Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DD5CuljKpzEJxHx4eswb5jRRGyc.roa
File: DD5CuljKpzEJxHx4eswb5jRRGyc.roa (raw, json)
Hash identifier: 8eM9I56gurt36GwwfUGD328mLvfOXFVYxy0DNibO2r4=
Subject key identifier: 0C:3E:42:BA:58:CA:A7:31:09:C4:7C:78:7A:CC:1B:E6:34:51:1B:27
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2131
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DD5CuljKpzEJxHx4eswb5jRRGyc.roa
Signing time: Fri 25 Nov 2022 04:39:37 +0000
ROA not before: Fri 25 Nov 2022 04:39:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.126.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8497 (0x2131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0C3E42BA58CAA73109C47C787ACC1BE634511B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:bf:1f:15:cf:f0:1a:47:45:9b:36:04:6a:
5d:4c:40:7f:ff:d4:04:13:9a:74:db:02:f7:0e:7e:
58:1d:f0:08:8c:2b:2c:ca:1d:b3:73:9f:f3:d2:b7:
ae:dd:ef:88:17:9a:13:5e:3f:eb:16:0a:9b:d2:96:
57:c4:5e:6a:36:e5:92:87:3e:d1:e7:4d:04:ed:cb:
20:2c:95:c7:a5:4b:80:d8:45:f9:50:6b:31:80:15:
07:94:60:bc:05:97:e3:e5:57:9e:bc:2a:d6:ab:81:
48:0d:e2:67:40:1f:f0:e7:8e:e3:09:e2:a2:47:1f:
a1:8e:ee:68:62:1e:15:d4:41:1d:77:e5:1d:1d:47:
3b:c8:9f:96:a9:98:08:d8:27:5a:8d:72:34:7b:a7:
ef:27:f2:09:21:a9:b8:12:b7:0c:94:cb:7d:c1:f3:
e1:92:80:66:f4:41:de:01:33:13:c3:a0:c7:e1:bd:
f5:e9:53:87:6e:12:4f:03:33:ab:bf:25:fe:4b:2d:
a6:89:9d:6f:71:90:3d:a3:7f:1c:77:87:71:8d:4a:
93:f1:a3:a9:fa:2b:cc:3a:4b:05:ac:73:31:1f:e0:
53:3e:a8:d5:9e:f2:19:59:dc:43:90:fe:d6:a4:9a:
32:57:54:f4:3d:fd:ba:f0:e8:38:c1:b3:41:20:a3:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3E:42:BA:58:CA:A7:31:09:C4:7C:78:7A:CC:1B:E6:34:51:1B:27
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DD5CuljKpzEJxHx4eswb5jRRGyc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.126.0/23
Signature Algorithm: sha256WithRSAEncryption
92:aa:55:b8:19:c2:d8:a1:6a:b7:c5:84:8e:49:94:08:05:88:
0f:e4:dd:7a:0f:f0:82:34:a7:2a:22:13:f5:4f:c6:2e:44:bd:
ff:26:8e:fc:b9:99:44:52:df:91:34:42:7c:1e:a1:23:4a:cd:
3d:fa:b2:0b:46:6a:66:21:2c:32:21:3b:b5:b4:6c:c6:fd:9a:
3f:cd:90:22:b6:b4:7d:48:ca:9b:01:8e:95:89:44:c1:e3:a0:
00:85:4b:b4:ed:71:0c:d2:55:6b:2c:8e:98:67:52:de:d1:63:
9b:1b:0f:1a:65:1a:6f:c9:86:a9:4e:a8:50:ca:1a:3d:b5:76:
29:72:a8:d9:77:f9:2f:68:3d:ce:82:28:17:ad:16:f5:26:37:
6e:cc:92:e3:52:d3:f3:45:ca:76:bb:a3:3b:35:c9:00:e8:cc:
21:6f:ab:c1:38:f2:fa:73:be:4b:0e:32:51:f0:3c:36:d1:67:
6e:06:ef:7d:1f:2a:5a:d7:1a:58:fe:1e:0a:84:0d:6e:e0:3d:
8d:3e:53:a6:52:82:43:58:3b:8e:dc:00:a2:b7:77:03:29:78:
28:2e:44:9c:cf:4c:a6:56:9a:17:ec:54:24:6b:e8:66:81:ed:
0b:9a:29:a4:f1:59:71:13:23:d3:25:18:2d:5e:bd:d0:d4:24:
7b:da:1b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org