Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ER1Dk_g5WRFXyFV15wbnbzNbezU.roa
File: ER1Dk_g5WRFXyFV15wbnbzNbezU.roa (raw, json)
Hash identifier: kMqWPeiTCdW7Kvuh7qvdtgg7pi8msx5GUnxIzyphm9Q=
Subject key identifier: 11:1D:43:93:F8:39:59:11:57:C8:55:75:E7:06:E7:6F:33:5B:7B:35
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ER1Dk_g5WRFXyFV15wbnbzNbezU.roa
Signing time: Thu 15 Sep 2022 02:45:57 +0000
ROA not before: Thu 15 Sep 2022 02:45:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=111D4393F839591157C85575E706E76F335B7B35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:08:9c:55:75:10:c9:bb:51:3a:7a:34:ad:
85:d0:ef:36:84:6f:9b:3a:32:18:0d:a9:19:df:13:
06:4f:f6:2e:b8:4d:c7:dc:c4:1b:e7:e4:dd:3d:57:
62:d5:65:ab:ac:28:90:db:a3:92:52:20:4d:7b:c0:
53:7c:7a:86:de:b6:e3:61:f1:21:89:1b:fb:84:ec:
f7:01:1d:5c:df:32:b2:3b:e4:5d:52:29:a0:24:11:
83:05:37:6c:93:9f:6b:32:b3:e1:43:cc:75:ae:7d:
95:6a:61:13:6b:0f:ad:21:4b:77:55:a6:3f:d0:c8:
52:d0:de:eb:db:15:00:b6:2e:61:78:49:6b:23:be:
19:43:04:b9:01:20:0e:2c:5d:45:27:d0:09:04:64:
34:ce:e4:3c:73:0f:4e:00:31:1e:18:56:4f:91:0d:
be:68:39:0b:a9:04:a2:42:31:51:b5:e8:27:3c:dc:
83:f4:aa:29:87:e1:b5:15:8e:df:65:6b:06:8d:e7:
2a:2e:71:6b:87:be:b7:2a:ca:f2:8c:ef:bd:88:e3:
c4:2b:e3:e1:64:29:d9:30:d7:9a:cd:a5:f9:cb:44:
df:c9:cf:8c:66:12:2c:33:4a:1e:c8:7a:a2:2b:42:
d7:8b:42:80:03:a2:8b:fe:77:fc:59:45:84:2e:bd:
2d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1D:43:93:F8:39:59:11:57:C8:55:75:E7:06:E7:6F:33:5B:7B:35
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ER1Dk_g5WRFXyFV15wbnbzNbezU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.88.0/21
Signature Algorithm: sha256WithRSAEncryption
04:45:3f:61:c5:12:60:f8:6f:c0:e1:64:62:77:9f:11:91:a8:
9e:6c:41:28:ae:f0:d0:3b:ec:0e:76:09:3f:d8:d7:6e:d3:fb:
7a:37:f7:df:63:c9:27:24:d4:08:11:44:0d:e7:bd:15:ac:18:
a9:a2:af:3a:77:ff:86:3d:0a:70:05:03:de:0b:4d:60:d1:07:
3a:a2:42:14:7b:0a:cb:3d:02:25:92:04:30:85:ba:2c:be:f4:
a0:29:c9:38:3e:45:35:18:ee:59:da:21:46:4b:6f:28:20:34:
30:42:62:49:f3:f4:cd:aa:96:e3:fe:78:2c:4c:62:e0:51:f6:
4b:a9:f9:8a:0c:23:e4:67:3a:04:9f:6d:5c:8d:90:59:ba:39:
f5:5e:84:8b:f7:41:93:5f:92:b2:b7:55:68:c2:7b:23:fd:80:
cc:79:52:69:47:2f:3d:7b:f1:7f:22:4f:ad:f7:bc:85:d6:da:
e6:0f:4c:65:9f:be:34:b6:86:e2:8a:69:ad:48:df:e1:ba:65:
b0:ae:5d:11:ee:e4:7a:cc:1f:94:9c:70:ce:24:2d:4e:8c:4b:
97:6c:3e:88:8d:c4:8b:04:10:29:56:f1:a6:2d:a9:e5:0c:f0:
a4:c8:79:2d:86:af:c4:06:6d:e6:8f:39:09:47:1e:cc:10:13:
2a:00:bb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org