Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FVvLdGMKiclOG-6KWe9C8uAG7no.roa
File: FVvLdGMKiclOG-6KWe9C8uAG7no.roa (raw, json)
Hash identifier: Y+9muF3AZrFIMXmfW4WhrZw8RCpjLcbpc2+7Vh1MfjU=
Subject key identifier: 15:5B:CB:74:63:0A:89:C9:4E:1B:EE:8A:59:EF:42:F2:E0:06:EE:7A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B6F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FVvLdGMKiclOG-6KWe9C8uAG7no.roa
Signing time: Wed 29 Sep 2021 02:46:36 +0000
ROA not before: Wed 29 Sep 2021 02:46:36 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.177.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7023 (0x1b6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:36 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=155BCB74630A89C94E1BEE8A59EF42F2E006EE7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:69:6a:c4:9e:0b:d2:af:61:10:ae:0e:71:
9a:38:4b:57:13:a9:ce:26:8b:d6:77:b2:97:04:2a:
0a:45:f0:2f:2c:84:b8:26:c4:01:b9:bc:e8:d8:a0:
cb:a4:91:87:ab:ca:c0:70:d5:3f:a3:e7:e6:d8:20:
bf:fa:1d:f0:36:5f:9e:6e:79:9e:54:a4:96:81:d3:
89:9a:70:e0:24:11:6b:7f:52:5e:57:71:ff:6e:bb:
12:1a:1d:18:98:ac:a4:97:47:09:77:56:c0:86:42:
27:36:6a:d3:14:f0:14:14:8f:af:21:55:f4:8d:39:
d1:3f:c6:bb:c1:00:3e:e9:94:54:c5:1b:81:42:ea:
34:6e:33:78:90:81:73:2a:89:3a:29:6c:89:96:59:
b6:b1:e4:d6:c6:1c:de:b1:98:6d:9c:7b:be:0e:9b:
7e:a1:14:cc:a2:81:71:1f:e9:92:f2:85:30:b4:06:
e8:3b:4a:bb:81:56:24:bc:ee:32:36:b0:07:7b:d1:
1f:cf:b3:93:22:ca:40:be:5a:ba:fa:8b:9a:9b:1f:
20:92:66:53:4e:24:ff:f4:33:ea:2a:8f:93:54:3c:
aa:5b:ec:c3:0e:70:a1:d4:c8:dd:4a:c2:2f:6d:5c:
70:d0:9e:00:37:ff:1b:60:c0:23:1f:4f:e7:62:f2:
81:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5B:CB:74:63:0A:89:C9:4E:1B:EE:8A:59:EF:42:F2:E0:06:EE:7A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FVvLdGMKiclOG-6KWe9C8uAG7no.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.32.0/22
Signature Algorithm: sha256WithRSAEncryption
89:a2:dd:a4:b5:e4:34:19:6b:f0:71:2d:46:9f:4a:41:15:9d:
a2:c3:e0:0a:fd:d5:dc:00:08:6b:f2:6e:92:7e:59:da:32:a4:
b3:7a:72:53:75:76:23:15:65:00:79:e9:41:e8:a4:25:13:d5:
50:09:22:d9:e4:84:bf:2f:60:1f:00:20:d9:a4:37:ef:1e:24:
81:85:dd:20:84:a8:e3:3b:ce:ec:cc:99:9e:e3:6a:52:a7:2c:
6a:0f:a4:5a:c9:c4:80:ea:2d:04:1e:79:7a:e6:41:06:43:57:
22:10:9b:f6:a3:a8:bf:af:32:ab:26:8c:39:fc:44:93:4d:5d:
27:3d:48:6b:6f:47:41:64:74:05:27:16:36:b5:b5:d3:7b:cc:
bd:3c:4f:14:0f:86:86:2f:45:ec:cb:a2:ab:83:2c:b6:de:dd:
a4:7b:e5:24:be:87:fd:f6:b9:d6:c3:1c:e4:81:2d:a3:93:7b:
d8:a1:a7:b5:20:a8:a7:21:1f:d9:06:9c:45:11:37:20:48:c3:
f4:36:e7:f4:a3:cf:81:38:31:de:e4:e6:b3:27:31:0b:30:0a:
15:dc:2d:b2:ea:19:0f:bf:f3:71:38:55:b4:2f:c2:5f:fc:45:
9f:01:9e:2f:f7:61:76:39:fb:bc:ab:74:ca:be:f3:09:c5:00:
21:55:5d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:33 2025 by rpki-client