Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O75pLzaXBTkghNcq9XafSYwJvbA.roa
File: O75pLzaXBTkghNcq9XafSYwJvbA.roa (raw, json)
Hash identifier: LkAf6rn3cwz8CQWRILYAK02EypXoSPg8ZhbOI4cTjVA=
Subject key identifier: 3B:BE:69:2F:36:97:05:39:20:84:D7:2A:F5:76:9F:49:8C:09:BD:B0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BF6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O75pLzaXBTkghNcq9XafSYwJvbA.roa
Signing time: Wed 29 Sep 2021 02:47:12 +0000
ROA not before: Wed 29 Sep 2021 02:47:12 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.177.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7158 (0x1bf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:12 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3BBE692F369705392084D72AF5769F498C09BDB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:9f:77:cd:3e:2b:39:ff:8f:33:23:13:43:
22:ef:c4:d9:80:11:e0:d8:cc:85:14:75:75:0b:27:
b1:c6:0f:1f:7e:2d:df:da:08:bc:64:7f:b8:97:80:
da:b7:55:3f:ee:04:86:43:07:a6:be:92:9e:b3:da:
f7:ee:38:0a:56:0e:c4:c1:ae:7d:d2:40:2c:41:31:
83:bc:bc:56:85:30:85:89:6f:83:e3:e3:94:65:ff:
08:e4:0d:cb:58:18:a6:c9:9c:68:45:42:29:42:3f:
0c:eb:2f:0b:ac:8d:37:cd:8d:40:6a:cb:5d:4b:a2:
0c:2a:bf:56:7b:9d:26:1c:25:c9:50:fd:4a:fe:35:
83:c2:71:42:be:41:ea:23:ee:f0:36:f0:af:b6:a2:
e8:98:38:39:0f:b7:0e:f1:a7:33:a6:90:23:ce:a8:
0e:5c:25:a5:9c:57:1c:97:45:36:00:6d:65:2c:11:
d0:b1:a1:15:d6:a7:c9:8d:84:b1:51:6b:e5:86:bc:
4f:25:6a:86:64:43:c0:b1:88:a9:10:fb:d2:ec:96:
5a:f3:b4:c8:2e:f9:ae:cf:27:ff:39:0f:40:c7:95:
a1:ea:22:14:3e:00:a5:e3:90:3c:72:bb:30:eb:2a:
55:86:0d:63:8a:d0:49:d4:35:67:71:14:17:f8:a0:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BE:69:2F:36:97:05:39:20:84:D7:2A:F5:76:9F:49:8C:09:BD:B0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O75pLzaXBTkghNcq9XafSYwJvbA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.160.0/21
Signature Algorithm: sha256WithRSAEncryption
49:53:f3:a6:c2:95:32:7b:34:fa:11:8e:17:97:53:88:6c:42:
85:50:ae:4e:6f:e7:a9:e6:77:a8:c7:f6:c1:00:8a:fa:80:ab:
1c:d9:fe:3c:c6:5a:c1:b3:07:f9:ae:05:fd:77:3a:89:1d:20:
01:79:e7:08:c3:49:87:7d:ef:80:15:c4:56:5d:ed:ea:9f:f1:
a8:68:ef:85:86:be:ca:7e:27:1d:ed:62:cc:b7:2a:fe:a5:ee:
1d:76:0e:11:14:81:76:bc:d0:da:ca:9f:44:f4:c6:64:66:98:
ff:66:53:5e:1e:46:fd:21:29:18:f4:3d:9d:8e:84:f4:95:13:
fa:18:12:4e:83:f5:1f:38:26:10:81:ec:9f:8a:c6:ba:3c:dc:
dc:18:9f:64:9a:2d:c3:51:16:c0:cb:d3:c6:87:d4:f4:da:9f:
c9:bc:47:5e:74:80:df:af:9c:9b:09:1b:ca:f5:66:19:a8:8c:
22:7f:f8:58:68:23:47:45:0d:08:ee:4d:bf:70:24:67:ce:86:
3e:eb:47:8a:ec:68:72:02:c8:0a:3f:03:89:1e:5c:8b:4e:18:
4d:a3:45:a2:c3:b7:68:c4:dd:45:3c:c2:f9:d1:e7:45:99:a0:
5e:a6:91:6f:c2:be:44:61:2d:52:2c:8f:5c:c0:d9:de:67:5d:
bb:59:03:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org