Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GKd3zTzu2c8Dr8b7u6v5thVX62s.roa
File: GKd3zTzu2c8Dr8b7u6v5thVX62s.roa (raw, json)
Hash identifier: QmBx47NDuYx0BuT+0Azb7sGC4+hKovkU/ZwHQslwsSo=
Subject key identifier: 18:A7:77:CD:3C:EE:D9:CF:03:AF:C6:FB:BB:AB:F9:B6:15:57:EB:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1793
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GKd3zTzu2c8Dr8b7u6v5thVX62s.roa
Signing time: Sun 07 Feb 2021 12:20:23 +0000
ROA not before: Sun 07 Feb 2021 12:20:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6035 (0x1793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:20:23 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=18A777CD3CEED9CF03AFC6FBBBABF9B61557EB6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:1c:a3:43:e9:d1:11:f1:66:19:41:ac:bb:
f2:1f:86:90:e4:28:44:d8:94:f1:64:ad:c6:68:97:
42:10:b3:a6:17:5c:a2:7d:ef:e0:a1:ba:c9:69:07:
9c:66:34:b0:c8:89:12:f4:ed:01:3e:fc:a4:46:d7:
64:8f:3f:cf:be:74:c9:45:a6:86:8e:65:f9:53:9d:
9a:00:68:ef:97:67:12:e2:53:07:c2:66:41:8f:24:
c7:fe:41:7a:f1:dd:d4:e0:57:e4:12:30:84:56:5a:
fe:0e:a3:8e:a0:f1:65:16:97:4c:e3:97:d4:8b:e6:
79:79:73:25:13:1c:0f:9f:c2:b6:5c:df:bb:ea:eb:
4d:2f:59:83:7e:36:bc:4d:26:d7:55:c1:43:0c:4c:
21:ac:8b:8f:5c:0a:64:c9:e1:75:09:bc:15:32:88:
2b:d0:d2:ca:2a:a1:3c:14:e4:25:d7:c8:2c:1e:54:
63:cd:a8:d9:cf:c2:d5:66:94:26:55:41:5b:7a:e7:
6f:c9:e2:20:a9:8b:19:46:fb:5c:e2:e4:a2:f7:75:
d7:56:61:b7:27:89:06:ff:c0:ca:40:6d:d3:bf:20:
73:33:3e:27:5b:ce:42:67:e3:7c:3d:51:a4:ef:1d:
12:52:7e:8d:ef:29:c0:89:7f:43:c1:42:a1:c9:e8:
bd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A7:77:CD:3C:EE:D9:CF:03:AF:C6:FB:BB:AB:F9:B6:15:57:EB:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GKd3zTzu2c8Dr8b7u6v5thVX62s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.184.0/21
Signature Algorithm: sha256WithRSAEncryption
43:23:e1:a1:48:4d:e8:43:df:7c:5c:7e:48:da:c1:50:63:b8:
3a:b2:02:29:30:2e:7b:47:25:db:15:0b:5f:35:0e:ed:24:25:
fd:f9:04:27:ca:0f:3c:e4:a8:77:97:76:d0:b4:ad:9f:0a:72:
91:62:86:86:7e:64:b2:ec:cf:cf:0c:13:7d:30:c7:60:29:68:
7d:da:2c:51:d6:72:52:c4:10:08:dd:77:d9:71:cc:a4:24:30:
1a:59:15:25:dd:6d:1b:b2:0d:82:cc:10:81:62:70:6d:dd:f0:
ef:6c:b5:07:e6:63:62:41:8d:af:46:29:06:28:b7:40:a4:b1:
79:fa:4b:77:ee:43:8a:67:f9:dc:90:4a:fb:0e:9b:c5:80:fc:
92:05:64:46:f9:0e:46:fe:56:bc:f1:d5:89:43:3b:16:bf:dd:
d1:77:ee:ef:28:8c:ca:8d:4e:9a:e4:fd:11:83:3a:db:e3:e5:
c5:53:03:b0:d9:11:8a:a4:f2:b1:d6:89:0a:0c:29:fb:36:de:
9f:c9:fc:58:02:b1:5c:dd:e6:f9:02:b5:c9:8f:79:15:94:71:
96:bc:4a:87:d0:6a:b3:21:68:db:17:62:a8:e1:c9:e9:76:2c:
e5:73:f3:d4:b1:b8:04:c4:45:40:36:d2:a8:b9:e7:b7:18:c9:
1f:f8:2c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:30 2025 by rpki-client