Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/As4WKRBFDi_nhPqYseckljJoGcs.roa
File: As4WKRBFDi_nhPqYseckljJoGcs.roa (raw, json)
Hash identifier: 0NliHpQKYhJwoG5S9u+usZ/7SP98nZX2g8DwdUHR7t8=
Subject key identifier: 02:CE:16:29:10:45:0E:2F:E7:84:FA:98:B1:E7:24:96:32:68:19:CB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/As4WKRBFDi_nhPqYseckljJoGcs.roa
Signing time: Thu 15 Sep 2022 02:44:47 +0000
ROA not before: Thu 15 Sep 2022 02:44:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=02CE162910450E2FE784FA98B1E72496326819CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:b4:e3:3f:05:04:f0:5c:f1:ef:7f:d8:be:
9d:9f:72:f8:85:13:5e:21:b2:96:33:4d:23:ce:b8:
0a:0e:5b:71:be:99:c7:3a:b5:4d:d2:28:47:d9:b7:
0d:5b:a0:ad:71:36:b5:26:f8:a1:2d:6c:7c:4c:a3:
e8:fd:ed:ee:7d:e1:4f:f8:f1:2a:6a:4a:b4:a9:a0:
a9:ba:5d:80:5c:5f:4b:85:1a:7a:68:c4:8e:62:44:
aa:6a:99:76:7a:20:a1:dd:a6:3e:b7:26:29:a7:b2:
99:8b:57:3d:cf:45:d5:e2:0c:e0:82:34:35:87:db:
a9:dd:ae:3b:65:f4:b1:b6:ef:8d:7c:5e:9b:16:3c:
49:81:8a:93:b1:a6:96:6e:db:0d:fc:90:a6:bb:33:
4e:cf:3d:3b:45:de:de:55:09:b3:df:8d:92:64:c6:
94:d6:34:59:d3:c3:aa:e6:7f:4a:92:9e:87:6d:bb:
71:f7:2c:67:06:cf:e9:fe:be:a1:86:33:47:cf:65:
c4:84:b8:c6:82:ea:b9:5e:59:77:88:c5:eb:40:e3:
ad:42:33:a1:ae:1f:6f:c4:76:3b:64:ef:14:24:13:
f3:60:2f:73:b5:57:43:f4:0b:d9:12:ca:37:bb:a2:
66:06:a6:4f:0b:55:cd:df:f5:24:08:e2:66:32:b4:
e7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CE:16:29:10:45:0E:2F:E7:84:FA:98:B1:E7:24:96:32:68:19:CB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/As4WKRBFDi_nhPqYseckljJoGcs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.64.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:9f:ed:ac:8d:ca:2c:bc:fd:73:0d:15:7f:1f:80:a2:61:9c:
42:a5:3a:31:4e:f2:be:94:09:3e:c4:ef:47:9f:2a:52:04:2f:
87:97:17:eb:f0:5b:a7:97:f6:f3:4e:d7:56:14:7f:a3:a9:be:
d4:06:df:93:76:7a:0a:bd:23:89:ce:71:6e:a0:36:e4:2e:12:
42:aa:c9:0a:7f:dc:a6:23:4b:0b:f9:09:e2:76:bb:67:51:6b:
63:b4:0a:bd:ca:b5:49:73:bb:00:11:d7:20:a1:f4:4a:eb:61:
59:62:80:39:f9:0d:ad:f5:7e:16:c0:09:ea:cb:b0:9b:a2:bc:
ab:52:0a:4f:ef:4b:0d:a2:03:54:86:ba:1d:f1:1f:24:4c:9a:
8b:82:8d:79:c6:bc:c3:b5:18:29:15:88:26:9e:00:d5:c6:69:
92:96:98:6f:fe:55:0f:c0:a9:e8:f6:a9:4b:2a:a5:9c:38:0b:
b0:0a:68:b7:70:0d:9d:fe:55:fc:01:13:7f:83:55:aa:8d:d2:
ad:43:b9:35:54:f0:67:a3:d4:b7:3d:f1:6a:8f:17:4e:8e:be:
f7:6c:c5:2a:bb:f3:57:e4:34:47:4f:3a:50:1c:b1:f6:30:76:
fe:40:d3:da:88:f5:8a:7a:7e:b6:fa:54:54:fd:56:35:0a:6b:
f9:56:10:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org