Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3ycbxi2RSKubSbfKKenasCiYOik.roa
File: 3ycbxi2RSKubSbfKKenasCiYOik.roa (raw, json)
Hash identifier: bYAybJW6vLXgzGxdJFHUoqKBwqi7g2uya+LHgOpB6f0=
Subject key identifier: DF:27:1B:C6:2D:91:48:AB:9B:49:B7:CA:29:E9:DA:B0:28:98:3A:29
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0CD5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3ycbxi2RSKubSbfKKenasCiYOik.roa
Signing time: Tue 29 Sep 2020 09:53:53 +0000
ROA not before: Tue 29 Sep 2020 09:53:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3285 (0xcd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:53:53 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DF271BC62D9148AB9B49B7CA29E9DAB028983A29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:14:26:df:0c:2e:ce:e8:6f:8e:75:3a:94:
f5:01:ce:46:86:50:98:37:28:34:42:b9:eb:7d:1a:
97:f0:59:8d:3f:bb:45:4b:12:f6:ad:c1:50:aa:02:
64:df:b6:d9:19:8a:5e:85:c3:d3:8e:d8:2b:1a:90:
c7:32:d1:5e:29:d2:90:f7:d5:74:e0:9d:ef:10:d7:
6e:66:55:99:b2:5a:22:f6:d9:a0:d1:4d:65:4a:cf:
10:8a:fc:29:b8:8b:18:c6:e3:15:d4:17:c1:e6:56:
76:d1:49:2f:58:55:83:dd:99:8c:d2:dc:b2:a8:54:
e1:19:25:70:58:6c:07:21:54:b2:74:2a:7d:2d:7a:
84:e7:04:9b:c5:7a:05:09:b3:b1:d9:ad:c7:72:5b:
60:f2:92:f2:cf:23:d3:4a:90:ae:cd:19:91:8b:63:
f9:ef:aa:28:06:3d:24:7f:06:47:72:3e:9d:d0:91:
c3:ae:f7:e0:36:8b:6f:4f:04:4a:46:78:f6:cc:49:
40:05:82:5d:ad:4c:3c:92:70:39:e1:b0:30:2e:6f:
a2:9e:c1:71:07:17:ab:8d:61:04:1b:f4:61:41:48:
d6:c2:53:8e:3c:4b:9d:da:b6:2b:59:31:13:b1:7c:
f9:ed:bc:43:0b:ed:37:33:f4:47:5b:5b:e8:bb:0c:
ce:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:27:1B:C6:2D:91:48:AB:9B:49:B7:CA:29:E9:DA:B0:28:98:3A:29
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3ycbxi2RSKubSbfKKenasCiYOik.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.160.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:66:99:04:63:e0:73:ec:32:d7:21:f3:23:0b:56:4f:61:72:
d6:13:1a:e3:65:28:ae:46:f8:9f:b3:48:7a:6e:a2:66:32:39:
8e:76:9b:91:0b:2f:4e:3d:85:19:01:7c:62:2e:54:86:47:5e:
e9:8c:47:bf:6a:07:9a:67:da:6b:71:16:f0:e6:3b:a6:d9:31:
14:43:1c:1e:3a:ad:4c:72:f5:b8:93:99:27:8a:97:ad:0a:68:
76:47:02:0d:de:96:54:93:74:d4:ed:7c:18:8d:da:11:5e:64:
98:b0:43:e1:aa:f4:b5:36:ce:2f:75:d8:16:0b:96:99:24:a4:
83:42:d1:aa:4f:f9:6a:76:e7:7d:23:7f:c4:e6:08:82:ef:e4:
a7:4e:e2:0f:c2:b1:e1:d9:0b:d0:79:47:a0:24:eb:3b:08:20:
6b:f9:88:06:d3:32:20:7b:1b:74:9f:63:80:e1:90:e3:46:98:
66:39:20:f4:7b:6f:3c:4b:51:29:a5:d7:38:4c:58:b9:39:89:
75:f6:07:07:89:21:be:94:d3:49:14:6b:86:9d:ff:65:40:cc:
52:83:ca:85:04:91:38:4a:d2:51:29:8e:ba:6d:6f:58:b9:33:
1f:c8:f8:fe:a7:6d:09:85:ba:81:3d:1c:63:f5:35:c5:18:74:
c3:3e:c5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org