Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IPAnXyN-uRaP0xCENnBV2jxjre8.roa
File: IPAnXyN-uRaP0xCENnBV2jxjre8.roa (raw, json)
Hash identifier: wX1gZ3kh0soO0QzNxq2p97aym1xyprGjN/+B8sntado=
Subject key identifier: 20:F0:27:5F:23:7E:B9:16:8F:D3:10:84:36:70:55:DA:3C:63:AD:EF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IPAnXyN-uRaP0xCENnBV2jxjre8.roa
Signing time: Thu 15 Sep 2022 02:53:27 +0000
ROA not before: Thu 15 Sep 2022 02:53:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=20F0275F237EB9168FD31084367055DA3C63ADEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:66:55:3a:fe:59:35:e1:75:f0:d4:5b:7a:
10:bc:ab:fe:5e:3f:57:db:c7:85:c1:56:04:a3:a2:
3c:ac:d8:56:67:fe:68:e3:2a:bb:ed:86:9d:ef:1a:
03:8e:ad:cd:97:76:b4:18:a3:61:4d:08:d8:99:1b:
8b:74:e7:e7:f5:a9:a6:3c:f7:eb:62:af:cd:d8:17:
ae:27:ce:b8:2b:4d:4c:d2:ec:83:8a:3d:b4:d5:93:
fb:d1:c4:6d:ac:b6:5a:fc:26:75:f6:62:40:96:90:
11:9f:0a:49:37:1a:12:70:db:4d:83:68:3e:83:b1:
67:2b:98:cd:70:31:26:87:96:11:6c:17:f1:95:5a:
30:2a:35:60:07:68:c0:ef:21:f7:20:a0:7e:40:b3:
2b:9d:71:6e:ef:ab:69:2b:09:a5:31:02:2a:37:2d:
ea:84:6a:ec:90:68:23:d6:b8:a6:0b:aa:36:18:50:
23:73:f9:ea:fa:5e:c3:ae:3e:f7:5d:5a:1f:95:ff:
6e:b9:87:95:e6:ec:c8:e1:59:13:00:44:d5:bd:7b:
11:36:a8:b7:ec:d4:6c:14:9e:a3:18:8d:5f:88:81:
2a:61:c6:38:50:b7:96:88:37:be:93:cb:44:52:b0:
ba:e0:69:d0:86:b0:d5:01:2e:7d:90:a9:23:13:1a:
76:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F0:27:5F:23:7E:B9:16:8F:D3:10:84:36:70:55:DA:3C:63:AD:EF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IPAnXyN-uRaP0xCENnBV2jxjre8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.200.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:7d:15:20:b8:12:46:53:28:e8:e3:5d:e9:ec:6a:8a:fc:4a:
05:0a:38:66:3e:12:f2:3b:12:ac:e1:f0:f1:b7:11:8f:ad:91:
dc:ac:ee:d8:b1:60:8e:49:29:6f:40:7b:d5:3b:84:3a:72:c1:
07:dd:ab:56:4e:3b:55:ba:47:cb:24:68:6f:de:75:ac:f4:fd:
b0:4d:10:16:f4:ac:66:a8:1c:94:57:0a:47:e1:3a:df:19:02:
81:10:de:ff:0f:d9:4e:fe:4a:9b:91:2e:27:07:8e:2e:5b:66:
e2:07:4c:f9:1a:c1:84:69:6b:ce:d0:b4:28:9f:e5:88:f2:8b:
99:c6:00:73:6d:a1:fb:ac:9d:45:96:da:f9:87:47:42:42:d4:
95:af:d5:b7:c5:e8:7e:0d:66:c6:d7:c0:0f:2c:50:d9:c9:bb:
b5:59:88:d8:87:cf:5d:f2:5f:f4:42:b4:57:4f:6a:8b:46:30:
27:8e:34:89:80:7b:4d:7b:50:56:ee:08:4d:ef:51:f5:df:69:
95:64:43:75:9d:9e:47:36:f0:aa:59:8b:eb:47:19:88:e8:21:
86:93:4c:dd:1e:7f:ca:d9:02:75:fa:4c:fa:b6:f0:f3:98:fe:
4e:46:e4:f2:97:ce:51:8c:46:38:60:71:1c:07:30:33:4d:be:
1f:37:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:42 2025 by rpki-client