Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7qRNm4TYMzCaAd83qdgwBMURZJ0.roa
File: 7qRNm4TYMzCaAd83qdgwBMURZJ0.roa (raw, json)
Hash identifier: Zt9XhreRSoCi9vfBTDB1IxNGJ1ENmmgRbDPzAH3vep4=
Subject key identifier: EE:A4:4D:9B:84:D8:33:30:9A:01:DF:37:A9:D8:30:04:C5:11:64:9D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7qRNm4TYMzCaAd83qdgwBMURZJ0.roa
Signing time: Thu 15 Sep 2022 02:53:27 +0000
ROA not before: Thu 15 Sep 2022 02:53:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 180.176.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EEA44D9B84D833309A01DF37A9D83004C511649D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:9d:7b:82:c1:89:b6:ff:f4:93:7b:22:9b:
fb:43:e0:91:57:e1:8c:0f:f4:9d:59:47:12:89:e5:
32:ab:84:fb:54:fa:1b:a6:58:f7:53:aa:36:4a:01:
0a:ed:d1:c5:86:98:87:b1:ab:c6:c9:30:f8:49:51:
17:89:52:af:7f:d8:c9:23:d3:88:84:b1:bb:02:07:
f6:11:76:34:f6:26:ce:7e:80:63:15:2f:15:2a:25:
e0:fe:bb:f5:d3:c0:35:81:64:e7:6f:0f:93:99:82:
21:d0:1c:83:34:2e:c4:80:b5:d3:f8:8f:a7:56:b6:
d7:7f:40:ff:83:dc:3a:63:5d:60:8b:ed:4e:a5:de:
2e:80:7b:c6:3e:c8:52:03:ca:c8:5b:9c:c5:b8:80:
48:49:bd:ad:59:16:6f:14:1b:5a:4e:0d:83:e4:32:
76:78:ee:62:76:8f:fd:9c:f8:01:d7:ba:36:e5:78:
79:6e:ec:d4:d8:60:b6:33:95:50:32:cf:c3:6b:98:
f8:d5:ea:6b:a5:b2:26:59:d5:00:a6:dd:75:72:c2:
a3:cc:d2:d4:ab:3b:88:a8:52:b1:7e:af:b8:b7:12:
c5:20:cc:3c:7b:e3:4f:f6:f2:ce:46:8a:ec:de:94:
10:ef:90:cd:8a:74:4c:94:85:47:38:75:3a:84:db:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A4:4D:9B:84:D8:33:30:9A:01:DF:37:A9:D8:30:04:C5:11:64:9D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7qRNm4TYMzCaAd83qdgwBMURZJ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.0.0/15
Signature Algorithm: sha256WithRSAEncryption
12:83:dd:17:56:e9:60:6d:00:f1:74:c0:08:57:b6:39:9a:9d:
ff:3c:a7:b6:0c:3e:01:91:4d:a5:e6:87:20:af:aa:71:c2:90:
a3:09:5d:04:bc:73:9d:ad:f9:a4:07:57:a5:1f:5b:ad:a0:82:
f4:48:e1:52:35:3c:ef:45:41:a6:d7:55:3c:55:22:71:e3:f7:
9d:e1:15:5d:22:7a:45:0a:af:6c:ee:0b:78:39:2b:b1:45:66:
b7:fb:18:0b:5e:dd:91:63:6c:66:37:62:9f:8b:80:ae:2c:e9:
c6:46:82:f1:b7:8b:af:e4:80:f2:fa:a7:48:ef:8d:ca:43:88:
81:9d:62:82:c9:da:c1:a5:06:ab:6b:8c:cf:b6:db:d7:74:5d:
6d:5b:d7:a5:bf:e1:f3:36:c2:58:8a:02:bb:08:1a:18:f9:c4:
2a:95:63:48:55:0b:3b:46:46:65:33:13:5f:fa:9a:a3:ba:db:
b6:9b:7e:90:e5:4d:74:23:0f:54:71:55:99:bf:1c:db:27:2b:
fa:64:10:45:33:0e:e3:ce:c4:33:b2:92:ab:65:e8:57:5f:67:
5c:04:2b:b9:2b:b3:8f:5d:bc:5e:27:22:2f:e6:1d:2f:cd:cb:
95:38:60:33:44:d6:71:1d:df:65:61:e3:c1:d7:c6:64:17:eb:
21:09:ce:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org