Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4KkfgNslSFIXGTtPr2HKasAVVGc.roa
File: 4KkfgNslSFIXGTtPr2HKasAVVGc.roa (raw, json)
Hash identifier: gb/YlL4+yhw9JnpbHLYTQ5xlHfPYHGRznsAMkHhTYGk=
Subject key identifier: E0:A9:1F:80:DB:25:48:52:17:19:3B:4F:AF:61:CA:6A:C0:15:54:67
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1883
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4KkfgNslSFIXGTtPr2HKasAVVGc.roa
Signing time: Sun 07 Feb 2021 12:30:04 +0000
ROA not before: Sun 07 Feb 2021 12:30:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6275 (0x1883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:30:04 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E0A91F80DB25485217193B4FAF61CA6AC0155467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:a5:e1:26:ba:80:de:da:58:6c:8d:81:21:
b6:29:7b:47:f8:5f:88:2b:ff:5e:cb:6d:dc:17:1f:
18:99:48:44:15:f5:2c:32:fe:07:36:b2:97:95:95:
e4:01:e8:81:cf:97:09:ef:d3:43:ae:37:08:b6:22:
ac:b0:cc:b2:b1:b8:0f:24:96:b2:6c:41:d8:e4:bb:
ad:95:29:c3:ea:0c:fc:c0:ec:6c:c7:0a:11:32:69:
ee:3a:cb:27:ff:4c:24:7c:10:ba:b2:39:0f:67:a8:
43:88:11:16:92:0b:88:51:c2:9d:f4:c6:a0:7e:05:
9f:f9:1a:27:78:f4:59:73:79:5b:43:96:dc:84:9f:
11:b5:9e:36:df:ad:93:3c:f7:3f:5c:69:4e:83:b8:
a2:9e:75:2d:9f:00:e8:08:ff:d0:e1:05:a9:93:2a:
58:74:42:4a:6f:a4:82:f6:8f:1a:60:b0:70:f3:3d:
55:25:89:6e:f8:c6:94:58:6a:f9:fc:43:9a:ad:61:
1d:8b:96:5e:1a:3f:cc:55:27:b9:10:ef:21:f2:6c:
12:4e:1a:4e:64:bd:47:ce:9b:c7:d1:07:bd:83:61:
38:23:93:72:e9:40:35:d0:28:5a:aa:b4:b2:33:fe:
1e:7b:b4:ff:01:b1:a1:d6:9d:36:70:55:46:1e:40:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A9:1F:80:DB:25:48:52:17:19:3B:4F:AF:61:CA:6A:C0:15:54:67
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4KkfgNslSFIXGTtPr2HKasAVVGc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.92.0/22
Signature Algorithm: sha256WithRSAEncryption
01:8b:d8:14:3a:3a:d4:55:13:c3:75:17:64:d4:ad:0f:9e:43:
b7:65:80:a9:16:65:c0:b7:4c:4b:30:91:4a:a6:98:d8:bd:d9:
d4:f5:90:52:f3:81:c1:17:0f:34:a4:bb:01:c7:cc:01:9a:57:
fb:f8:5d:cb:71:d4:9a:26:79:28:b3:50:85:c7:4d:6c:eb:68:
f4:8b:5f:a2:a4:2e:25:cf:f7:80:bf:83:42:7b:29:4f:ba:49:
63:4a:f9:b2:8b:ca:91:41:bf:14:32:6c:57:b1:79:48:00:38:
05:50:d5:d2:fc:7f:3e:a3:fa:bd:a9:75:fa:e2:cf:38:a1:01:
4d:3f:65:89:46:a5:97:c9:34:c6:e1:48:66:b0:f0:91:90:d4:
c0:25:77:33:19:ba:96:88:64:55:20:76:b9:94:f0:01:ab:ae:
f3:8d:cc:38:9f:27:13:ca:89:eb:c7:4d:a6:80:8b:08:e0:75:
00:4a:fc:f3:82:0c:a6:40:65:22:67:59:15:44:b3:8d:a7:a2:
ae:66:3c:f0:b3:c6:ee:40:c3:38:6b:24:cc:0e:51:5f:12:1f:
a0:0e:ad:19:2f:cb:1f:1f:14:51:4a:d6:26:71:6c:39:50:83:
78:2b:c0:8e:0d:bb:8b:4a:23:d3:1b:39:14:71:00:4d:66:d3:
d6:2f:89:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org