Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C1NuKOQB2PY5b-HnlOr3C-LGYQw.roa
File: C1NuKOQB2PY5b-HnlOr3C-LGYQw.roa (raw, json)
Hash identifier: XxhqYbIWwBPSWiu5e7pP1CHYSwcr8ZWCIvYQwyOlFjM=
Subject key identifier: 0B:53:6E:28:E4:01:D8:F6:39:6F:E1:E7:94:EA:F7:0B:E2:C6:61:0C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20CC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C1NuKOQB2PY5b-HnlOr3C-LGYQw.roa
Signing time: Fri 25 Nov 2022 04:39:07 +0000
ROA not before: Fri 25 Nov 2022 04:39:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8396 (0x20cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0B536E28E401D8F6396FE1E794EAF70BE2C6610C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:d4:7c:dd:12:5a:8a:bb:6f:87:a3:d0:10:
8d:ac:ae:6e:52:94:c5:2d:e6:05:f6:d0:e2:ba:2b:
22:01:ff:c6:23:c1:57:e2:41:36:be:27:48:ae:46:
65:60:74:38:89:3d:25:b2:58:d6:57:d3:04:c8:fe:
2a:fe:b5:aa:67:e7:8b:31:e1:ab:21:f6:73:09:69:
10:21:06:21:34:0d:d6:e4:2b:d4:fe:ab:6e:04:1e:
19:a0:64:34:9a:b9:6d:e6:d2:93:ee:e0:f4:1f:de:
62:d7:3a:35:15:9b:a7:f4:16:49:1a:e8:6a:a4:95:
bf:ab:f0:16:4d:4b:66:63:ed:90:39:e8:0c:02:7f:
db:84:cd:4f:92:0b:5d:03:c5:b5:c7:ca:c9:94:ef:
c7:4e:40:a4:0f:bc:41:50:2d:47:1d:a9:0f:c9:01:
38:88:bd:76:f3:5d:cb:8b:28:8d:30:88:c0:ca:52:
36:29:6e:09:fd:ba:92:b5:24:08:1b:0a:c0:85:e1:
ca:61:44:b4:a5:8d:bb:74:bc:ce:c5:22:23:9e:6f:
f7:4a:31:a8:39:d6:b6:18:85:d4:80:fc:3c:bf:51:
0f:d0:0a:56:c4:56:d6:8b:88:21:25:98:b1:93:3c:
73:69:11:3b:96:24:1f:6e:e1:55:f4:74:87:04:65:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:53:6E:28:E4:01:D8:F6:39:6F:E1:E7:94:EA:F7:0B:E2:C6:61:0C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C1NuKOQB2PY5b-HnlOr3C-LGYQw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.160.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:97:4d:39:c6:d9:7d:98:5b:d7:61:20:ad:98:57:d0:99:73:
cb:5a:5d:58:b7:d9:32:40:38:f7:c3:3d:17:ff:63:7a:de:f1:
00:32:7c:c1:6b:60:ac:04:33:99:85:33:32:55:bd:5f:6a:cf:
6e:bb:aa:eb:03:28:eb:46:69:48:a6:82:6e:dc:11:cc:23:77:
44:21:f8:cb:94:52:8f:bb:66:9e:c0:4b:34:6e:75:dd:fe:0b:
f6:06:00:3b:c2:88:11:34:4b:03:22:6a:3b:c5:bb:e2:4b:cc:
f4:d6:89:cd:f5:50:ac:e7:00:2c:d4:85:3c:78:c1:a1:f1:be:
c8:db:b2:60:8d:ec:df:df:64:8e:28:5e:ac:fc:89:73:92:f1:
53:40:6c:3f:fb:6e:3f:69:cd:6c:0f:b1:b7:e4:62:63:a2:9a:
a8:cd:5c:be:28:a3:c8:19:c3:cf:98:42:df:22:b0:94:92:df:
02:5d:c0:f4:c9:49:a5:2e:76:36:14:7f:82:9e:0e:e6:fd:15:
b3:26:f1:0b:55:4f:ec:84:db:6f:46:ce:d0:d3:15:79:84:e4:
a0:55:28:19:b3:0b:52:2b:05:4d:aa:db:2b:5d:75:83:ee:5b:
b7:89:58:c5:03:d6:a5:2d:5a:7d:48:20:c1:98:82:55:60:b5:
cc:36:58:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org