Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AZbjPztl3w2Z45a0HPorLeHyNjU.roa
File: AZbjPztl3w2Z45a0HPorLeHyNjU.roa (raw, json)
Hash identifier: Y46dK2YsQS35vJfldpk3laP/u59MLvF89K+FY0GTn+c=
Subject key identifier: 01:96:E3:3F:3B:65:DF:0D:99:E3:96:B4:1C:FA:2B:2D:E1:F2:36:35
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2316
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AZbjPztl3w2Z45a0HPorLeHyNjU.roa
Signing time: Fri 25 Nov 2022 04:42:01 +0000
ROA not before: Fri 25 Nov 2022 04:42:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8982 (0x2316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0196E33F3B65DF0D99E396B41CFA2B2DE1F23635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:39:b9:78:84:3e:b9:a6:92:48:a1:4d:83:7c:
73:f8:88:7f:bf:43:fa:f7:25:f1:81:d5:61:e4:ea:
2b:89:c3:d2:15:54:97:70:29:21:1b:be:f1:cc:21:
c3:ec:7b:1d:93:17:dd:9e:31:8a:cd:f3:70:08:b2:
41:05:52:03:97:c3:0e:59:5a:5f:29:fc:fd:cd:d7:
f9:10:a2:8b:6d:4a:09:47:ed:4e:42:e7:4f:a0:2a:
0e:de:8b:bd:3b:cc:46:c4:a7:92:82:94:00:5c:24:
6f:fc:d0:26:7a:f2:a5:69:f3:02:fc:35:6a:33:a0:
38:6a:ab:18:25:9a:2d:a1:5c:1f:3b:2e:58:49:1d:
4a:e6:1c:4d:9d:6a:6b:4d:c2:7c:20:c9:5c:17:6a:
63:75:7e:2a:ba:8a:8d:73:b5:ac:f3:0d:fa:75:da:
e6:89:de:a7:a7:42:f5:93:9d:d9:5e:3c:d6:61:88:
00:17:d2:47:d9:a4:40:65:5a:7a:55:56:4a:13:1c:
79:a1:eb:57:36:2d:77:23:ba:11:b2:34:57:16:41:
6e:86:ad:d4:d0:7c:70:29:16:e2:cd:19:38:7a:41:
3b:2c:d6:48:60:a4:f6:fa:ac:a8:62:60:64:7c:b3:
7d:ec:78:f8:79:a7:ea:7d:66:31:e0:2f:c7:9b:d6:
82:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:96:E3:3F:3B:65:DF:0D:99:E3:96:B4:1C:FA:2B:2D:E1:F2:36:35
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AZbjPztl3w2Z45a0HPorLeHyNjU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.152.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:2d:a1:b5:5c:0e:c2:81:23:d7:88:c5:f0:43:e6:d2:88:4f:
ce:b8:cd:82:b5:b9:1a:dc:0d:0c:e5:12:44:c3:72:37:f6:7f:
0e:d4:86:b9:56:df:f5:71:69:6e:99:da:a1:69:dc:f7:f7:6d:
0e:b5:f0:49:4b:e5:25:47:54:4c:32:19:e4:d4:d1:93:3d:3b:
52:aa:64:fc:32:f9:14:be:11:6f:12:3b:ff:aa:c2:10:04:36:
8f:94:b0:73:2e:82:27:bf:38:e9:fe:3e:9d:62:1e:90:f1:aa:
88:2d:b8:9d:9b:bf:59:51:be:a7:86:8f:38:eb:72:bd:13:94:
ee:47:f7:68:bb:6f:34:87:8d:63:a1:75:de:4a:1e:4b:95:09:
5a:fc:42:3d:95:0b:d3:55:06:67:1d:a6:3e:ed:40:b4:c3:25:
e6:97:c9:24:bf:f6:59:5d:cd:e1:0a:b8:a5:76:3a:aa:1d:ba:
34:4c:23:5a:dd:fb:06:77:a8:fc:92:30:45:2a:da:d9:05:03:
fd:7e:51:6c:31:3e:43:08:6b:4e:85:5a:0a:ea:ab:2c:f3:9b:
85:cb:70:9d:57:e0:36:b3:ba:53:8d:0d:51:69:7d:e3:89:b3:
ea:6e:ef:7a:54:1d:5f:01:7e:c9:74:bd:0d:47:a0:0a:73:59:
d8:cb:cd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org