Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Djcxb0DThikZjTeF0LBnwyMS5w.roa
File: 8Djcxb0DThikZjTeF0LBnwyMS5w.roa (raw, json)
Hash identifier: 1MqpzTPyYqbl0zOSj1ZxS05gZ7BBXWPwuBNpZZsEh8g=
Subject key identifier: F0:38:DC:C5:BD:03:4E:18:A4:66:34:DE:17:42:C1:9F:0C:8C:4B:9C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20AD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Djcxb0DThikZjTeF0LBnwyMS5w.roa
Signing time: Fri 25 Nov 2022 04:38:59 +0000
ROA not before: Fri 25 Nov 2022 04:38:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8365 (0x20ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F038DCC5BD034E18A46634DE1742C19F0C8C4B9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:53:52:96:03:ff:7d:31:d0:9b:ea:87:d6:
3f:ad:64:cf:30:ad:70:8f:87:c0:1a:d8:8c:54:8c:
83:60:d8:a2:78:7e:de:fc:95:42:56:a0:9d:dc:11:
bd:e1:a6:80:b4:95:06:a2:24:b3:aa:fc:3e:49:23:
e4:71:5f:df:4d:a3:6c:fa:08:c1:d7:0d:86:12:ac:
b4:81:c7:e4:3a:dd:da:3e:c3:06:a8:72:e7:10:6d:
f1:ef:2b:3c:1a:3c:97:51:21:d9:b8:f0:6e:80:be:
ec:1b:d3:19:e0:6d:73:5f:f7:da:b4:87:94:90:2d:
c0:65:34:5a:b3:e7:e3:02:5e:7d:ff:fd:94:01:79:
cf:e0:c4:70:05:57:53:67:10:0b:22:d6:1c:d9:ca:
d0:5c:54:4f:8d:e4:87:ab:a7:ff:f6:d3:e1:47:38:
a3:5b:e0:e4:11:49:ac:df:95:9b:f0:bf:1d:66:8d:
9b:05:f0:16:a8:9a:45:ff:91:c3:d3:84:d3:a5:6c:
ac:26:c9:a9:d1:ab:f9:b5:c9:36:a8:99:eb:59:7b:
16:04:f5:5a:02:d3:32:0a:02:54:17:a0:33:24:8d:
f3:7f:22:77:c5:60:76:3b:a6:7a:9b:bd:85:9a:27:
7a:19:1d:48:ee:e9:ac:52:e9:a5:6e:8e:92:bb:10:
45:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:38:DC:C5:BD:03:4E:18:A4:66:34:DE:17:42:C1:9F:0C:8C:4B:9C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Djcxb0DThikZjTeF0LBnwyMS5w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.24.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:b2:42:c1:2e:9f:1e:ab:71:ef:57:bb:a9:f6:4a:54:99:b3:
03:49:b8:9e:8d:fa:28:04:4d:6d:a3:9b:12:8e:32:3c:b2:18:
f9:44:dc:f0:35:c6:52:fd:48:68:10:61:10:c1:d2:b1:8f:89:
33:47:b0:07:90:b3:de:08:aa:47:8d:a1:3f:a9:20:63:e1:54:
b5:dc:5a:ee:56:89:d7:45:aa:d5:06:88:b5:d9:63:36:3b:9b:
fa:5d:d4:b3:e9:80:46:ae:84:6e:e6:aa:60:e0:e3:bb:81:53:
7d:43:4f:ce:2a:10:07:5a:1b:2a:48:3e:76:2c:2c:d8:1d:8c:
bf:8b:cb:ac:6a:df:73:35:ad:8c:15:a9:31:dd:7e:0a:9c:73:
b5:e6:3f:cf:76:36:c1:4d:6d:19:55:3f:41:dc:56:78:b8:a6:
31:35:38:3c:0c:01:3a:99:77:66:f0:b5:c3:63:ee:1e:4f:c8:
d7:7d:bf:71:ae:43:7c:90:43:c9:1d:b3:71:8a:36:3c:4d:58:
c6:8c:a3:a7:fa:1f:7f:43:c9:6b:7d:84:f2:81:25:b7:35:de:
2d:b8:a0:db:19:6d:5c:ea:2d:5b:f1:09:7a:e0:af:2b:e0:7a:
f6:85:af:cf:e5:dd:ab:16:18:1c:e3:4d:7f:b9:df:bf:3c:89:
bd:b4:ba:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org