Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DPpMY0Q5nRSnQJ07GjuxYUalQGs.roa
File: DPpMY0Q5nRSnQJ07GjuxYUalQGs.roa (raw, json)
Hash identifier: WQxK7emXMyZ4Mxhu2KfZntnSgCYnuQq0TOYiH3BSjks=
Subject key identifier: 0C:FA:4C:63:44:39:9D:14:A7:40:9D:3B:1A:3B:B1:61:46:A5:40:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A7A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DPpMY0Q5nRSnQJ07GjuxYUalQGs.roa
Signing time: Fri 01 Sep 2023 10:07:57 +0000
ROA not before: Fri 01 Sep 2023 10:07:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.177.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10874 (0x2a7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0CFA4C6344399D14A7409D3B1A3BB16146A5406B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:a7:5d:89:62:49:3c:2a:ec:54:13:e1:a0:
2f:a2:f7:8c:e4:01:fa:9a:8a:0f:da:54:d3:df:69:
f6:45:3a:63:87:87:d5:ed:f7:20:9a:0f:ca:f8:2a:
dc:61:7b:35:44:70:0c:68:16:f0:14:36:59:0d:73:
62:2e:34:c3:2e:de:2d:98:ec:a4:48:15:77:df:86:
5a:52:b1:d1:7b:af:ad:65:24:50:4d:f7:0f:ac:a1:
af:23:9a:cf:aa:c8:c9:3b:40:d6:aa:02:3a:3b:ba:
c3:7c:e9:a4:01:bb:1a:c2:4b:c4:0f:0a:03:48:50:
36:5b:53:e3:88:79:5a:bb:2b:0f:3e:e1:7a:ce:14:
dd:c6:56:52:09:25:db:05:54:f8:a5:44:e0:c7:f1:
be:7e:5f:16:e5:bd:3a:e3:c1:0a:30:c5:17:f2:f7:
44:55:43:40:96:99:df:46:82:da:32:3a:eb:d3:ea:
02:ce:52:39:2e:1a:59:c9:c9:25:9c:48:bd:42:f5:
66:d2:d9:aa:d6:ef:b7:c4:0d:8d:83:44:ff:d9:85:
50:a6:5c:7d:d8:07:c4:c2:4b:21:3f:f2:15:09:15:
a3:46:32:74:ac:38:7c:ee:7e:2e:58:60:19:35:59:
b1:04:4a:74:ed:5a:a1:0e:b9:df:f3:44:2a:46:ca:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FA:4C:63:44:39:9D:14:A7:40:9D:3B:1A:3B:B1:61:46:A5:40:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DPpMY0Q5nRSnQJ07GjuxYUalQGs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fc:6a:2b:2a:e0:76:76:06:c2:18:ce:56:61:41:03:cf:3b:
e3:b1:9a:19:40:d2:f7:1c:12:82:b7:25:4e:37:e4:6a:ee:b7:
5b:47:80:00:82:5a:0f:cf:ce:2e:b4:38:de:8c:fc:58:3e:ae:
c7:eb:36:89:16:7d:fb:14:44:40:2f:df:1c:40:32:e5:52:77:
63:1c:3b:36:d8:53:61:49:ef:c7:21:17:9c:f7:d2:b6:1d:fd:
89:17:39:da:cc:ce:72:e0:cf:89:f4:b1:20:58:93:a3:f4:9b:
6c:57:e8:e7:e4:53:92:82:8b:45:32:76:9f:b3:75:45:a8:d8:
e7:5c:0f:ad:62:a2:42:30:ad:fe:b8:c6:6a:56:88:0e:da:d1:
68:0f:ab:59:6c:32:5d:df:29:a4:04:cb:4e:e9:b4:9a:d8:a5:
31:8d:1b:87:e3:b6:2b:7e:42:20:65:9b:1d:65:18:cd:0e:d2:
67:ac:ad:13:19:19:ad:1d:9a:38:b6:22:26:c2:2c:79:83:39:
85:74:eb:cc:0d:95:83:4c:f6:bf:65:61:69:6c:56:f6:c5:ad:
ae:04:56:80:c7:df:4c:9b:27:d6:ad:da:ce:d3:ed:63:d4:57:
cb:8f:d3:e5:62:0e:ce:13:b5:25:34:f1:5a:a6:5b:70:27:dc:
c3:0c:ec:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:37 2025 by rpki-client