Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PspvXelV-8su9DYws6Sb4YoHIBI.roa
File: PspvXelV-8su9DYws6Sb4YoHIBI.roa (raw, json)
Hash identifier: XzgcjPtk7oZr8DjLhS0VYH9hIhJc81LJ9Se4H83Cfco=
Subject key identifier: 3E:CA:6F:5D:E9:55:FB:CB:2E:F4:36:30:B3:A4:9B:E1:8A:07:20:12
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PspvXelV-8su9DYws6Sb4YoHIBI.roa
Signing time: Thu 15 Sep 2022 02:53:30 +0000
ROA not before: Thu 15 Sep 2022 02:53:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.184.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3ECA6F5DE955FBCB2EF43630B3A49BE18A072012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:58:c1:b5:cd:c2:4a:df:ba:47:aa:e0:ac:ad:
0e:97:a0:43:ea:42:42:54:ef:47:ae:ea:9d:d7:33:
2e:f8:77:89:0d:ff:00:6f:10:45:ef:7c:50:43:8a:
87:b3:b3:ea:ad:b9:e9:33:32:c2:cb:8f:ed:0a:a3:
cc:99:03:8e:ea:92:ae:2e:77:74:1c:d3:3c:a9:94:
84:76:12:9e:6e:d2:ff:d9:9e:0f:eb:05:7f:f9:00:
66:89:5a:89:80:27:83:ba:2f:27:a4:aa:ed:08:c6:
a2:04:a8:31:57:44:36:8d:e5:82:5d:8c:67:91:72:
9d:b7:90:11:df:21:a6:8a:18:cb:c3:df:17:8e:61:
58:f7:e7:72:72:44:87:18:89:d9:15:d6:49:5a:f6:
db:a1:74:3a:50:92:2c:05:f2:ef:0b:0b:36:9d:84:
64:cf:2f:3e:b3:10:10:49:8d:ce:8b:39:dc:25:55:
0b:4e:4d:fc:83:72:97:04:0a:e1:4e:39:b6:50:77:
e8:b5:ea:78:86:92:1a:9e:92:3a:45:00:23:ac:86:
5e:37:64:ab:2f:f3:0f:12:8a:fc:32:50:58:2b:4d:
0b:c7:09:3d:7a:66:f2:35:fb:d2:d3:cc:a8:ac:6a:
7b:ca:70:56:1e:d5:67:dc:81:7a:9e:ae:7c:52:cf:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CA:6F:5D:E9:55:FB:CB:2E:F4:36:30:B3:A4:9B:E1:8A:07:20:12
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PspvXelV-8su9DYws6Sb4YoHIBI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.184.0/21
Signature Algorithm: sha256WithRSAEncryption
35:65:b0:7e:21:59:9b:7e:94:11:da:c1:d6:a5:17:16:2d:ef:
23:d2:a8:b0:0d:e3:33:98:81:a5:8c:17:67:5c:cf:4e:13:ee:
c3:25:ec:c3:42:7b:6e:88:9f:b0:e0:fb:e3:3b:22:09:b0:e8:
08:87:c7:07:d1:22:65:8a:8c:bc:51:82:d7:fa:7c:a5:e5:8a:
15:5e:ea:e2:9f:73:54:ee:16:26:82:b1:6a:9e:b9:da:2f:72:
c6:bc:23:f5:6b:d2:5b:cb:79:59:24:48:f2:bb:9e:74:14:32:
6f:7f:52:3b:8e:db:2f:78:f4:93:ba:41:f0:cc:5f:87:82:4d:
bb:43:b7:0e:49:58:22:95:8a:27:5a:43:c6:2b:58:5e:2e:dd:
b0:42:8d:3d:06:1f:96:4a:5f:71:18:6b:df:21:6c:cf:b8:83:
ac:36:d2:50:41:d4:78:59:f6:02:ba:e4:99:b1:72:8e:3f:09:
7d:e2:6c:6f:cc:f5:3a:3b:7b:be:a6:9a:51:1f:1f:f6:13:d8:
dd:dd:5b:0d:39:49:1a:aa:df:f0:8e:c7:df:39:f3:f2:90:e8:
33:b6:fd:3c:7a:bc:c3:0c:eb:35:89:1a:4b:a4:6d:cf:9c:28:
40:49:c0:ba:a5:95:c9:02:4d:6f:f0:c3:b9:60:fb:a1:81:a4:
4f:f6:ac:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org