Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KgXBzaf4iCiZL3r3grH3AuC6Bso.roa
File: KgXBzaf4iCiZL3r3grH3AuC6Bso.roa (raw, json)
Hash identifier: EE5iBZAzjXi6sXMcgnkA+cK2DJ2UPqRLA7w3sbGSw74=
Subject key identifier: 2A:05:C1:CD:A7:F8:88:28:99:2F:7A:F7:82:B1:F7:02:E0:BA:06:CA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KgXBzaf4iCiZL3r3grH3AuC6Bso.roa
Signing time: Thu 15 Sep 2022 02:46:13 +0000
ROA not before: Thu 15 Sep 2022 02:46:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2A05C1CDA7F88828992F7AF782B1F702E0BA06CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f6:ad:0d:d9:a5:82:3b:18:6b:c0:6e:36:7b:
f0:40:e3:30:fd:44:02:f6:97:55:78:5f:00:5b:5a:
17:74:b6:12:95:be:93:28:88:79:17:00:3a:c1:35:
47:c5:0d:8e:6e:ef:9b:eb:63:fc:d2:46:15:06:9e:
e6:e7:54:16:e3:7e:12:49:9c:4f:6c:21:ae:e2:66:
2c:5e:e2:93:0e:fc:02:aa:60:fc:9b:55:5c:54:4d:
ac:b3:54:e2:1f:22:64:71:18:dc:e3:78:36:bd:96:
df:b4:fd:36:aa:3f:e2:6a:69:4a:8f:ba:fe:03:19:
b4:d7:8f:19:13:9a:76:a5:cc:0e:e3:be:ec:a6:c9:
c4:3d:94:80:a8:4c:65:91:6d:08:e7:5b:cd:ce:d1:
be:82:03:2b:22:25:4f:62:fc:55:29:dc:3a:0e:9c:
70:be:b4:a2:4c:ef:e4:5f:44:43:a8:05:92:55:80:
b0:62:68:6e:c1:6c:f9:c6:fd:5b:1f:82:53:a1:86:
ca:f8:84:26:92:a3:95:01:90:e8:68:c3:af:9a:c8:
bd:1e:0d:7b:a1:db:ae:d0:19:a7:f4:42:98:1b:df:
af:aa:c5:a9:73:f1:e9:36:ce:60:bf:6d:c0:5b:09:
0b:0e:78:b0:d1:42:7f:7c:f5:1f:e4:31:4d:32:b6:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:05:C1:CD:A7:F8:88:28:99:2F:7A:F7:82:B1:F7:02:E0:BA:06:CA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KgXBzaf4iCiZL3r3grH3AuC6Bso.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.228.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:ba:13:14:4f:4d:10:60:78:88:6e:72:f1:4b:5e:d1:fd:35:
03:08:a6:d7:d5:26:2c:d8:ea:a4:55:73:8a:48:58:c4:b1:7c:
5f:13:57:71:1f:76:46:b4:88:12:b3:ff:1f:8e:fd:d4:d7:aa:
f4:af:c4:1a:28:8f:e5:e0:6d:d2:ed:68:50:ae:66:e3:19:51:
2f:02:92:f6:56:3d:17:09:e9:6a:1f:00:2d:08:92:98:b0:1f:
d4:36:4e:75:87:32:f3:cd:2c:a8:e7:e3:39:50:7c:a1:f0:ef:
40:98:d8:e1:05:a1:b2:73:8f:9d:bd:1c:b3:cf:5a:47:e7:d3:
3a:db:3f:78:fd:15:58:00:3e:38:0f:52:1a:bd:d5:84:03:45:
8c:16:33:7d:2a:38:dd:e9:fb:21:54:4a:70:0b:25:e0:b3:f7:
49:5a:2b:b8:ec:b5:cd:c4:b3:9e:4c:36:52:d5:3f:d1:73:ba:
7a:e6:fb:40:ed:ac:c6:e8:c6:62:66:78:5c:25:dc:d1:ed:73:
44:b3:00:f3:df:04:e3:bf:0c:3c:64:94:07:c9:84:7e:39:d5:
b2:81:c7:bc:21:97:61:63:55:d9:ef:6c:66:b3:3c:4c:af:e7:
37:17:52:92:83:40:0a:53:72:93:f5:b0:62:3d:0f:39:17:37:
63:c7:51:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org