Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G1nvIc7Mr0frLwsUMCgnR0cJRe8.roa
File: G1nvIc7Mr0frLwsUMCgnR0cJRe8.roa (raw, json)
Hash identifier: j2CvqaYzRuUZsQD/+834pWzeE+zVPbKLqZK5/fdcfos=
Subject key identifier: 1B:59:EF:21:CE:CC:AF:47:EB:2F:0B:14:30:28:27:47:47:09:45:EF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22BC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G1nvIc7Mr0frLwsUMCgnR0cJRe8.roa
Signing time: Fri 25 Nov 2022 04:41:35 +0000
ROA not before: Fri 25 Nov 2022 04:41:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8892 (0x22bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1B59EF21CECCAF47EB2F0B1430282747470945EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:0c:77:8b:fa:bf:0c:6f:0c:fc:ea:d9:10:
9a:8d:1b:92:2b:f6:b1:69:db:a3:4e:36:58:6c:51:
5b:b3:cd:df:24:4b:25:1a:4f:b3:05:29:7d:2d:07:
63:d3:ef:7e:fb:f0:68:a4:9a:ab:52:c9:ca:76:36:
55:b0:fd:48:29:d3:34:eb:c6:11:bd:7a:d8:13:48:
ec:b5:19:09:76:d9:5b:0b:1c:64:09:20:52:92:62:
d4:10:c4:3d:fb:70:ec:67:ac:c8:c2:12:34:7f:a5:
84:78:a2:0f:e1:2a:10:10:b9:6a:32:3e:ba:04:3b:
15:ab:25:52:07:08:6a:f0:e1:75:b5:34:43:20:d9:
a5:2c:02:39:c5:95:2f:c9:e6:9f:e2:dd:cd:62:54:
90:ac:34:c0:e6:c5:10:87:aa:6d:d0:b1:90:29:ce:
66:c3:54:46:c2:23:f1:d1:41:33:f3:ce:09:da:bd:
4b:0e:30:e9:f2:38:15:2f:7d:69:30:7c:59:02:bc:
20:05:69:5e:26:f1:df:81:e0:f8:bb:4b:6c:60:21:
68:1f:94:70:ce:ef:a4:8b:17:92:45:cf:e2:4b:80:
84:77:55:8b:20:e8:cd:5a:f8:e4:9b:9b:c3:00:42:
38:a5:d7:e0:c9:3e:78:94:7a:60:e7:c5:08:19:4b:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:59:EF:21:CE:CC:AF:47:EB:2F:0B:14:30:28:27:47:47:09:45:EF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G1nvIc7Mr0frLwsUMCgnR0cJRe8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.156.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:9a:a8:2a:7f:9e:ea:29:2d:4f:da:fa:79:e8:46:4d:d0:95:
45:a1:12:d8:75:02:c4:4c:95:60:32:54:e1:3f:2e:91:66:b2:
e9:b0:4d:ea:ba:d4:d3:15:67:b0:b0:24:65:18:23:57:c5:de:
2d:ca:a2:58:89:d8:d7:73:b2:36:31:e1:db:5b:31:5e:ed:d6:
a1:35:a0:3f:c5:27:54:d4:aa:09:48:80:61:69:5e:7e:d1:df:
5a:bb:f1:48:d4:69:cc:64:78:ba:1c:06:9b:88:bc:02:15:24:
7a:5e:34:15:f9:0a:27:4d:51:79:0d:ac:03:28:4e:d3:62:e2:
89:78:e5:ff:fd:f6:a0:85:7c:5e:50:b3:36:40:0d:95:9b:75:
eb:de:a5:36:38:d2:4f:41:0e:14:2e:d5:e8:c7:af:96:a2:7f:
00:6b:f7:67:4a:75:4c:3a:9e:df:66:af:f2:f8:09:86:96:c4:
7d:8c:f4:e7:9d:92:6e:10:24:26:6c:ea:17:02:c8:10:37:f8:
c6:d4:75:05:55:42:f5:00:98:1a:0c:1e:75:61:6c:d4:00:9d:
44:fc:05:d1:d0:54:c5:4d:ff:83:8b:dd:17:ed:3d:e2:90:6f:
cb:3c:00:48:ef:fb:7a:19:b3:2f:d1:18:a6:2b:3b:cd:01:9c:
5c:43:12:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org