Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K7sz-OBIqxyq_eh3_9ZPGbVAHW4.roa
File: K7sz-OBIqxyq_eh3_9ZPGbVAHW4.roa (raw, json)
Hash identifier: yKCYcGweCc1YbRN+1+FaJJPYuqUKGje6OssB0Q2mh8M=
Subject key identifier: 2B:BB:33:F8:E0:48:AB:1C:AA:FD:E8:77:FF:D6:4F:19:B5:40:1D:6E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1589
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K7sz-OBIqxyq_eh3_9ZPGbVAHW4.roa
Signing time: Sun 07 Feb 2021 12:05:09 +0000
ROA not before: Sun 07 Feb 2021 12:05:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5513 (0x1589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:05:09 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2BBB33F8E048AB1CAAFDE877FFD64F19B5401D6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:dd:ed:7b:56:81:df:12:e7:b7:0a:1e:01:
ed:f2:93:12:e1:c8:b7:bd:c3:21:1c:74:68:c5:ce:
e9:d0:e6:87:f1:84:4e:d0:0d:01:df:ab:86:4d:78:
8d:f3:ca:49:3b:22:69:c0:f8:9c:7f:2d:a5:90:ee:
ae:c1:0c:8f:17:f4:4b:ee:e5:38:a3:10:98:d1:00:
e5:9f:ef:8b:ed:cb:e5:06:e9:bf:ef:19:3f:5c:3a:
d4:55:c1:c1:c6:30:e1:0d:d2:e2:f6:1e:8c:9c:e4:
e4:ff:95:cf:c7:ec:68:58:10:98:d3:e6:19:22:1b:
a6:1b:20:0f:ae:82:01:4c:e6:03:70:0d:27:37:4a:
bf:8a:dc:3a:43:0e:f5:64:96:e5:8e:26:55:a1:60:
46:b7:2b:ea:df:61:2e:08:e5:53:32:2a:d9:7a:5f:
90:9d:49:c1:53:19:64:f6:15:c2:f3:7c:ab:cc:b7:
74:ce:ba:d1:1d:1a:23:29:27:5f:43:70:6f:8d:00:
c7:ce:ee:b7:e5:50:00:a8:0c:b2:dd:fd:9a:0e:6a:
b7:28:dc:14:c3:b1:a4:cf:c7:38:dc:70:9e:91:31:
d8:88:42:e8:3b:d3:53:14:6a:08:c8:2d:27:75:cd:
73:0a:99:fa:af:43:6f:c8:3b:eb:48:41:4f:a3:05:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BB:33:F8:E0:48:AB:1C:AA:FD:E8:77:FF:D6:4F:19:B5:40:1D:6E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K7sz-OBIqxyq_eh3_9ZPGbVAHW4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:81:35:7a:c3:da:67:78:ba:43:5c:5f:03:2b:03:70:25:22:
df:7a:bf:a6:33:94:b6:df:dc:51:72:93:28:8a:18:6d:09:5e:
1c:d1:68:4b:2e:55:8d:eb:cf:9d:a5:2f:07:dc:86:85:40:a0:
a8:5e:47:cb:bc:ef:ef:19:b4:19:24:b1:af:80:94:53:7b:c8:
d7:85:72:1d:ba:d1:e6:66:84:85:62:99:9a:a3:65:d4:ab:77:
a9:72:cf:36:41:4c:c1:8f:8f:70:9a:bb:a0:c5:c8:d4:08:a4:
98:f3:df:d3:1f:be:e0:58:8b:8c:48:eb:12:55:5d:86:d1:71:
f4:9e:6d:12:a3:17:ba:80:6d:fb:3b:a7:d9:1d:d7:47:5e:fd:
3d:1d:91:4f:f2:9f:44:4a:78:93:85:60:24:de:a5:0d:65:a1:
f1:d3:ea:b6:7e:55:8f:0b:40:b7:77:56:ec:6c:7b:87:92:15:
82:d6:b1:ab:cf:23:71:06:ff:da:52:89:76:13:70:6b:3b:74:
1a:9e:8c:18:36:c5:3b:f6:a6:2e:be:8a:21:3e:e7:5c:13:a7:
b8:1b:ee:00:90:07:fd:eb:08:59:82:c7:8f:78:cc:80:2f:a6:
c0:48:ee:b2:44:89:aa:55:06:fc:be:dc:d7:75:9d:18:10:bb:
b6:bc:45:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:26 2023 by rpki-client on console-fra.rpki-client.org