Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A9NSIrXUCMOKTpVtqVKT8vh-4Wg.roa
File: A9NSIrXUCMOKTpVtqVKT8vh-4Wg.roa (raw, json)
Hash identifier: 01o6wJEZ5su62iFUFvO+Oezwehcqr6KJkMySIxgbJxs=
Subject key identifier: 03:D3:52:22:B5:D4:08:C3:8A:4E:95:6D:A9:52:93:F2:F8:7E:E1:68
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 17DB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A9NSIrXUCMOKTpVtqVKT8vh-4Wg.roa
Signing time: Sun 07 Feb 2021 12:24:10 +0000
ROA not before: Sun 07 Feb 2021 12:24:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6107 (0x17db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:24:10 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=03D35222B5D408C38A4E956DA95293F2F87EE168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:63:e5:47:b6:0b:ad:4b:81:d2:a8:cb:e8:
d7:4c:eb:81:33:cb:b7:ed:8e:c6:df:93:94:9f:4f:
37:78:a8:7c:68:94:62:ff:3f:2e:cd:b2:c9:7a:34:
ec:87:e3:68:17:b3:3c:22:cf:d0:59:c4:3a:9e:fc:
e7:fa:b7:e7:43:87:e9:85:fe:10:1c:7c:5e:33:c9:
73:9e:ea:8e:0d:d6:d6:85:ea:24:e5:9d:95:bf:b4:
29:e7:aa:a4:81:8a:e1:c9:0e:dc:ed:08:33:2e:ac:
7e:af:77:98:87:62:1b:9e:bd:6f:88:c2:4f:fa:6b:
29:42:40:d8:fb:a5:07:4b:0b:f5:cb:d0:50:c1:57:
2d:2b:d8:64:d8:13:57:94:1f:b4:70:a5:90:cd:0e:
d8:13:c9:69:c5:40:8a:58:30:11:b5:e7:09:70:10:
82:e2:51:1d:15:1e:97:64:0a:d2:03:fd:77:2b:91:
54:d4:2f:fe:ce:ec:0d:7d:34:f4:96:25:28:48:c1:
ac:a0:aa:b9:47:24:15:a5:ce:36:dc:e0:db:d8:87:
58:1e:0a:c9:b9:30:0c:02:2f:09:52:52:86:39:39:
b0:47:72:bd:f9:98:17:29:7e:16:df:ee:f9:6a:42:
2c:dd:d0:f4:a8:4a:c4:bf:da:5b:d1:0f:68:d8:6c:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D3:52:22:B5:D4:08:C3:8A:4E:95:6D:A9:52:93:F2:F8:7E:E1:68
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A9NSIrXUCMOKTpVtqVKT8vh-4Wg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.140.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:a8:be:60:fc:09:61:11:c3:4b:02:84:3e:7a:55:16:0f:54:
c8:86:92:e7:6a:9a:94:3c:31:90:05:18:a0:6f:5b:da:f9:ef:
c4:8f:d4:df:50:06:40:70:11:a7:dc:11:3c:4a:7b:2b:10:e3:
4a:be:7a:89:bd:ba:c3:8a:47:c7:a0:45:76:d5:38:32:43:80:
ee:e3:cd:2b:63:d5:d5:8a:88:09:d0:b6:0b:f1:ae:36:2f:e6:
f2:a1:3f:d9:be:f1:80:82:21:94:1f:ef:69:0b:96:ca:ed:88:
02:4b:93:02:3b:21:a2:18:9d:82:6a:7f:6d:38:4c:66:05:14:
6f:ca:54:f9:b2:5b:cc:ce:4a:35:88:25:08:ae:fe:26:66:72:
8a:5c:88:be:ba:27:31:77:79:0c:95:cd:d7:b6:9b:3c:b3:a8:
f8:f1:4b:16:75:a3:5d:58:7f:02:77:30:eb:13:fa:fa:d0:8a:
1a:98:5a:39:1a:8a:d9:9f:a0:4d:22:ce:e7:dc:3d:d3:d7:47:
b2:bf:4b:22:da:e5:0b:a3:58:de:50:c4:84:4f:61:59:5a:e8:
9b:0d:21:63:f3:a4:ee:08:f3:d5:e8:5d:3d:42:7b:d4:3c:69:
ae:c9:78:b0:8e:84:7d:da:dd:ed:93:e5:b6:99:1d:d3:de:bc:
19:dd:87:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:23 2023 by rpki-client on console-fra.rpki-client.org