Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Aorjos2uk5B2ODTTHvRLwoIWpNk.roa
File: Aorjos2uk5B2ODTTHvRLwoIWpNk.roa (raw, json)
Hash identifier: lSuhlF1jyeURqTckqbmQA6OWsatdjNOkk83WuHogfUM=
Subject key identifier: 02:8A:E3:A2:CD:AE:93:90:76:38:34:D3:1E:F4:4B:C2:82:16:A4:D9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Aorjos2uk5B2ODTTHvRLwoIWpNk.roa
Signing time: Thu 15 Sep 2022 02:53:11 +0000
ROA not before: Thu 15 Sep 2022 02:53:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=028AE3A2CDAE9390763834D31EF44BC28216A4D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:1a:ca:6b:15:31:51:89:1f:ba:32:66:7d:
ab:8e:5d:5c:39:87:86:59:67:90:a1:61:ee:ef:77:
e2:b7:dd:0f:c1:4e:c0:1a:25:a6:a8:72:72:b6:54:
21:aa:2d:a3:ea:15:20:5b:7c:71:e7:e9:e5:90:99:
c1:00:1b:d7:05:b7:1b:d7:57:df:7f:af:f8:e8:13:
09:8a:95:3d:92:f8:26:df:7c:67:45:17:6d:89:bd:
bc:53:e9:96:d7:14:40:8a:76:73:cd:ad:2d:5c:78:
11:3d:df:3b:df:f0:93:14:9e:8b:f2:83:3c:26:e3:
15:ac:d2:cd:3c:e2:eb:94:8c:4b:8d:5f:64:1d:9e:
89:59:fd:c0:78:8f:67:bc:41:f0:5c:2d:75:48:b3:
0e:24:54:00:f7:e4:e0:84:1c:ce:0c:87:61:4b:27:
56:d9:2f:0b:65:ab:13:3c:84:02:5c:2b:7f:69:72:
08:bb:7d:c2:68:f3:50:01:ae:66:03:eb:cc:42:c4:
3b:6e:f9:3f:09:4c:43:5a:9d:82:5c:b8:89:d0:81:
b5:9e:db:e1:6a:be:32:67:12:e8:a3:8a:a0:d4:cc:
42:ee:74:a4:04:6a:fb:c5:f7:1c:6f:af:4e:da:58:
40:49:ba:45:ac:48:22:1e:fc:b2:f5:ff:db:ce:69:
5b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8A:E3:A2:CD:AE:93:90:76:38:34:D3:1E:F4:4B:C2:82:16:A4:D9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Aorjos2uk5B2ODTTHvRLwoIWpNk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.40.0/21
Signature Algorithm: sha256WithRSAEncryption
15:ef:c5:b5:5d:c6:ed:65:61:b6:35:f0:49:3c:60:27:17:47:
df:64:61:f2:15:2d:68:15:47:06:05:dd:10:e1:4f:ae:3c:71:
25:6b:d4:1b:a9:3b:89:d6:5e:84:f8:07:0f:31:f6:f4:22:5b:
43:0a:d3:54:09:cd:ea:6b:c7:8b:af:52:26:7e:2f:32:57:56:
aa:8e:83:ec:2c:41:98:30:34:1c:a1:53:2a:bf:b7:ad:3f:ed:
d3:11:77:97:a4:4b:3e:a6:f2:3f:05:93:63:8f:f2:f7:4f:82:
06:ff:d2:08:22:d1:6e:e3:05:cc:09:22:0e:6c:8a:c2:77:40:
b5:0c:26:ab:7f:8e:6a:ea:28:c4:33:76:06:5c:7f:80:ab:a2:
17:52:94:9b:73:63:72:e7:a6:8e:dd:2c:ce:60:89:07:b1:8f:
2b:ca:fb:85:e3:e2:b0:ff:d6:fe:9f:4d:b4:50:10:7d:02:d2:
6b:5b:4b:13:59:70:02:56:f5:7c:15:a3:0d:59:bb:96:26:c4:
d8:72:f9:d8:64:fe:2e:16:7d:08:f4:8e:c9:7a:19:46:81:d0:
f9:aa:7e:86:4c:d8:ca:8b:a5:d1:b3:f0:d2:41:41:54:c5:19:
7e:54:82:b0:f2:00:50:a9:a7:a7:13:11:2e:a3:1b:2a:37:d2:
20:ec:f1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org