Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4C_OFxsqrHz0fVHrAo5zXp37N5A.roa
File: 4C_OFxsqrHz0fVHrAo5zXp37N5A.roa (raw, json)
Hash identifier: lUDiE5bdBOI0Ab9TBSkHH3850B9vSE1kaPtZB13G0EA=
Subject key identifier: E0:2F:CE:17:1B:2A:AC:7C:F4:7D:51:EB:02:8E:73:5E:9D:FB:37:90
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4C_OFxsqrHz0fVHrAo5zXp37N5A.roa
Signing time: Thu 15 Sep 2022 02:54:01 +0000
ROA not before: Thu 15 Sep 2022 02:54:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:54:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E02FCE171B2AAC7CF47D51EB028E735E9DFB3790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:42:79:2a:8d:8a:76:b9:5c:f4:f5:2b:89:
35:c5:ad:9f:f0:72:5a:28:41:14:88:99:95:d3:0e:
5e:d0:81:1c:59:d6:ba:d9:7f:75:21:4d:3d:b8:9f:
0f:18:bc:4f:ad:c5:6e:0e:86:f6:a8:be:70:a1:cf:
f9:03:e6:4e:20:52:bc:b6:32:86:bb:8a:c8:ab:75:
55:08:6d:b9:21:a7:63:66:ff:ab:ff:a0:32:5e:69:
2d:c7:c8:c2:f6:cc:ab:eb:6b:2d:1d:37:d0:43:d2:
eb:3b:1a:02:f8:7c:e0:a0:1e:51:db:8b:82:4c:ad:
ca:b3:3d:39:6d:45:cf:08:e6:c7:e3:33:b1:3e:0a:
b8:6f:0d:80:0c:8e:86:0f:ee:e3:85:de:47:e1:9e:
71:71:e0:02:0c:00:b7:5e:59:a5:b1:f8:fa:96:f4:
9e:cb:32:ad:e8:57:79:d3:2b:e8:b2:ff:e2:ae:66:
ea:6b:11:db:a1:12:86:4e:df:66:6e:22:76:fa:3a:
b8:3e:7d:5e:57:d5:f0:90:ed:68:9e:b6:61:ea:c2:
6d:88:84:24:6e:56:76:a4:8d:88:7f:49:7b:3e:32:
c5:28:67:ca:d2:99:d6:03:aa:11:5c:00:da:3c:f3:
b3:86:87:99:2a:f2:1c:ae:a0:47:36:8c:45:6f:3d:
ec:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2F:CE:17:1B:2A:AC:7C:F4:7D:51:EB:02:8E:73:5E:9D:FB:37:90
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4C_OFxsqrHz0fVHrAo5zXp37N5A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.64.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:18:2c:eb:49:81:90:c4:1a:02:8d:5e:99:1a:a3:2e:a4:d7:
42:3b:38:32:5e:63:96:e0:f0:1e:96:64:fe:a2:77:ed:3f:5d:
1c:28:f2:3a:91:40:75:6a:2d:31:86:04:fc:d9:ab:0e:1e:73:
fb:26:3b:d5:fb:5f:c4:db:47:40:5e:20:98:c6:ae:6b:8d:df:
22:e3:a2:27:80:2b:11:c3:db:cd:a4:be:53:4c:eb:10:64:a1:
88:1c:7d:17:af:7d:a1:a1:28:1c:25:bc:e4:46:6a:e0:ec:81:
90:04:44:25:ee:4d:12:01:51:81:cd:af:f5:b0:71:79:91:77:
07:f7:91:08:51:a7:e4:38:c8:3c:20:38:8d:9e:3e:55:f6:2c:
e9:0b:bd:36:40:cf:a0:62:01:5e:75:7a:cf:ce:46:36:70:81:
21:c7:5c:e2:9a:d4:83:50:41:2e:7f:ee:eb:6b:74:ea:d1:a0:
31:32:e2:41:b1:38:ff:5a:14:71:57:5f:92:1b:4f:81:fa:60:
4d:6e:3c:ff:c2:a8:d4:db:a4:dd:68:2f:a3:62:ed:b4:b1:d2:
b1:85:b1:9d:b2:eb:79:22:ca:01:b7:46:31:db:c9:08:f1:5e:
5d:b5:7e:5b:10:d6:b5:8f:2d:90:bf:a4:04:db:a7:78:fc:27:
3e:b6:4b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org