Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5BsNeeCYySSxmWgVMl1bZ-MOEKE.roa
File: 5BsNeeCYySSxmWgVMl1bZ-MOEKE.roa (raw, json)
Hash identifier: K/Mawng00ewgibI0zPOCZMjh+GchYxiIX7Ocu9KxPGo=
Subject key identifier: E4:1B:0D:79:E0:98:C9:24:B1:99:68:15:32:5D:5B:67:E3:0E:10:A1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15DD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5BsNeeCYySSxmWgVMl1bZ-MOEKE.roa
Signing time: Sun 07 Feb 2021 12:06:57 +0000
ROA not before: Sun 07 Feb 2021 12:06:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5597 (0x15dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:06:57 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E41B0D79E098C924B1996815325D5B67E30E10A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:f7:aa:4d:9c:be:3c:fa:96:1b:de:f9:ae:
47:7b:6f:e6:19:52:0e:4b:8b:7f:28:e6:f7:4f:d0:
7c:43:bb:de:da:aa:ca:04:bf:8f:6b:18:11:4c:f2:
81:54:c7:32:fe:c9:a7:1a:2a:be:0f:e5:e5:f0:ab:
d3:2a:7b:0d:ab:08:33:10:68:f0:29:c1:69:72:71:
79:b0:90:3b:95:5e:c9:fb:0a:93:f0:06:b5:2d:7e:
4c:6f:ff:b5:b5:0c:2a:bc:11:0e:f5:92:6c:77:ca:
45:c8:b6:7a:ae:1f:47:3b:61:97:3d:c2:e0:88:91:
a3:92:92:33:bc:86:d7:3c:04:27:78:8d:2c:c6:55:
fb:51:78:fe:16:73:77:8d:27:dc:dd:98:41:63:cc:
0a:c4:39:56:20:03:6a:17:a1:3f:75:fe:d2:32:5e:
9b:73:d8:7b:ce:b8:49:81:da:03:30:21:8e:64:4c:
97:11:b5:9b:ac:2b:50:48:6d:e8:e5:aa:0b:aa:27:
a6:92:7a:82:c7:08:74:b3:83:b2:84:59:be:14:da:
9a:d3:a3:79:98:08:3d:de:d5:37:3c:33:a5:5c:50:
fb:4c:1a:84:c6:28:b4:b3:a7:05:44:ce:90:64:83:
10:1b:43:dd:76:5b:ce:bb:6a:52:2e:73:85:13:08:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1B:0D:79:E0:98:C9:24:B1:99:68:15:32:5D:5B:67:E3:0E:10:A1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5BsNeeCYySSxmWgVMl1bZ-MOEKE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.156.0/22
Signature Algorithm: sha256WithRSAEncryption
54:34:a2:36:30:54:f8:16:a8:18:1f:1a:0d:e6:82:ce:67:00:
38:9d:09:07:de:77:65:2b:4d:c1:96:01:27:59:f3:f7:12:2b:
ee:c7:7b:68:bb:96:12:c1:91:70:43:da:6e:ca:20:d7:d9:1c:
2f:97:b2:f6:f3:bb:23:e8:21:ec:5d:80:af:a7:48:df:02:a7:
d3:0a:41:96:eb:e4:ec:28:a1:69:fb:af:59:9f:d6:81:ed:ba:
9e:fa:51:11:59:94:6c:e0:44:a2:b0:f3:8e:66:2c:08:08:e6:
48:99:1f:c4:5b:2a:f8:58:5b:be:bd:4d:e3:0f:e8:99:ec:36:
93:2b:c7:e8:af:2b:ca:a7:6b:9b:de:2a:fc:ac:14:87:0d:89:
e7:b1:d4:cc:71:7d:99:98:aa:77:09:c0:2f:9e:e3:66:be:76:
bb:08:bd:95:04:72:1a:d9:4e:8f:a5:9d:ce:b7:1c:63:31:14:
9a:18:6d:ff:14:56:66:ed:5b:36:59:2d:a6:91:99:9e:a2:59:
2c:40:51:09:d6:3d:f0:78:81:e6:68:7d:67:3b:71:59:4a:0d:
16:42:d9:0b:32:36:c1:f7:c7:94:1e:db:1d:2c:92:28:8c:40:
71:ba:16:83:71:9d:60:77:65:5b:25:9a:c3:c4:0a:2e:a4:b5:
bf:eb:95:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:09 2023 by rpki-client on console-ams.rpki-client.org