Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DFl4Ks-MzPzMUKHbDpI4-cNhb6s.roa
File: DFl4Ks-MzPzMUKHbDpI4-cNhb6s.roa (raw, json)
Hash identifier: wArdLUXtx1rae95RTSNI90aCoyvHVW0Ahc7+RG3W4PM=
Subject key identifier: 0C:59:78:2A:CF:8C:CC:FC:CC:50:A1:DB:0E:92:38:F9:C3:61:6F:AB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AB3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DFl4Ks-MzPzMUKHbDpI4-cNhb6s.roa
Signing time: Wed 29 Sep 2021 02:45:39 +0000
ROA not before: Wed 29 Sep 2021 02:45:39 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.176.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6835 (0x1ab3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:39 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0C59782ACF8CCCFCCC50A1DB0E9238F9C3616FAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f8:52:bf:bf:6a:ee:aa:b8:07:89:7d:2a:3b:
89:64:87:18:70:f4:a1:9f:68:77:e2:a2:7b:84:a1:
4f:c3:17:2b:11:a9:9b:0e:ca:10:c0:d1:e8:6e:98:
5c:68:d2:04:43:d2:23:ff:f2:31:8e:52:30:d4:a5:
f0:48:9e:f0:e7:ab:88:a0:ff:d0:40:83:1c:25:bb:
66:06:31:fa:73:d8:eb:16:1a:1c:59:97:fb:cb:e7:
d2:99:c2:a8:90:e5:55:a7:f1:19:d6:ce:7c:26:5d:
4b:21:77:2e:ad:d9:8a:fd:49:bf:2f:42:4d:a0:51:
e5:d3:94:0d:18:e3:95:a4:a8:c1:8f:a2:9e:3d:9d:
db:50:a4:cc:ee:b0:75:ff:d1:79:ac:ea:39:ec:ad:
fa:a8:c0:95:85:7a:a9:97:e4:b3:25:c4:c8:01:d8:
58:aa:3f:34:85:fc:08:41:42:b8:58:bb:1f:21:af:
5f:f9:f7:7a:93:bd:a1:e6:6f:63:11:bf:84:a9:33:
68:c8:ac:e1:35:5f:75:14:0c:9b:99:36:86:14:80:
9d:26:0e:57:d8:84:81:6b:28:5c:6d:d6:aa:4a:8b:
82:3e:ab:0e:71:10:57:ff:ca:04:5c:90:c1:41:54:
4c:e9:39:90:95:03:90:46:7f:8e:54:bb:a9:37:37:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:59:78:2A:CF:8C:CC:FC:CC:50:A1:DB:0E:92:38:F9:C3:61:6F:AB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DFl4Ks-MzPzMUKHbDpI4-cNhb6s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.22.0/24
Signature Algorithm: sha256WithRSAEncryption
10:df:b5:f4:19:2d:21:da:28:06:49:25:0b:fe:73:ed:27:03:
f7:9b:8d:5a:66:bb:83:44:4b:9b:a4:f2:08:41:a2:55:1b:bd:
66:a6:9e:9f:e4:43:1f:ca:da:aa:c8:d5:51:56:e2:d6:9f:4b:
d0:e5:dc:a9:04:a0:bc:5f:22:7b:33:7f:6b:91:d0:af:4e:44:
6e:e0:02:03:6c:9f:ec:55:3d:35:92:16:af:25:3a:ca:78:93:
32:37:6c:1b:36:5f:2b:21:e7:cf:45:37:73:76:b8:c9:66:05:
88:ec:d5:ca:61:06:a5:64:b8:56:be:da:48:76:9c:64:70:3a:
46:25:ad:7d:f5:aa:1d:28:79:4c:c0:cb:53:7d:34:6e:7d:cc:
2e:8e:e9:72:41:cd:9b:b3:7c:9c:97:ba:17:1a:20:7c:29:5c:
44:ea:ee:c5:41:a0:aa:a3:fe:8b:5d:08:95:06:60:06:2c:ff:
9d:d7:77:db:18:95:16:79:17:48:7e:51:91:49:f2:99:ed:ad:
6b:4f:74:f8:d8:7f:09:3d:9c:80:5b:2a:c3:54:52:29:14:ad:
39:07:5d:a7:a5:ca:2d:78:e0:04:36:c9:e0:9f:24:3a:1b:cb:
d6:b5:f0:4e:20:35:16:a9:12:0f:c8:a0:85:0e:29:de:ce:02:
d1:47:d0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org