Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HaINEYrfwrwegRWy2re4zkNgnwA.roa
File: HaINEYrfwrwegRWy2re4zkNgnwA.roa (raw, json)
Hash identifier: sdjx6eiDsZgHhJ08ctTzs6hB8iz4llUMxkOM6zIkBp0=
Subject key identifier: 1D:A2:0D:11:8A:DF:C2:BC:1E:81:15:B2:DA:B7:B8:CE:43:60:9F:00
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21A6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HaINEYrfwrwegRWy2re4zkNgnwA.roa
Signing time: Fri 25 Nov 2022 04:40:10 +0000
ROA not before: Fri 25 Nov 2022 04:40:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8614 (0x21a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1DA20D118ADFC2BC1E8115B2DAB7B8CE43609F00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0a:62:e5:bf:97:bf:43:f6:f1:ce:75:c1:e1:
43:7a:da:b0:ad:92:d3:5a:65:55:ae:53:e9:5b:fa:
f8:dd:cd:cd:f7:0d:67:bd:f5:55:0c:c9:fd:de:b8:
3d:f2:12:31:12:3d:39:4d:a2:6d:42:1d:87:cb:58:
7b:ae:1e:c6:c6:58:c6:3d:c7:c6:a2:31:ab:f6:f1:
cb:df:66:ce:e9:b3:96:ee:8c:c8:91:90:76:94:27:
c8:7e:94:28:ff:5f:9c:bb:dc:cd:3f:b1:ba:7c:16:
e7:49:72:cf:51:2d:ff:2b:40:89:24:bd:0d:11:51:
d7:53:2b:a8:6a:8e:42:ec:49:13:66:ab:1b:55:06:
71:fe:67:79:ac:04:53:1d:d4:03:69:e3:2c:22:e6:
39:f6:de:0d:36:c0:19:4e:77:49:01:b3:a6:63:a2:
61:cd:9d:34:2a:ce:67:0c:d8:86:18:d3:f4:c4:f9:
e7:db:07:e1:8a:56:6c:4f:dc:f5:22:c5:aa:96:a4:
6b:a8:51:b7:55:43:81:16:2d:02:a1:e0:bd:c8:65:
ae:b9:a7:87:e6:c1:24:21:7c:f5:a3:db:55:c2:af:
30:40:2c:ad:dc:e1:92:8c:43:08:48:e4:3f:ec:8e:
1a:9a:94:bc:b2:36:68:98:31:db:98:9c:5a:0c:56:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A2:0D:11:8A:DF:C2:BC:1E:81:15:B2:DA:B7:B8:CE:43:60:9F:00
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HaINEYrfwrwegRWy2re4zkNgnwA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.16.0/22
Signature Algorithm: sha256WithRSAEncryption
05:c7:28:dc:f9:87:c4:98:67:2e:cb:a4:a0:f3:b6:0e:23:1c:
f2:4a:d7:95:37:0e:14:06:31:2c:9a:1b:c7:c0:1a:03:d7:93:
f3:79:ab:72:f6:76:05:23:2f:fd:99:70:00:51:47:69:9c:46:
28:6c:49:ea:2a:eb:53:1c:da:84:3f:f7:2e:ed:79:df:7e:01:
46:e1:98:b0:66:1b:30:ca:9e:9c:dd:b4:d2:f4:0d:d4:ea:e1:
07:7b:00:64:41:f1:d6:fa:1b:07:24:f8:b4:7c:81:84:a5:c5:
c9:48:61:55:9b:0f:6f:30:1f:37:9e:2f:e5:0c:2e:b1:1f:19:
43:8f:13:70:6c:90:85:40:79:23:2b:d4:6a:35:36:05:39:3f:
c2:a1:f7:d4:5c:ae:43:b9:2c:82:cd:0b:00:8d:e9:af:83:98:
8e:ca:a7:31:b2:1e:d3:11:d2:51:d5:13:63:b7:3e:ae:c6:2c:
8f:fe:10:e8:d4:ed:5f:37:87:16:14:72:af:9d:29:f9:14:e6:
d4:25:0a:9d:79:89:d2:60:1e:de:06:33:64:49:e9:cf:0a:b8:
68:6b:23:d7:9c:a6:09:ce:76:d1:a1:0a:75:ff:da:62:1a:e6:
0c:c0:46:7c:7f:83:e0:c5:e9:d4:53:ac:a3:eb:05:e9:fe:4f:
5f:71:8e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:26 2025 by rpki-client