Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6BPb5FGq1zI5KfD_x2Fq8x0JQ2U.roa
File: 6BPb5FGq1zI5KfD_x2Fq8x0JQ2U.roa (raw, json)
Hash identifier: 86kmgODEsQrjEx5wJqKATfaC9+YNQ3ACtamGxZ+y+ok=
Subject key identifier: E8:13:DB:E4:51:AA:D7:32:39:29:F0:FF:C7:61:6A:F3:1D:09:43:65
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F28
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6BPb5FGq1zI5KfD_x2Fq8x0JQ2U.roa
Signing time: Tue 29 Sep 2020 09:56:34 +0000
ROA not before: Tue 29 Sep 2020 09:56:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.4.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3880 (0xf28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E813DBE451AAD7323929F0FFC7616AF31D094365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:fe:ad:d6:20:ee:80:45:ff:17:a8:bb:33:
40:04:62:bc:f5:67:36:bf:40:2b:75:c1:54:e1:66:
df:89:25:70:1c:d0:12:53:80:b7:12:d4:85:ea:d4:
19:53:85:e3:0a:27:eb:94:2a:61:71:de:c8:34:62:
25:93:55:ec:c3:4d:51:b9:20:39:ea:f6:48:eb:9f:
4d:da:71:c3:28:ed:82:e2:b9:b4:ad:0f:ec:52:a7:
9b:94:72:40:2a:c8:7a:76:ea:ac:93:f2:e0:56:e0:
c5:57:9c:2d:f5:c2:3d:2a:68:67:03:f3:0f:d2:5f:
45:5e:4e:be:27:c0:18:90:ca:46:9e:35:c5:0a:4c:
8e:69:a9:54:a7:9b:54:1a:7d:e4:14:c3:33:3a:6e:
3d:de:93:e7:21:69:55:40:51:d7:37:a0:99:a1:90:
4c:13:6b:33:8d:6a:91:aa:25:60:70:77:13:ac:8e:
57:81:ad:f9:45:0b:6f:70:46:49:ec:c4:98:7c:3c:
9e:0c:b8:29:0d:24:0b:78:b9:28:97:dd:8e:eb:2e:
d3:cd:61:8a:d5:0a:fb:7f:23:a1:08:d6:a6:cf:79:
a7:6f:75:9f:e8:1e:f7:a7:b4:85:4d:5d:20:b2:f3:
75:96:a0:94:4b:e4:55:dc:1f:78:f7:30:23:6b:9c:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:13:DB:E4:51:AA:D7:32:39:29:F0:FF:C7:61:6A:F3:1D:09:43:65
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6BPb5FGq1zI5KfD_x2Fq8x0JQ2U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.4.0/23
Signature Algorithm: sha256WithRSAEncryption
10:4c:6c:d9:28:c1:ea:44:36:2b:ab:dd:b4:47:cd:dd:a1:ae:
86:47:7e:cd:fd:19:5d:06:b8:ad:47:af:1d:9a:8b:bd:6e:85:
a0:b7:5b:a4:bb:15:40:d1:de:71:84:dd:42:3d:07:ed:70:cb:
44:42:ca:97:80:a8:3e:32:d8:b3:45:f5:3d:cd:5e:f6:4b:10:
d7:1c:ed:c0:cc:15:bc:01:ef:75:1e:14:98:de:2f:74:d6:26:
cd:18:75:8e:ef:1e:0d:f5:05:0f:73:09:5d:9b:11:fa:2f:f9:
bc:f9:72:9a:61:07:de:db:34:df:86:9d:3e:a4:41:4e:6d:ab:
e9:0c:a4:d8:81:29:87:05:0d:c8:43:24:56:4d:5d:54:44:94:
65:86:0f:91:94:0b:3c:c0:eb:29:1c:7a:48:05:fb:14:af:18:
eb:41:6b:4e:b3:3e:e8:ce:62:93:a3:b6:e4:35:e8:26:62:ff:
f5:3f:de:46:7b:dd:10:46:26:cf:ba:ac:9a:b0:45:82:f1:d6:
f1:ad:37:1b:1d:34:89:be:88:28:3d:18:13:be:63:2c:04:0f:
15:f4:f6:68:bb:41:11:cd:63:fc:e1:7b:67:83:32:03:55:a3:
c4:3e:89:31:66:aa:25:55:e4:ef:cb:e8:e3:dd:d5:fa:2d:6b:
40:ec:d3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org