Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5pbHBjoyN493jxcb6T83Yg3CfRI.roa
File: 5pbHBjoyN493jxcb6T83Yg3CfRI.roa (raw, json)
Hash identifier: QGapEXaW3gPdZwmLa39vVpwyooq9fr9qe4nFQ0dOYXk=
Subject key identifier: E6:96:C7:06:3A:32:37:8F:77:8F:17:1B:E9:3F:37:62:0D:C2:7D:12
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2355
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5pbHBjoyN493jxcb6T83Yg3CfRI.roa
Signing time: Fri 25 Nov 2022 04:43:27 +0000
ROA not before: Fri 25 Nov 2022 04:43:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9045 (0x2355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:43:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E696C7063A32378F778F171BE93F37620DC27D12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:21:57:34:41:f4:68:23:4d:ed:e4:fe:cc:
1a:48:29:0d:86:a7:57:49:6f:20:e3:8b:34:a3:14:
f1:61:e9:96:56:36:25:c0:68:d8:bb:c9:f7:15:10:
84:fe:4b:61:b9:ce:2f:9d:ac:74:34:eb:95:f5:c6:
fc:81:f0:00:48:6c:75:aa:fc:e7:43:f1:e3:bb:93:
a3:d4:f2:7e:1e:e7:41:4b:27:a2:38:18:cb:ce:38:
74:5a:12:8c:ab:fa:01:f2:24:40:89:8c:ec:94:01:
25:3b:dc:47:ce:30:02:2c:ea:89:ae:15:68:2a:80:
83:86:9c:97:03:42:18:70:60:da:0f:f4:88:89:55:
fc:6a:7b:01:6e:ce:95:f3:eb:2c:8b:80:3f:a1:f2:
eb:58:dc:81:4d:11:d8:5d:f4:81:63:c8:30:a7:76:
d1:0a:a1:46:26:66:ae:57:50:ed:f9:1a:e2:cf:c8:
68:47:97:5d:2f:10:40:c5:65:b8:68:d4:11:ef:dc:
a1:d3:3a:86:7b:cd:66:d5:34:f6:e4:7d:5e:74:a3:
31:b9:93:5e:4e:61:56:74:fe:45:99:96:b7:ea:ba:
2e:99:2a:2f:f3:71:fd:92:85:af:bb:83:7b:88:73:
d5:1e:07:9a:70:2e:28:bf:c8:04:d4:64:98:12:25:
25:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:96:C7:06:3A:32:37:8F:77:8F:17:1B:E9:3F:37:62:0D:C2:7D:12
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5pbHBjoyN493jxcb6T83Yg3CfRI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.152.0/22
Signature Algorithm: sha256WithRSAEncryption
10:27:e1:09:a2:cf:04:a0:f1:1f:62:fd:83:f4:be:0d:82:38:
5f:5c:9a:44:da:84:2c:3e:78:4f:10:c5:fe:34:d0:52:c8:6c:
22:e8:f6:e2:24:fe:bf:1a:25:6a:8b:7b:0b:45:78:a8:5e:77:
b7:4a:b2:ef:95:6c:9f:df:59:d9:ab:22:b4:c4:86:64:45:94:
8e:37:d7:01:25:80:06:9c:cf:13:29:d3:cb:d3:1c:5d:79:b2:
68:a7:7a:0e:a5:8c:7b:af:e1:f1:11:5e:21:bb:b3:9f:90:32:
f9:5f:b6:42:fa:24:a3:f5:6a:6d:72:29:34:fa:95:d7:2c:b1:
c4:73:7e:94:24:8f:3c:6c:08:08:f9:07:a2:39:16:b4:43:ea:
2f:f6:dc:29:66:90:7b:1a:27:af:c5:dc:bd:85:50:c4:00:53:
d3:f4:bf:fe:60:f9:62:42:d8:e8:6c:5e:d1:8a:19:9d:6d:c6:
fa:21:72:59:47:14:df:e0:17:d4:58:f3:de:67:28:92:87:df:
1a:b3:90:cc:7c:f0:68:06:9f:71:00:2f:c8:e8:4c:35:51:8c:
f8:8c:1a:e5:4c:4a:f1:9f:6d:f2:47:57:36:3b:ec:1d:8a:36:
c8:bc:f3:34:7b:6c:a9:3f:3b:5c:ea:c2:e5:e0:5e:63:aa:a0:
d4:6d:10:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org