Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NHXT5BJt-MKBjKyqL_RiMIZEpP4.roa
File: NHXT5BJt-MKBjKyqL_RiMIZEpP4.roa (raw, json)
Hash identifier: b+9ApD8p26g8ldp7NCW1QFdK/LUyioocNoawbsqukKw=
Subject key identifier: 34:75:D3:E4:12:6D:F8:C2:81:8C:AC:AA:2F:F4:62:30:86:44:A4:FE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E60
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NHXT5BJt-MKBjKyqL_RiMIZEpP4.roa
Signing time: Tue 29 Sep 2020 09:55:40 +0000
ROA not before: Tue 29 Sep 2020 09:55:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3680 (0xe60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:40 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3475D3E4126DF8C2818CACAA2FF462308644A4FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:71:19:71:5a:20:85:06:3b:de:a6:9d:e2:
9a:b2:c2:2b:07:c0:9c:8e:9b:5b:5c:f1:6a:ee:cc:
7a:5d:4e:6b:6e:3d:c8:53:04:42:d9:36:b3:2a:34:
b9:93:cc:80:4f:8f:0c:c8:2e:08:7a:3a:e2:d1:9b:
97:33:93:b0:8f:4b:c0:ae:1f:44:ba:1e:9f:aa:a3:
08:9f:59:e0:14:14:98:f7:ec:19:bc:2b:da:66:e2:
fd:a9:fc:95:c2:38:a8:29:2e:34:95:4e:4b:03:20:
08:78:a8:4a:2d:7f:38:1d:cc:b4:6a:70:58:a0:e6:
0c:30:93:e0:61:f8:de:e8:d5:d9:09:7c:33:0d:fa:
99:d0:2b:a9:30:03:59:76:d4:cb:64:ee:04:dd:44:
ec:9f:de:1f:db:58:10:d4:95:ee:58:88:be:2b:0f:
cf:d5:d2:cc:b8:4a:50:b9:96:7d:6a:55:43:02:f3:
c4:3f:fb:40:2f:a0:2f:14:4a:f3:16:82:71:f3:9f:
5d:0a:76:30:88:2b:58:a8:1e:36:22:c6:05:db:b5:
1a:8b:50:96:40:11:9a:c7:55:00:13:06:da:20:41:
eb:26:25:dc:ba:a5:d2:6f:a3:b7:7f:25:cc:00:b2:
05:91:5c:9b:9c:e4:fc:a1:2e:84:f5:f5:02:79:9e:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:D3:E4:12:6D:F8:C2:81:8C:AC:AA:2F:F4:62:30:86:44:A4:FE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NHXT5BJt-MKBjKyqL_RiMIZEpP4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.196.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:47:e3:d9:ea:0c:be:56:bd:06:5c:64:cc:55:95:2a:88:11:
67:6d:6f:85:ca:25:e9:19:01:4b:75:5e:42:80:8a:a9:ab:a3:
d4:21:06:0f:ea:bd:18:87:2d:72:76:04:8f:da:5b:eb:80:f4:
fa:2b:e9:22:79:fd:a6:d8:19:ba:30:59:a1:55:38:13:a8:5f:
a3:87:6b:9a:bb:3f:f8:ae:88:ab:2b:49:b1:39:10:20:1e:55:
a1:52:d9:11:89:c5:a2:e3:b2:98:ec:8d:92:33:ab:20:72:84:
20:2d:4f:f3:ad:74:e1:da:83:fc:f6:3c:82:c8:06:c8:e8:31:
5a:5b:fb:ed:7d:66:fd:a1:5e:36:23:ee:4a:34:ff:f9:ed:2d:
99:b6:cb:62:58:56:2f:78:8f:08:cf:78:8e:c8:1c:44:93:7d:
42:b0:e7:f7:a1:be:6c:47:a6:45:0a:9e:61:bd:a9:61:c7:65:
da:ac:72:b8:cf:19:e7:17:b5:1e:a9:0c:ba:ef:66:61:39:9e:
63:9c:07:35:41:fa:5d:f6:4a:6d:99:3e:c2:3d:8e:11:be:49:
b5:03:eb:8c:4a:87:11:72:d5:c9:01:43:63:7e:9b:6c:f8:70:
44:15:a0:8c:e9:a4:53:f9:c8:85:d0:11:e7:e4:f9:78:6b:94:
c4:49:c2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org