Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cyz-wIGvjoA4bH0Um4LPE0-uY5w.roa
File: Cyz-wIGvjoA4bH0Um4LPE0-uY5w.roa (raw, json)
Hash identifier: hYiIvaNtOAMNdWz805kEnCIo9IOl/6Dfs3CNHwlAlEo=
Subject key identifier: 0B:2C:FE:C0:81:AF:8E:80:38:6C:7D:14:9B:82:CF:13:4F:AE:63:9C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BF0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cyz-wIGvjoA4bH0Um4LPE0-uY5w.roa
Signing time: Wed 29 Sep 2021 02:47:11 +0000
ROA not before: Wed 29 Sep 2021 02:47:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.176.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7152 (0x1bf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0B2CFEC081AF8E80386C7D149B82CF134FAE639C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:5e:ba:90:18:cd:1c:a4:9a:77:86:69:9c:
18:8e:54:a6:9c:00:44:7d:e8:4d:98:17:9e:4c:0f:
b3:74:32:eb:50:df:02:c0:b9:8a:92:ca:5e:ab:81:
c1:f2:4a:a8:0b:37:64:c3:0e:ee:ff:64:ca:aa:6a:
35:54:d5:6e:c0:51:ae:95:bc:70:38:51:1d:0d:f2:
35:79:ce:fa:29:ba:81:71:16:4d:d8:b9:db:3a:d6:
0a:4a:14:68:53:55:5f:dd:37:b1:25:c9:13:2e:aa:
11:50:ee:ad:b1:0e:7f:76:db:66:0f:de:90:61:ae:
2f:cf:92:e5:e2:50:ca:70:35:13:8a:21:32:28:b2:
55:ac:11:af:eb:f6:89:bf:b3:60:90:dc:4d:a2:96:
d3:e7:d1:7c:90:65:33:97:6d:46:63:6a:3b:01:ba:
66:c9:27:b0:a8:c0:09:70:0a:b2:64:8d:c5:59:41:
39:ec:e0:4d:f4:a5:92:2b:f3:3f:17:c0:d6:f1:82:
19:a8:54:d9:7c:7f:17:22:0e:0f:e0:60:0a:2d:18:
5f:90:87:52:b9:09:0b:fc:fd:1d:59:70:02:00:d6:
3e:3a:82:4d:d8:2f:fd:de:88:cd:5b:1a:cc:31:7b:
22:af:bf:0f:12:26:fd:59:fa:e3:21:02:15:f2:45:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2C:FE:C0:81:AF:8E:80:38:6C:7D:14:9B:82:CF:13:4F:AE:63:9C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cyz-wIGvjoA4bH0Um4LPE0-uY5w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.80.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:ce:a1:a2:13:1d:b7:2c:c0:b2:0b:23:d7:17:8d:2e:40:c0:
f7:71:97:69:1b:97:e4:36:e5:8c:c0:06:c6:88:79:79:11:67:
6a:31:ea:d5:ee:79:dc:f8:c2:0a:b0:3c:6a:9a:b9:fa:93:df:
be:74:be:9b:01:ea:50:eb:b6:46:ac:11:cb:36:46:3e:b3:4f:
79:fb:ca:18:93:d8:cd:e7:e5:b5:56:e5:1c:2d:00:5a:ea:d5:
2f:9b:32:d1:99:0f:23:e5:a0:87:21:99:71:07:3a:12:b5:17:
84:dd:81:d3:48:df:bc:76:05:b0:e7:32:0e:a4:23:91:b1:13:
69:40:9b:80:78:dc:7b:11:53:da:a9:37:3b:66:0b:f9:1f:f9:
c8:a1:0c:fb:17:63:38:31:3e:fd:cf:86:2c:77:ce:4a:2b:8c:
60:1b:5f:cd:49:22:ea:a7:0e:1e:5a:6d:bd:d4:2a:0b:cd:83:
e2:9d:d4:60:80:9c:c3:00:72:a0:b9:d8:1f:6a:33:1b:51:f9:
44:67:7e:60:bf:28:b6:53:3b:67:2c:c1:e9:27:e5:42:75:a7:
0f:ae:bc:9c:6f:03:8a:32:d5:88:63:73:83:41:a4:c7:ee:04:
66:89:7f:49:19:0a:4e:fb:a6:2f:de:e4:f6:b9:d6:10:68:f3:
30:d4:b4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org