Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CY1GMZMDFvjptBlZYLGyYvV5SNk.roa
File: CY1GMZMDFvjptBlZYLGyYvV5SNk.roa (raw, json)
Hash identifier: ies2GVstkwOoMMBddldPiTNAXH86bCBJMw5FEJQu5vI=
Subject key identifier: 09:8D:46:31:93:03:16:F8:E9:B4:19:59:60:B1:B2:62:F5:79:48:D9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 148B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CY1GMZMDFvjptBlZYLGyYvV5SNk.roa
Signing time: Sun 07 Feb 2021 11:59:04 +0000
ROA not before: Sun 07 Feb 2021 11:59:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5259 (0x148b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:59:04 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=098D4631930316F8E9B4195960B1B262F57948D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:ea:40:57:2b:e9:f7:92:72:66:ea:6e:11:
a7:69:90:b2:ee:13:0d:b5:92:f5:c9:3e:32:d5:f4:
f7:91:fa:ed:2d:24:c2:c1:ff:68:ac:2e:8f:9b:a2:
ee:36:a3:d9:7c:4c:91:81:5f:0e:0e:5e:17:e5:b1:
ad:fc:e4:41:2b:3e:66:76:b4:9e:90:3c:af:43:19:
04:73:2b:10:19:69:b3:ba:93:37:69:7e:0c:70:ac:
59:cb:2b:14:66:fd:f0:ac:fa:59:df:85:9a:1e:e8:
54:d7:e5:0b:2d:12:4c:3d:03:9d:1c:f1:3d:90:77:
c1:de:b5:5b:39:8f:f1:bb:1f:99:9c:c6:c4:ab:0a:
85:2a:55:9c:40:9d:e1:c6:9c:6e:4d:67:1e:2f:8a:
db:14:53:c0:52:73:0a:95:31:33:b0:0e:39:e4:56:
dd:aa:d9:33:07:c2:9a:07:83:1d:2e:c7:45:16:26:
fc:1d:84:85:f8:18:0f:01:02:5c:38:24:8d:4f:56:
8d:f5:52:c1:9d:98:88:0c:62:b3:95:3b:93:76:05:
31:ad:89:0b:28:ec:8e:e1:4e:80:f7:d0:3e:2c:95:
d5:32:d0:61:65:66:ca:89:b3:cb:e9:7a:aa:59:0b:
3c:3a:97:78:a6:f4:1c:12:31:cc:75:fa:a0:51:3d:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8D:46:31:93:03:16:F8:E9:B4:19:59:60:B1:B2:62:F5:79:48:D9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CY1GMZMDFvjptBlZYLGyYvV5SNk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.228.0/23
Signature Algorithm: sha256WithRSAEncryption
60:a1:31:1a:15:cb:8d:6c:94:82:28:be:98:54:dc:ce:6e:92:
78:62:c9:78:ae:68:6e:10:b9:31:95:d3:65:24:d6:ec:fd:11:
eb:b4:b7:b9:12:97:ae:7d:76:db:10:c2:31:91:7b:f5:27:18:
e7:03:93:64:ce:d8:ed:22:e9:ad:cb:67:bc:b8:68:97:3c:6f:
83:d7:61:74:4a:c4:55:86:1e:5a:f6:dc:66:6e:0b:0d:69:c5:
5a:e4:24:86:4c:7d:4b:5a:da:d8:5f:b3:03:6d:92:76:8f:c8:
d2:89:12:53:d2:b6:3a:03:dd:44:60:b5:dc:c5:b0:bb:b4:19:
46:0e:36:bd:da:9d:62:97:63:90:50:05:a0:73:1e:e4:61:61:
5b:fe:51:b5:f1:0f:0e:64:e9:5c:af:53:88:09:14:3c:c0:64:
2f:2a:f3:a5:2b:81:cf:c1:19:9f:9a:1b:d2:e5:22:1f:01:0d:
65:09:63:c4:31:19:28:25:49:7a:50:5b:c5:03:31:b7:70:c9:
be:d5:81:04:ae:53:3b:3b:24:a4:e2:af:4c:fc:c1:cb:32:36:
7c:2e:10:99:ba:59:f9:02:32:92:9d:2b:0b:c8:7a:4c:60:1a:
c7:28:6d:82:89:34:82:a8:1a:49:6a:4f:d6:36:39:4c:cb:59:
bc:f2:c1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org