Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GbbgagprQvDCR-OcWohUyEw0mFY.roa
File: GbbgagprQvDCR-OcWohUyEw0mFY.roa (raw, json)
Hash identifier: QMiufA/o/okZzf02s9Mh/ubPZOn5r/Cqx9AIbKrMvSM=
Subject key identifier: 19:B6:E0:6A:0A:6B:42:F0:C2:47:E3:9C:5A:88:54:C8:4C:34:98:56
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BEF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GbbgagprQvDCR-OcWohUyEw0mFY.roa
Signing time: Wed 29 Sep 2021 02:47:10 +0000
ROA not before: Wed 29 Sep 2021 02:47:10 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.176.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7151 (0x1bef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:10 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=19B6E06A0A6B42F0C247E39C5A8854C84C349856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:42:10:8f:d3:48:f2:db:4e:4b:f7:b9:4a:
8c:33:fc:6d:98:41:b9:fa:f2:e9:25:d4:2e:72:53:
74:27:e1:bb:53:c1:8e:be:7e:b7:51:15:94:db:e5:
9a:11:64:21:88:72:f4:5e:16:9a:2f:21:54:e8:df:
58:3d:84:22:65:b4:5a:a0:4f:8b:10:db:54:0e:77:
7f:46:f8:e7:af:13:38:51:9f:85:d9:7d:a2:72:09:
6d:f6:c5:b1:af:8f:c2:d4:74:f3:b4:b0:f7:72:1e:
61:0b:1c:c3:30:b4:e2:b0:b3:87:d6:1c:cf:99:ef:
9f:0e:e2:f9:9f:1f:9a:50:de:e2:a8:c0:fe:71:6b:
eb:58:13:b4:26:2f:3f:b9:bd:2f:1e:83:a7:dd:9b:
cb:95:34:a1:00:89:c1:8e:8b:9b:6e:9a:bc:bf:03:
f8:a4:93:29:55:2f:5f:c4:98:57:49:0c:41:82:f5:
d1:88:43:97:c9:46:36:31:e4:89:bf:84:67:aa:e5:
6f:f4:ed:42:71:f6:4d:04:fc:08:4a:df:7e:13:2a:
c2:99:f2:8e:ee:7c:13:b3:a3:0b:2e:41:27:e1:cd:
1c:98:0a:a8:ef:08:82:ae:49:5c:17:e6:1f:46:de:
6a:73:b2:19:f2:d1:9c:84:60:95:4d:a8:2b:2d:11:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B6:E0:6A:0A:6B:42:F0:C2:47:E3:9C:5A:88:54:C8:4C:34:98:56
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GbbgagprQvDCR-OcWohUyEw0mFY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.216.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:1c:d8:65:e2:c7:3c:8c:ae:13:b1:d2:33:86:f5:27:f0:2d:
4e:14:84:fa:11:5f:b1:fe:ba:94:2a:8e:74:40:f1:bf:16:e2:
06:7e:d3:0f:68:22:2a:c0:ce:de:41:d0:a3:37:11:b5:53:70:
4f:45:9e:4a:44:37:63:c3:65:05:ab:36:53:f0:41:6c:20:e2:
23:cd:8d:a0:09:ee:d2:3a:94:0f:9d:99:0f:37:c5:b6:67:78:
06:43:9f:63:ae:b4:83:22:bc:62:78:dd:ef:c5:bf:b2:f7:25:
0b:83:9d:fb:0f:d1:5e:3e:e2:ff:08:e9:30:6a:f9:8d:da:c6:
f1:44:36:7c:79:89:f0:86:67:ba:3a:b1:65:c7:3a:c2:44:b4:
3c:31:14:f0:ec:4f:23:ac:5f:8e:93:62:27:f4:13:dd:73:99:
9f:38:ed:24:dc:f5:8b:96:ed:68:9e:e3:12:d1:aa:4e:d6:31:
53:d8:0e:83:56:87:09:ab:74:af:bc:c3:53:80:c2:6e:31:7a:
ea:c6:8c:fb:27:a8:8b:7b:65:7c:d1:c5:31:6a:be:70:0a:14:
73:5f:bf:2b:ce:e9:85:38:31:4b:19:a1:54:95:8b:dd:1d:11:
f5:d9:44:7e:6c:16:d4:8a:83:fe:89:51:cc:ec:de:45:4c:fa:
2e:d3:0a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org