:1a:fe:66:46:ad:4e:e4:a8:
ae:c1:c2:dc:ad:c1:02:7b:d8:78:2e:42:e2:19:bc:
e9:91:ff:9d:0f:39:e0:ef:ef:69:fa:93:c1:fd:b5:
02:3c:28:2f:63:3b:bf:72:5a:6f:2b:aa:07:64:66:
4d:29:71:03:9b:d6:29:e8:ce:23:2d:16:df:ce:a0:
a4:a4:10:00:b2:e3:25:43:82:05:9f:2e:d8:c8:e4:
20:f8:cd:23:fe:27:82:92:ff:83:e0:68:f7:7b:6c:
d8:a0:f2:4d:ae:f2:57:5f:9b:f7:40:f2:c9:98:df:
87:9f:64:d1:0f:44:c2:a7:e0:53:8e:50:aa:f7:56:
d5:22:18:e9:9d:75:ed:fe:ed:20:1d:04:8e:ba:4e:
81:8b:b1:ad:8e:79:ff:9f:24:66:37:5d:37:7d:12:
89:fa:ec:b6:d5:73:38:a2:89:67:9f:7d:55:c2:f8:
ce:92:57:9d:8c:34:77:05:3c:39:e0:ad:85:c4:40:
f8:57:40:77:7f:84:8b:82:62:d1:a4:fb:4d:65:98:
35:20:e2:8a:db:4e:14:b6:89:44:56:55:f4:35:28:
32:3e:7d:4f:90:a0:0a:a1:e4:5c:cb:b4:8b:dd:30:
38:58:73:22:38:dc:d1:a1:bb:d4:95:70:8a:51:43:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:67:45:77:1C:E0:46:11:95:A9:79:6F:F2:4C:3D:AC:30:8C:36:C5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/32dFdxzgRhGVqXlv8kw9rDCMNsU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.232.0/22
Signature Algorithm: sha256WithRSAEncryption
72:23:56:2f:a7:15:42:a2:ad:cc:1e:a4:5e:a1:ae:d2:0b:50:
ae:9d:7a:b8:d6:c6:e5:ac:71:d5:73:61:0d:ca:66:69:bb:31:
92:80:5b:87:22:3a:7a:34:cf:16:6e:73:36:b5:c0:13:9e:aa:
00:96:46:e6:56:e4:0d:ea:1f:5a:a1:3c:94:ce:08:d8:06:03:
86:95:c8:c8:45:3b:96:26:78:49:e7:2d:bf:6f:fe:81:6b:6d:
a1:ef:8e:cf:49:52:ba:e8:f0:82:fd:38:5d:10:3c:bb:ef:84:
ea:6c:d2:9d:7e:00:ca:de:f2:8e:91:1c:e8:af:f3:f5:d3:3c:
8a:b5:7c:db:fc:52:ab:65:85:1e:97:2d:8f:96:b4:84:70:d0:
b1:00:19:e4:c5:ae:39:4a:97:a7:d6:b1:3a:c8:bb:22:93:91:
57:c7:86:54:5c:b5:b1:c5:86:dc:92:c7:8a:24:b0:aa:11:c7:
ad:a3:9c:9d:e1:c8:c1:96:4c:9a:f0:7f:1a:95:92:be:0b:d7:
d3:f1:52:7f:ad:6b:8c:72:fb:88:90:1f:99:94:9f:4d:5c:6f:
28:e7:47:72:78:5d:f3:4f:d5:9d:7b:70:d8:2b:5d:13:ec:1f:
00:44:8f:af:a5:7e:6a:f2:ab:93:2f:37:65:ee:a2:df:36:1e:
62:e7:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org