Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JXblRJwenCMLTMUuL7B8sZPNAFM.roa
File: JXblRJwenCMLTMUuL7B8sZPNAFM.roa (raw, json)
Hash identifier: TaLt+vZo1QnnfdZ2rp5aArpn1jtEit2FUS33xaurVXg=
Subject key identifier: 25:76:E5:44:9C:1E:9C:23:0B:4C:C5:2E:2F:B0:7C:B1:93:CD:00:53
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BFD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JXblRJwenCMLTMUuL7B8sZPNAFM.roa
Signing time: Wed 29 Sep 2021 02:47:14 +0000
ROA not before: Wed 29 Sep 2021 02:47:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.177.220.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7165 (0x1bfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2576E5449C1E9C230B4CC52E2FB07CB193CD0053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:91:02:84:ff:16:ef:cd:d7:86:4c:43:b2:
e2:e9:bf:70:de:d0:1b:d7:55:77:e8:d5:65:ef:d8:
d8:12:69:de:6b:ba:0a:4a:4c:09:51:1b:77:0a:b8:
fb:25:70:64:d6:7a:b4:70:95:4c:37:3a:64:b4:99:
83:7e:e4:e8:04:59:b3:06:82:a9:83:fb:16:30:f3:
53:dd:90:83:8d:c0:84:32:7b:0a:a8:53:98:b9:5f:
c2:3a:02:f5:ae:6a:cf:f8:c2:fd:97:9b:e5:74:d4:
3d:44:e2:1f:b6:81:41:72:bd:4e:c2:69:6a:5a:94:
08:c3:37:05:88:74:a6:39:91:ef:67:60:a4:dc:dd:
d9:f5:fd:a4:94:ef:15:01:be:b1:08:ca:1c:38:d5:
fc:73:bf:0e:c7:7e:e0:cd:b3:68:b7:41:55:6d:66:
74:99:1d:0d:78:38:2d:d4:98:b1:90:3c:18:95:2d:
a1:a5:1b:42:38:cb:46:0c:86:63:6a:e9:22:48:0e:
83:04:19:a3:b6:32:e3:1b:a6:a9:1a:6f:f8:23:07:
81:dd:5f:87:b6:2b:69:aa:2f:41:dc:ab:32:6e:c0:
6b:41:43:6d:dd:e7:77:29:ce:70:2d:03:a2:ab:dc:
52:c0:fe:1b:5d:6a:23:de:d9:c4:5f:16:e3:89:f0:
fd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:76:E5:44:9C:1E:9C:23:0B:4C:C5:2E:2F:B0:7C:B1:93:CD:00:53
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JXblRJwenCMLTMUuL7B8sZPNAFM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.220.0/23
Signature Algorithm: sha256WithRSAEncryption
af:bd:d4:de:ed:fe:6b:32:ca:ce:5f:95:d9:dc:4d:98:e4:59:
b2:42:91:de:86:7a:49:bb:f0:c3:3e:87:14:2b:6a:e5:b8:7f:
b6:f4:eb:0b:00:6f:f3:e5:a7:01:b9:0b:62:da:c9:89:2b:b4:
df:c8:1a:5f:87:a6:05:49:6a:9a:89:87:c7:4b:6c:2a:fa:da:
d6:3a:80:c7:45:72:b8:3d:36:8e:1b:4a:24:25:aa:5d:a1:46:
fa:13:16:b6:d8:0e:bd:aa:35:fc:b3:6a:f8:1f:d8:45:78:eb:
e4:55:56:20:9a:68:35:a0:d9:e8:0b:81:35:24:9f:41:09:36:
89:2a:51:17:60:42:9a:13:ed:b9:8e:c4:a7:e5:0f:7f:88:89:
f0:d1:9d:91:fc:e4:e0:b3:84:1c:80:cb:90:94:2a:04:4e:0c:
5c:1d:80:40:45:15:4e:08:92:4f:7a:7e:16:72:ba:cd:aa:e6:
99:22:84:8a:dd:2e:5e:c6:dd:20:05:2c:2f:52:8f:2b:31:07:
8b:90:14:fe:f6:22:f2:48:28:e9:94:04:56:7f:ab:57:d7:b3:
df:9a:a1:c2:d5:91:8c:41:50:c8:9c:80:45:08:fa:e8:c4:64:
73:dd:92:f5:30:e0:7c:21:8e:a3:6a:68:79:1f:0b:46:c2:a7:
f7:b7:3d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org