Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KbBpgHJVnMI3vq4b7k22ur51wXQ.roa
File: KbBpgHJVnMI3vq4b7k22ur51wXQ.roa (raw, json)
Hash identifier: cyD+t4nkO7t6GRhIVe01POypCLOZq357vcN7GMdHmLs=
Subject key identifier: 29:B0:69:80:72:55:9C:C2:37:BE:AE:1B:EE:4D:B6:BA:BE:75:C1:74
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21EF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KbBpgHJVnMI3vq4b7k22ur51wXQ.roa
Signing time: Fri 25 Nov 2022 04:40:34 +0000
ROA not before: Fri 25 Nov 2022 04:40:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8687 (0x21ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=29B0698072559CC237BEAE1BEE4DB6BABE75C174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:ae:5f:e4:a6:84:e9:ad:fe:9c:88:b2:ea:
e4:62:e4:94:90:e4:44:2f:81:68:d1:e8:5d:e4:12:
48:64:bc:e2:50:dd:a4:1e:f5:a3:22:12:04:c6:12:
a7:94:dd:ff:48:cd:8f:f9:41:6a:ce:10:5e:a4:80:
cb:ca:04:6a:91:a4:b6:f9:9e:13:1f:89:4d:1b:dc:
78:46:25:08:f0:39:d1:3e:5e:fd:7b:d3:c0:31:7a:
f7:48:ab:41:b3:87:73:3c:d0:46:a5:98:51:cb:2a:
55:ef:c9:16:68:20:f4:26:c3:e0:06:3c:77:43:c2:
25:2f:b8:b3:78:f7:b0:a0:14:1c:ee:6b:fb:64:1d:
b6:0b:2b:36:30:32:3e:67:fe:d8:97:c9:73:95:1b:
7b:37:59:bc:61:a4:25:9a:73:e9:cd:22:8d:60:77:
45:b3:ef:15:4e:88:1e:b6:be:64:db:92:a5:d8:ef:
15:06:9b:84:c9:fb:91:03:db:a2:1b:30:eb:4e:29:
e2:fa:17:fa:d4:29:cd:1b:66:2f:99:03:9f:ab:62:
90:70:e7:39:c3:4f:66:49:0e:2b:18:1a:f5:27:fd:
52:05:fc:4f:7f:5f:cb:e9:44:3b:8a:a1:a1:66:93:
d2:fa:9d:c8:53:91:88:5e:00:7c:88:dd:1f:02:d4:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B0:69:80:72:55:9C:C2:37:BE:AE:1B:EE:4D:B6:BA:BE:75:C1:74
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KbBpgHJVnMI3vq4b7k22ur51wXQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.80.0/21
Signature Algorithm: sha256WithRSAEncryption
82:67:e3:b3:ee:4a:93:de:03:8f:bd:26:b1:f5:fe:47:6c:b4:
58:90:f8:b9:0c:51:c1:84:56:4f:f2:b2:02:02:ed:fa:a8:9f:
3e:c2:74:39:c4:34:f8:27:f5:49:8f:ae:26:87:25:90:65:bc:
60:87:d1:e4:0f:0f:94:71:4e:23:c0:8e:e5:4c:47:6a:50:1a:
6a:0e:70:e0:77:a3:5d:c8:12:d9:db:c4:44:d6:e4:a2:65:c4:
94:a8:ff:14:22:bc:58:a0:ae:56:c8:96:53:ad:3d:1e:ef:73:
59:54:09:c6:9f:d8:d9:a6:90:46:e4:e9:d8:c7:f9:82:2c:8c:
81:bd:2e:2a:4d:cc:30:7c:82:6e:11:90:21:c1:2f:9a:c5:59:
a3:7e:17:d9:d1:40:ae:9f:20:9c:dc:d5:94:ff:62:f6:ac:ae:
d1:2b:af:34:4a:a5:30:3b:43:09:a3:22:d5:02:b8:ec:d4:1a:
5c:af:82:e2:ba:40:ca:b6:87:a8:b9:85:4d:5a:f1:dc:14:50:
d5:fb:0f:ed:83:25:a0:16:46:16:68:d0:4e:3c:56:40:46:ba:
45:2d:69:52:e7:4b:d6:fa:e3:61:43:97:dd:1d:1d:3c:df:aa:
18:0d:bf:b1:02:70:c9:c9:e8:c4:81:a7:ea:76:e9:d1:4e:7d:
1d:f5:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org