Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dzlyrj-gTyyXJvh8wVy0xGwtIZE.roa
File: Dzlyrj-gTyyXJvh8wVy0xGwtIZE.roa (raw, json)
Hash identifier: DUAIIDiTczSNX2Uh1lOh1EIO4GSfMzBKPwAtW3kreR0=
Subject key identifier: 0F:39:72:AE:3F:A0:4F:2C:97:26:F8:7C:C1:5C:B4:C4:6C:2D:21:91
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dzlyrj-gTyyXJvh8wVy0xGwtIZE.roa
Signing time: Thu 15 Sep 2022 02:44:41 +0000
ROA not before: Thu 15 Sep 2022 02:44:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0F3972AE3FA04F2C9726F87CC15CB4C46C2D2191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:81:1e:35:c7:98:12:09:2c:0d:dd:d8:08:
6a:19:9f:9c:d0:1d:3e:a2:df:f9:39:5f:18:f5:69:
18:9d:c8:81:3f:77:1c:c7:dd:0b:62:5b:35:f9:80:
f6:fa:2f:50:c5:1f:f6:63:1b:67:d8:b9:a0:04:58:
69:cc:93:c2:17:93:08:eb:f6:da:df:5a:3d:bd:92:
16:6f:fc:4d:6e:f0:fc:14:e5:b2:9c:c7:ec:62:34:
ee:36:18:7a:ea:18:35:d4:34:69:33:d8:f9:8d:d7:
db:8c:09:2e:be:de:92:b1:5f:20:a9:ea:ca:e8:8f:
bc:4a:41:c6:4a:e9:48:f9:90:51:dd:f2:c1:95:c4:
65:8b:4a:ef:e6:c8:13:45:03:5b:c4:22:c1:bd:2b:
0f:d5:fb:81:bc:88:74:20:67:07:6d:11:1a:63:38:
42:78:93:e7:69:36:45:f4:d3:1f:d3:3f:7a:f8:37:
20:47:bb:b8:ed:3c:6c:f7:1e:cd:6f:fa:1d:a3:d4:
11:dc:46:b4:23:2a:96:32:d7:82:95:21:51:6d:2a:
ba:ec:0e:30:0f:4d:cf:0e:bf:ac:6b:86:33:29:31:
20:fa:bf:00:49:68:cb:e3:8f:c7:46:92:09:4a:c5:
11:a3:ad:57:90:74:33:f7:e8:42:4c:26:6e:e0:e1:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:39:72:AE:3F:A0:4F:2C:97:26:F8:7C:C1:5C:B4:C4:6C:2D:21:91
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dzlyrj-gTyyXJvh8wVy0xGwtIZE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.216.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b9:b6:a3:f1:1e:2a:76:ee:ea:d6:ba:a6:b4:ba:76:8e:99:
21:b9:57:1d:25:a5:ac:39:a8:c2:f2:a4:9a:41:2a:80:95:e9:
8e:7d:d6:a9:b8:ce:b4:c2:9f:a2:3a:ee:6c:1d:10:5f:8c:ac:
e0:b9:07:54:fc:06:62:9d:be:46:97:e5:79:b1:24:01:39:6e:
92:7a:40:20:c3:3e:58:8c:d7:c2:4f:35:a1:31:aa:25:4a:94:
47:3a:75:66:23:c5:11:a7:d1:14:62:e8:ec:fe:5b:e8:64:73:
cb:8b:28:bf:9f:ef:6c:fd:e4:39:6d:6c:ce:a6:46:2e:87:7f:
8e:d2:ad:2e:c3:2f:4d:be:b5:98:54:ac:0f:ef:dc:5d:28:58:
55:86:b2:29:7d:23:8b:9c:2e:f6:23:61:ca:94:10:c0:7a:72:
e3:72:5a:a8:7b:94:6b:cb:46:86:f0:6e:f0:88:17:25:0f:9d:
86:45:e3:4d:79:70:9d:65:28:95:c7:96:d4:f1:50:10:c5:9f:
a5:12:76:cd:8a:de:6c:5c:de:7b:64:ee:c0:d8:5e:4e:6d:0b:
2b:6a:5f:f3:8a:f3:38:e5:f2:b2:29:ee:a5:1d:e2:ae:57:63:
73:1b:d5:27:04:8f:6c:34:22:e6:f1:81:97:f0:03:35:ec:d4:
88:21:39:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org