Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DlMhA37g-t-ZlnD6Ku-hZW00k8c.roa
File: DlMhA37g-t-ZlnD6Ku-hZW00k8c.roa (raw, json)
Hash identifier: x1MHPxC6RdCeO4wrDprEpYc+iuCUk1ms299gGBCf22w=
Subject key identifier: 0E:53:21:03:7E:E0:FA:DF:99:96:70:FA:2A:EF:A1:65:6D:34:93:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15D3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DlMhA37g-t-ZlnD6Ku-hZW00k8c.roa
Signing time: Sun 07 Feb 2021 12:06:44 +0000
ROA not before: Sun 07 Feb 2021 12:06:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5587 (0x15d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:06:44 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0E5321037EE0FADF999670FA2AEFA1656D3493C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:d4:89:a6:77:1a:07:72:a7:f5:3a:61:11:
7d:04:fc:f5:fd:f0:8a:68:0d:2d:a2:1d:94:59:7e:
ed:9c:90:09:f0:ae:bf:a4:d6:b2:8b:b2:9c:2a:8a:
41:88:d3:c4:97:07:14:56:b2:24:8c:43:72:15:f4:
cc:36:53:23:3b:f0:68:5c:7b:bf:53:26:b5:b2:6e:
19:a6:cc:0e:8d:45:a7:57:66:a7:3a:bc:56:5b:89:
e9:89:16:fe:ca:44:71:19:fb:26:f9:7a:0c:1f:70:
cb:a4:ad:cf:31:ea:a7:da:3b:34:2a:b8:1a:62:b1:
a0:c0:5d:eb:35:92:af:f2:60:d6:69:81:17:93:57:
13:5a:a5:a5:9d:52:ad:9b:f4:cd:38:2e:3a:fe:10:
82:dd:64:c6:fa:9a:ea:0e:cd:e0:8a:d3:3e:97:a6:
8d:16:aa:76:57:67:88:2f:bb:88:92:d2:99:96:68:
e1:08:28:f7:f9:af:2c:94:95:c3:f9:1b:02:8b:66:
8a:ef:4c:2e:94:e3:62:04:c0:c4:e9:4e:72:89:10:
87:80:b2:a3:89:3b:15:d3:a7:48:27:5e:92:da:41:
0b:b8:7d:18:cc:1f:1e:68:24:00:58:bc:e5:a5:dc:
49:d4:89:c6:7e:46:58:d0:29:ed:cb:07:13:0c:eb:
47:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:53:21:03:7E:E0:FA:DF:99:96:70:FA:2A:EF:A1:65:6D:34:93:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DlMhA37g-t-ZlnD6Ku-hZW00k8c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.136.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:de:82:dd:60:ea:89:c9:f2:da:e1:4e:ea:79:5d:3c:55:19:
96:6a:f0:38:94:4e:99:e0:ea:2d:c9:54:95:da:e4:66:86:d6:
e2:38:45:2e:9b:66:b5:e0:ba:5e:5a:f8:73:ef:cc:58:81:0f:
2d:af:78:ba:23:7c:b4:be:d3:58:6d:6e:b1:af:3d:13:cf:7d:
c0:a7:11:a1:ca:fe:d4:77:c5:31:74:c8:bc:dc:4d:9c:c2:32:
f9:99:fd:5e:1c:8a:7f:f1:4d:99:0b:fe:dc:2e:27:1b:6f:57:
32:dd:f3:fd:0c:0a:80:5f:f4:38:a9:b0:db:c5:d1:10:45:41:
02:60:29:44:e0:65:5b:8c:21:dd:ad:f0:7e:5d:54:e8:94:07:
be:68:4d:ed:d2:05:9d:df:3c:b3:95:25:79:04:79:00:75:64:
48:0f:76:d9:d6:27:92:f9:05:c3:93:b3:a3:af:40:a0:13:ac:
1a:ec:c9:f1:88:cb:7b:d8:c4:f8:64:b2:4e:4b:75:d4:b8:e6:
c0:32:17:35:80:52:30:32:27:50:cc:d6:58:cb:c0:35:bb:fd:
cf:36:1e:dc:5c:31:09:2e:4a:e4:41:df:02:d1:73:1a:1f:3b:
70:6b:d2:2b:9b:d5:2a:3a:4c:d8:7c:46:31:cc:89:9b:71:7a:
7d:dc:d5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org