Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6BI9JiZj7tNoYkyXQ4vAsRFT0pM.roa
File: 6BI9JiZj7tNoYkyXQ4vAsRFT0pM.roa (raw, json)
Hash identifier: +CpfjUCyUfy7kC6WzlMcCfLc1QQHu8RkHRP+coZxOIk=
Subject key identifier: E8:12:3D:26:26:63:EE:D3:68:62:4C:97:43:8B:C0:B1:11:53:D2:93
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15D1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6BI9JiZj7tNoYkyXQ4vAsRFT0pM.roa
Signing time: Sun 07 Feb 2021 12:06:41 +0000
ROA not before: Sun 07 Feb 2021 12:06:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5585 (0x15d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:06:41 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E8123D262663EED368624C97438BC0B11153D293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:42:e6:2d:8f:d5:1c:f5:03:d3:d3:aa:72:
fc:73:af:b6:0d:e2:b4:9d:c2:f1:1f:b1:34:14:70:
b6:a8:15:33:ff:14:cd:bd:db:70:3a:d8:10:65:3b:
c5:74:a7:53:6c:58:d3:c0:2f:18:a9:6b:a6:04:2c:
db:aa:14:2d:38:45:27:c1:70:0b:10:27:0e:64:b1:
5d:54:d1:cc:de:7f:e9:e8:4f:5e:e9:92:29:b3:e8:
48:6e:ba:0f:b1:83:f4:b6:2e:81:53:b4:93:d1:eb:
e9:36:76:39:19:86:98:e5:a2:d7:22:6c:07:41:2a:
c4:d8:ea:88:70:55:64:ef:54:a9:8e:ca:89:e8:bb:
cf:02:0d:ad:b9:22:31:50:32:6e:16:64:c8:33:7b:
94:fc:2a:4d:01:49:03:46:6c:51:1d:4e:97:cd:b2:
c2:81:8c:ba:64:7c:d8:d2:87:67:06:92:79:75:17:
85:2a:c3:f9:2e:e3:e4:8f:08:89:4b:d8:24:d1:e9:
4a:1d:08:44:1a:1e:7c:e4:d3:e9:9b:08:f3:80:4e:
a3:f3:e0:15:b1:ec:ea:f3:2a:a1:ec:99:dd:5e:1c:
43:dc:5d:e8:09:74:b6:13:bb:a3:61:f7:b2:a5:6d:
fd:1a:72:ab:ab:06:4b:4c:10:41:48:a3:35:64:d7:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:12:3D:26:26:63:EE:D3:68:62:4C:97:43:8B:C0:B1:11:53:D2:93
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6BI9JiZj7tNoYkyXQ4vAsRFT0pM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.128.0/21
Signature Algorithm: sha256WithRSAEncryption
04:1e:c8:cc:16:8a:99:ef:f3:79:54:57:9e:ed:64:e5:e6:93:
ff:e4:fc:90:ae:66:d6:70:7f:80:c9:1a:a6:1d:42:91:fb:83:
ae:44:c9:0a:26:36:bb:eb:99:21:84:66:70:61:e5:f6:50:5a:
f0:c7:24:57:7e:09:5c:7e:c0:05:a0:43:b2:5e:d5:e2:47:ac:
00:de:ca:0e:04:27:69:b3:6a:10:74:51:35:3e:4d:e5:87:cc:
5a:53:53:00:ff:db:b9:82:11:de:e3:b1:63:01:3a:76:b0:fc:
14:c3:13:20:20:73:d5:0d:b7:41:82:43:bb:fc:86:41:bf:5d:
04:4f:dc:fa:f0:5e:78:5a:24:47:ec:f4:f3:f1:f9:f2:47:48:
1a:2c:35:f5:0f:8f:8a:71:30:16:3a:4d:be:d5:98:4a:70:e1:
1f:9e:d9:1c:50:2b:53:e6:d3:4f:e7:a3:36:8d:3a:be:91:9f:
a8:93:8a:0f:71:37:1e:d6:e9:cd:d1:36:c8:70:c8:5e:82:4e:
2a:c3:b2:cb:8a:24:c1:25:b9:37:d8:58:f8:71:75:a7:89:55:
bf:b4:aa:02:4a:3b:11:b3:70:1e:5f:5b:4e:b4:af:8d:49:5a:
88:60:48:e7:f0:1b:3d:d7:18:28:4f:31:13:ad:d4:5c:fc:51:
b5:2d:9c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:09 2023 by rpki-client on console-ams.rpki-client.org