Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BuB2EdCR-7nlYJPTUJKDFtyVUQI.roa
File: BuB2EdCR-7nlYJPTUJKDFtyVUQI.roa (raw, json)
Hash identifier: eMT7ACZhT631No4V8uz5fBiCq1GCTr2DldsXNczurlw=
Subject key identifier: 06:E0:76:11:D0:91:FB:B9:E5:60:93:D3:50:92:83:16:DC:95:51:02
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1ACA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BuB2EdCR-7nlYJPTUJKDFtyVUQI.roa
Signing time: Wed 29 Sep 2021 02:45:46 +0000
ROA not before: Wed 29 Sep 2021 02:45:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.177.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6858 (0x1aca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:46 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=06E07611D091FBB9E56093D350928316DC955102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e2:f7:91:54:72:51:fd:56:1b:a8:b3:b4:6d:
7d:f5:84:d8:f6:d9:e0:19:8e:be:ca:3a:cb:3f:75:
14:b8:33:f4:4a:d2:79:47:48:84:90:9a:44:31:7a:
c5:1d:c4:c6:21:e9:71:4f:8f:32:a7:24:84:d3:2d:
43:41:71:26:3c:e1:92:93:6f:9c:72:85:3e:3a:cb:
33:75:4a:d8:62:40:85:a7:43:25:0b:22:db:1a:64:
d7:0e:38:9a:84:3b:bb:0e:85:c6:ed:05:03:6e:92:
97:80:16:a4:66:e5:b9:40:f4:a8:d5:f9:69:a1:61:
57:84:0e:68:67:35:cd:8a:64:12:c5:99:e8:45:7f:
78:d8:6f:a0:c1:3e:17:a6:1c:db:0d:bd:d8:f6:a8:
c0:7c:94:2c:7b:18:e9:c2:d4:c4:c3:a3:f6:48:1c:
21:df:52:77:0f:ca:2e:3f:8f:b4:51:93:14:5c:70:
7f:a6:0f:05:07:de:60:4f:18:aa:9e:6a:92:18:b6:
98:e3:08:24:9a:5a:9a:f7:0e:a6:f1:d6:21:b8:8e:
c5:ac:8a:33:68:fe:4a:78:c8:34:dc:f4:ec:40:b0:
0d:8f:72:b8:31:bc:cc:8c:c6:8a:92:ca:d9:07:42:
eb:4d:72:73:db:55:fc:dd:2f:92:a5:55:2f:19:42:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E0:76:11:D0:91:FB:B9:E5:60:93:D3:50:92:83:16:DC:95:51:02
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BuB2EdCR-7nlYJPTUJKDFtyVUQI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.208.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:a2:dc:6b:7c:15:bd:1a:9d:0c:e7:ec:05:5b:b9:9b:2b:ef:
2a:83:c9:62:d5:af:8c:75:a5:b6:b9:b8:3c:81:95:19:cc:9c:
c1:61:b3:75:96:0d:61:53:8d:72:52:39:bd:fa:7a:e9:1d:ab:
de:07:ef:2a:f2:ea:20:ff:09:b7:2c:d6:6d:b1:b2:be:74:36:
20:3a:d9:aa:55:ea:28:1c:4b:21:3e:37:25:7e:12:09:de:9f:
dd:64:79:d8:61:c0:81:01:20:8a:1d:ac:7f:04:16:70:2b:af:
03:21:94:f7:4b:0a:60:de:06:3e:b9:8e:d4:1e:d5:1e:63:31:
ed:5d:c5:e2:d8:2d:d7:1c:c5:86:9b:9e:cd:b2:8e:6d:02:90:
ef:a3:c8:bb:7c:19:b1:48:a5:8e:50:6e:ac:d6:9e:aa:71:7b:
d3:a6:b5:2b:69:55:da:48:98:e1:cd:82:a8:e0:4b:f2:81:b7:
f4:51:a5:b4:d0:d9:1f:4d:d9:38:fb:74:a6:35:db:cd:30:a3:
99:be:98:8f:85:1f:42:33:a7:6d:5b:09:e8:d6:7c:42:e5:b7:
4d:fd:41:7e:a4:7d:96:24:6a:f4:c3:95:e6:f0:10:9a:06:7d:
5a:e8:a0:4b:71:a7:2d:95:eb:c0:de:00:b2:b0:c3:74:6a:03:
06:ae:41:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org