Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BgGdTGFUrNb29kobfquNQL596bE.roa
File: BgGdTGFUrNb29kobfquNQL596bE.roa (raw, json)
Hash identifier: MIZ38xBimQnT/vdDuTkgkjRhX1fwCDh4Nu3tMZidXX8=
Subject key identifier: 06:01:9D:4C:61:54:AC:D6:F6:F6:4A:1B:7E:AB:8D:40:BE:7D:E9:B1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 17D7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BgGdTGFUrNb29kobfquNQL596bE.roa
Signing time: Sun 07 Feb 2021 12:24:02 +0000
ROA not before: Sun 07 Feb 2021 12:24:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6103 (0x17d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:24:02 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=06019D4C6154ACD6F6F64A1B7EAB8D40BE7DE9B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:69:cb:ee:dd:d4:47:b5:16:98:ed:39:ce:11:
8c:be:98:47:b2:70:3c:e7:0b:43:5b:b3:d2:4c:25:
e6:a2:c7:28:13:55:0c:44:d9:ac:21:af:b9:6f:5e:
c1:8c:1b:b6:aa:7c:1a:12:18:c4:88:01:65:0b:09:
84:36:44:0e:1b:ef:f3:dd:37:a7:50:56:65:c6:b1:
70:e3:c3:c1:7b:18:d3:16:93:75:d6:34:aa:7c:1e:
c8:b7:87:87:cd:bd:c4:ca:cd:65:18:14:fd:54:b9:
4c:61:b2:03:9d:13:93:13:63:92:ae:d3:d5:ef:12:
fc:9c:70:ec:2f:ab:03:dc:b7:5e:95:a9:4c:32:76:
c5:96:25:db:71:fe:1b:82:12:a3:c7:46:53:ec:e5:
62:6a:c9:c5:10:40:7e:3c:ae:5c:7a:3c:7b:38:9f:
23:35:e5:37:0a:3e:eb:5a:34:61:7a:b7:91:00:7c:
a0:42:3f:21:be:21:d1:96:9b:25:25:ab:67:d9:e1:
86:f7:75:1e:99:25:7c:d1:8b:2e:4d:2f:95:44:5d:
1c:d8:85:6b:2e:68:5d:ce:ec:f0:40:03:91:11:40:
1b:2d:09:5a:07:d4:83:e1:0d:a7:1d:eb:8b:1f:82:
26:1d:f1:20:a4:e9:4b:47:12:70:b2:dc:ab:b8:9c:
e8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:01:9D:4C:61:54:AC:D6:F6:F6:4A:1B:7E:AB:8D:40:BE:7D:E9:B1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BgGdTGFUrNb29kobfquNQL596bE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.132.0/22
Signature Algorithm: sha256WithRSAEncryption
24:d3:2d:8e:85:8f:59:7e:35:c1:e9:fd:d6:ef:2f:9e:34:58:
c1:5a:cd:20:a8:fa:45:4d:80:1d:a2:0b:86:6d:b9:95:5f:c5:
e3:50:54:4b:ee:fa:f8:4d:80:b9:85:49:02:08:34:d1:c7:ec:
85:86:8f:23:7f:ee:d5:87:77:86:50:1b:48:fe:11:c7:68:4d:
19:42:29:dc:ad:ce:6c:3a:81:91:74:14:fc:00:19:3f:3f:72:
14:38:72:8c:68:17:6b:64:35:bc:14:47:ab:1e:51:00:dc:39:
63:10:be:b9:55:37:5c:d8:00:aa:8f:0b:81:eb:e6:b1:13:94:
22:b4:a1:14:3d:72:af:c5:58:05:da:d3:b9:ed:48:8d:d7:74:
a5:73:d3:5e:5a:dc:cf:75:4c:24:4a:f5:09:4a:d8:9e:74:c9:
6e:af:ba:6c:a5:a9:8f:65:b2:7a:d0:66:6e:e7:e9:99:80:34:
e7:eb:4f:92:fa:28:32:72:5f:d9:43:90:b5:08:66:cf:93:cd:
9a:8d:b5:c5:21:b3:d4:6c:df:71:b4:b7:84:bb:66:60:ad:cf:
a6:21:8b:54:18:29:59:dd:f3:62:e7:94:53:cf:72:b1:7f:e6:
af:dc:5e:7a:35:4d:6e:ef:64:16:eb:47:e5:79:45:34:99:63:
f9:b4:30:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:23 2023 by rpki-client on console-fra.rpki-client.org