Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9cQL9JSZMGpjVAw7OarO6DbMLWs.roa
File: 9cQL9JSZMGpjVAw7OarO6DbMLWs.roa (raw, json)
Hash identifier: 9vHZut7mYJBIk7bGqhDUYOlDfKCqYo6a9vDgps5WQZI=
Subject key identifier: F5:C4:0B:F4:94:99:30:6A:63:54:0C:3B:39:AA:CE:E8:36:CC:2D:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D8F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9cQL9JSZMGpjVAw7OarO6DbMLWs.roa
Signing time: Tue 29 Sep 2020 09:54:42 +0000
ROA not before: Tue 29 Sep 2020 09:54:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3471 (0xd8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F5C40BF49499306A63540C3B39AACEE836CC2D6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:85:89:6c:fc:2d:e3:d8:f7:69:09:24:d4:44:
77:17:9d:aa:e4:c8:29:24:c2:4d:44:3d:7b:63:be:
03:65:b5:0c:1b:0d:31:b8:c2:2b:6e:fa:fc:4e:e7:
63:d9:eb:2a:5d:65:4a:9e:3c:49:97:17:d5:2c:d8:
a6:30:21:81:02:8d:d5:4d:56:cb:24:e6:32:a4:fa:
ff:30:2e:7c:b4:b9:da:6d:bf:ae:f4:35:ea:90:ce:
27:bb:86:75:e7:fc:1a:f2:2f:b7:7d:dd:83:b0:2c:
2b:f5:65:e2:dc:98:3b:96:b1:2b:8d:5d:24:87:2b:
43:6e:29:8a:86:12:a9:fe:ec:c6:c3:7a:e2:9b:fe:
66:9b:d6:89:75:79:98:71:17:32:5e:3f:67:1d:32:
d5:f7:0e:2d:dc:61:30:52:3c:96:67:b4:51:09:4b:
32:b1:16:4f:66:4f:b0:70:52:4c:d0:50:e7:21:47:
b6:ba:6e:5e:11:32:c7:68:26:5c:92:f5:ee:1f:ec:
9f:79:09:32:e1:04:a8:97:4a:84:bb:a4:1b:8b:a3:
a9:b4:5a:9b:00:8f:a1:cb:02:c8:b3:bc:89:bb:0a:
8e:19:d5:f5:94:6d:51:49:3b:af:ee:94:c9:85:1a:
d4:70:14:0c:cc:b3:c9:e0:e7:f7:98:9b:c7:27:4c:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C4:0B:F4:94:99:30:6A:63:54:0C:3B:39:AA:CE:E8:36:CC:2D:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9cQL9JSZMGpjVAw7OarO6DbMLWs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.152.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:05:b7:d9:a6:71:e0:d8:43:fa:57:51:af:24:6a:e7:9e:aa:
a1:36:6f:f4:ad:b2:c4:cc:c0:e3:3c:b4:c2:4f:e6:8f:31:ad:
f3:02:9f:30:73:35:45:8a:5f:e0:50:a1:e7:4d:fe:77:78:74:
ac:ed:d2:84:10:f0:41:54:e1:3c:e3:83:19:25:9d:97:23:b1:
a3:c4:27:98:a2:99:3a:5b:ec:1b:68:0f:81:a5:5e:4e:7e:1a:
28:20:58:68:a7:2a:1c:ca:4f:99:7d:5c:a1:d8:e4:ba:0c:c8:
83:d4:7b:e0:24:0d:c0:c1:d5:24:5e:6e:bf:31:5f:a7:9a:a4:
b2:c4:5f:23:63:d2:74:e2:ea:23:6e:2a:25:d6:ca:19:cc:7d:
81:c3:a7:30:38:bf:11:87:49:8b:68:51:f5:16:ee:05:93:3f:
80:26:1d:7c:fa:cc:7e:9a:2c:68:ff:4e:e1:b6:01:6d:7f:43:
3c:6a:e6:5f:23:e6:fb:66:61:35:2f:7c:5d:e2:62:4a:4d:22:
f7:b1:f1:4c:61:53:c6:81:7f:23:c2:32:64:58:55:92:ed:dd:
f8:03:4b:5d:55:8b:be:76:ee:63:7d:a5:d6:92:fb:2b:3d:c9:
57:87:2e:b1:f6:df:c6:a4:ae:bc:be:f3:b5:9b:07:fc:1f:eb:
18:2d:9c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org