Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E6Nchg3tmeZr1NV-yEznxSfASN4.roa
File: E6Nchg3tmeZr1NV-yEznxSfASN4.roa (raw, json)
Hash identifier: N6Qi3S0srpP+SbBTZywDPOO3U9jVU9KeiLNXv7/sc7I=
Subject key identifier: 13:A3:5C:86:0D:ED:99:E6:6B:D4:D5:7E:C8:4C:E7:C5:27:C0:48:DE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21DC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E6Nchg3tmeZr1NV-yEznxSfASN4.roa
Signing time: Fri 25 Nov 2022 04:40:30 +0000
ROA not before: Fri 25 Nov 2022 04:40:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8668 (0x21dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=13A35C860DED99E66BD4D57EC84CE7C527C048DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:a1:2a:10:85:7a:7a:fd:4c:42:e9:b1:54:
80:52:66:fa:c5:ab:ab:d5:19:64:fc:ff:8d:34:3e:
52:e8:4c:55:16:49:16:24:41:f8:62:bd:5c:29:f6:
46:e6:7c:d7:49:0c:1e:d0:1f:7d:f1:79:b7:0e:d4:
63:93:09:63:c3:7e:fb:5d:58:73:34:2c:85:9f:55:
81:ad:a5:b7:d6:56:71:03:fa:09:84:7f:b6:f1:08:
f7:6a:15:4e:fa:3c:99:a3:60:18:fe:f7:55:2d:88:
af:e3:89:4f:53:7b:23:7c:da:0e:b7:17:bf:7b:0e:
38:59:9a:92:39:79:45:a6:48:23:8c:fa:5b:8f:fc:
d7:65:17:2f:ca:bd:02:a0:4b:a1:5e:d6:3e:df:6f:
1c:01:ed:4c:8d:a5:25:2e:71:47:df:08:b0:c7:ae:
d1:3e:9d:e8:23:01:e3:4b:eb:69:26:e6:6b:bd:9d:
da:a4:69:ab:86:84:37:35:c2:36:6d:a9:76:8e:75:
c1:e3:78:61:37:f6:26:df:39:e5:37:f5:8b:4f:c7:
93:d7:65:68:b8:9c:55:1a:54:e3:b9:ba:0e:09:ba:
4d:a9:1c:f2:15:bb:9a:16:7d:01:f9:56:d8:9e:6b:
c2:5d:89:5c:b2:05:78:55:45:e7:4e:24:36:ac:12:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A3:5C:86:0D:ED:99:E6:6B:D4:D5:7E:C8:4C:E7:C5:27:C0:48:DE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E6Nchg3tmeZr1NV-yEznxSfASN4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.232.0/21
Signature Algorithm: sha256WithRSAEncryption
40:ac:dd:db:51:13:32:c5:64:44:5a:78:fe:47:68:43:fe:bd:
66:c3:e0:a8:58:81:cf:5e:7d:dd:a0:3b:06:21:4e:ff:01:53:
29:a4:6c:15:b3:dd:fd:b9:07:47:ae:54:79:a0:ac:bc:21:d8:
d9:c4:48:a1:04:71:cd:41:84:b3:89:05:27:69:1c:a9:2c:a6:
7a:2a:81:c1:65:7c:e9:a0:36:62:26:7e:10:6d:30:ff:dd:63:
39:b4:f7:54:6a:51:9a:14:c3:75:90:62:04:c9:9b:b1:bd:62:
9b:36:fe:85:3b:75:a5:1f:21:26:4e:64:b7:b0:cd:d2:c6:63:
58:bd:4c:ca:c9:89:10:ce:9c:d4:0d:f9:b3:02:9c:5a:88:ee:
32:b8:56:d3:fe:b0:20:20:c1:04:ba:3e:3e:81:a8:63:39:4c:
ab:ea:cb:f5:bd:05:65:e4:3a:ce:27:e1:ed:f7:98:bf:91:96:
74:07:43:88:5c:f5:9c:f6:f5:2e:ee:05:d7:ac:3c:b9:bd:71:
27:1b:c6:e8:87:71:52:c0:61:39:ea:bb:19:81:05:f4:da:3d:
e3:27:20:7f:54:43:97:67:18:e0:8b:4e:1c:2e:19:13:16:ac:
4a:4e:4c:e9:80:2b:70:f3:3a:9b:d8:4f:4c:6f:ea:b5:37:75:
97:7d:08:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org