Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DeQa7odO6U6BCAiTz_PwUfkERLg.roa
File: DeQa7odO6U6BCAiTz_PwUfkERLg.roa (raw, json)
Hash identifier: 6kWxcKFsilgP4T2BRDys73M/ubRP4PlC0XfUpYGBQZM=
Subject key identifier: 0D:E4:1A:EE:87:4E:E9:4E:81:08:08:93:CF:F3:F0:51:F9:04:44:B8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 142F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DeQa7odO6U6BCAiTz_PwUfkERLg.roa
Signing time: Sun 07 Feb 2021 11:57:41 +0000
ROA not before: Sun 07 Feb 2021 11:57:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5167 (0x142f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:57:41 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0DE41AEE874EE94E81080893CFF3F051F90444B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:58:bb:73:69:35:af:59:00:04:97:37:de:19:
2b:27:35:dc:bc:30:20:2d:33:b4:68:4e:23:ac:e3:
24:8f:d2:c0:43:71:d4:cc:87:ef:78:8e:19:a4:a8:
07:7b:34:7a:dd:5f:d0:c7:d7:72:4f:f9:38:7e:ea:
8a:5b:6a:2e:11:c0:b2:87:70:8a:b0:f3:c8:55:97:
41:27:92:d5:ab:4c:aa:e3:10:d5:62:a6:10:8d:c1:
ee:11:50:cd:b2:d2:32:3b:19:12:b8:3a:2d:4e:7c:
a1:6e:2e:13:22:df:37:af:9d:51:88:88:58:6a:1c:
98:1d:dc:1f:6f:80:bc:6c:49:c4:5b:27:8e:b7:79:
3e:ae:8c:59:92:9d:a5:e0:ff:ce:90:93:23:7a:3d:
f3:49:8a:0f:8d:91:0a:70:ea:e2:ff:15:25:42:d5:
43:d2:62:2f:50:8a:9c:eb:0c:46:ec:74:d3:9b:94:
bd:18:ee:a9:47:23:b6:f9:48:81:d1:0e:77:cd:d0:
c7:4f:2c:c7:2c:1f:21:28:9f:55:54:42:da:a7:6c:
b7:22:db:69:39:84:b2:72:fa:e0:0d:69:0c:41:d7:
0f:ee:67:13:89:b8:ed:a6:b5:24:bb:e3:3a:06:e0:
af:97:84:d1:7c:03:3a:43:b0:2e:38:05:e0:5f:c5:
ff:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E4:1A:EE:87:4E:E9:4E:81:08:08:93:CF:F3:F0:51:F9:04:44:B8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DeQa7odO6U6BCAiTz_PwUfkERLg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.8.0/21
Signature Algorithm: sha256WithRSAEncryption
06:67:a0:a3:20:72:c8:9a:13:d5:fd:af:d0:45:52:be:7c:60:
7f:9e:a7:b6:49:5e:db:91:c5:0e:f0:e1:bf:e1:77:da:91:3b:
44:e9:d7:1a:15:62:9a:5e:4c:08:d8:fd:ca:a2:ae:aa:cb:ae:
9f:ab:c7:32:40:46:32:28:ea:63:7f:f9:45:3d:9f:12:ca:c6:
89:b9:e3:70:9d:7c:89:fa:fb:1f:ec:9b:51:f7:26:0b:3d:32:
9a:e1:35:7e:64:37:fe:e1:1a:47:c3:dc:83:c2:c8:77:1d:9f:
14:ee:0d:57:36:fb:30:e7:b6:f8:32:19:c4:a3:fe:d6:58:bd:
84:b8:f7:47:88:37:c4:75:72:36:ef:44:4e:67:99:2e:8e:d0:
d9:bc:37:d3:be:50:99:b6:40:e0:28:33:2f:6b:42:53:cc:12:
4f:7c:e9:b7:9d:03:c7:85:a6:9f:4b:fe:a4:45:65:05:44:53:
bf:a2:78:11:87:21:87:97:72:63:09:e3:aa:57:1f:12:70:3a:
be:2e:f4:83:db:96:06:96:c7:f1:41:5e:23:64:3d:eb:90:3d:
b8:02:f0:bd:9f:23:74:cb:80:4b:d0:eb:64:74:a0:a7:a8:cd:
4c:cc:be:24:b9:4b:83:93:80:37:d6:dc:cd:66:4a:9f:14:43:
54:db:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org