Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4Rpw3_KV2mpcfLMZ90hqqWtr7uQ.roa
File: 4Rpw3_KV2mpcfLMZ90hqqWtr7uQ.roa (raw, json)
Hash identifier: MdYT/8wIVJl3iW9JsLlq/xXtOJcaXXeT/QYLyVQmRlk=
Subject key identifier: E1:1A:70:DF:F2:95:DA:6A:5C:7C:B3:19:F7:48:6A:A9:6B:6B:EE:E4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4Rpw3_KV2mpcfLMZ90hqqWtr7uQ.roa
Signing time: Thu 15 Sep 2022 02:45:38 +0000
ROA not before: Thu 15 Sep 2022 02:45:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E11A70DFF295DA6A5C7CB319F7486AA96B6BEEE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:a5:d2:5c:57:ab:e9:2c:19:f9:ad:de:20:
db:32:cb:77:23:38:26:36:ea:7d:33:7a:83:e8:7f:
8f:03:68:de:cd:c1:0b:f1:cd:96:ca:f7:36:62:28:
9e:44:ca:7d:45:16:0d:f5:67:ef:1b:69:c6:4c:e7:
11:78:7e:92:63:a4:b0:9e:f6:68:c8:0b:28:60:bf:
ed:5b:62:eb:a7:4d:30:90:5a:9f:e5:e6:fe:16:d8:
5f:aa:50:0b:96:1d:1b:ee:23:af:8f:18:15:dc:17:
dd:fa:84:a1:0a:f9:21:9a:60:f7:66:76:aa:46:90:
05:7f:3f:6a:dc:fc:7e:54:24:e3:71:f8:fa:ef:0a:
26:5c:23:6d:2c:ab:f4:ae:9f:78:d9:11:93:bc:80:
c3:79:1e:43:ba:c2:8d:00:52:12:fa:a6:43:61:48:
a5:41:4a:66:98:24:fd:d8:c1:9d:96:91:3d:3e:3d:
58:d6:70:dc:91:40:b8:d2:50:63:85:82:6b:1c:50:
1c:c3:87:14:bf:f8:45:ef:88:91:c2:e5:a3:02:58:
7e:3b:11:fb:77:85:67:59:0e:ec:ac:b2:c3:24:cb:
d9:65:f1:1e:39:05:58:52:d8:41:bd:80:0c:e3:73:
b3:82:04:ab:5c:fd:fa:ba:a5:2e:9c:fb:e0:5f:69:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1A:70:DF:F2:95:DA:6A:5C:7C:B3:19:F7:48:6A:A9:6B:6B:EE:E4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4Rpw3_KV2mpcfLMZ90hqqWtr7uQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.20.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:d8:b3:98:11:3d:d9:a7:53:85:72:a9:9a:a6:f7:b7:21:46:
68:22:b5:37:c2:a5:03:a9:54:5a:df:55:81:c6:c1:4f:1c:5d:
2b:d2:c3:38:99:20:a4:f8:06:7b:17:96:94:98:56:7e:bd:bf:
7a:bb:18:8b:e9:b8:91:af:9c:72:cc:96:ab:46:df:97:23:28:
0a:08:e2:76:9a:0c:09:38:fa:30:d2:7a:7a:73:a6:50:7b:66:
78:69:90:ec:a3:9e:cc:c4:83:52:0b:84:de:3b:ac:70:83:17:
46:ae:e4:5c:37:51:14:9a:9a:ba:a9:e2:45:1b:44:2b:2b:3b:
32:34:3d:c1:01:47:65:78:bd:47:f2:39:44:80:b9:8b:89:cb:
cb:f1:5d:94:c7:6a:df:49:9e:6a:78:55:cd:ef:c5:c7:76:42:
69:9f:d4:fe:d0:7b:34:c2:eb:88:63:82:90:9b:1b:83:6d:8f:
88:b0:3e:4c:15:9f:23:28:80:e1:46:d9:ee:49:75:50:87:f3:
ca:13:d5:09:ba:91:84:83:4f:0d:f6:8c:9f:42:d7:10:c7:d4:
2c:ec:cd:10:41:45:28:3a:ec:41:d5:6e:3f:bb:96:ed:18:42:
55:e6:b6:71:d6:cf:18:65:ae:da:84:99:83:1b:f5:c2:74:48:
90:45:89:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org