Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QBuJPHtSAuZgNDm9_xKupmwG_mk.roa
File: QBuJPHtSAuZgNDm9_xKupmwG_mk.roa (raw, json)
Hash identifier: ovTQTi1u75sZT/a7UzkQAIL7U+Tv3pRVTQ1pE6n9rbY=
Subject key identifier: 40:1B:89:3C:7B:52:02:E6:60:34:39:BD:FF:12:AE:A6:6C:06:FE:69
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 154F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QBuJPHtSAuZgNDm9_xKupmwG_mk.roa
Signing time: Sun 07 Feb 2021 12:03:55 +0000
ROA not before: Sun 07 Feb 2021 12:03:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.236.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5455 (0x154f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:03:55 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=401B893C7B5202E6603439BDFF12AEA66C06FE69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:66:c1:b1:c5:72:21:b3:ba:ab:c2:a2:64:
3f:84:d4:b1:83:58:96:cf:89:7d:45:08:8c:fc:39:
9a:e9:ea:6c:9c:c6:ec:bf:22:d8:62:74:7a:b2:74:
3b:07:40:ce:2f:56:1c:f2:fb:98:10:2d:e3:b0:19:
a1:f2:af:55:37:fe:42:00:cf:53:31:ac:22:68:a0:
38:2a:86:bf:b4:44:49:f4:c3:98:b8:cd:c0:b5:68:
43:c7:c3:8e:cb:4e:fb:d0:bb:19:7d:09:58:51:0f:
72:44:23:d6:72:23:bc:cd:04:6e:bb:39:cc:25:00:
f9:a5:ac:08:bc:09:5d:16:32:0c:c7:4e:a0:05:ac:
36:54:9f:b0:87:cc:42:83:09:bc:69:03:e0:c1:d3:
21:2f:6b:c9:49:92:e6:ae:74:fa:1c:ed:5f:37:66:
fd:95:3e:05:62:3e:f4:aa:d5:29:ae:dd:ec:39:b8:
18:b3:54:a7:56:24:2f:f7:b8:d2:cf:8f:4f:39:d2:
fc:9a:2d:5f:28:87:2c:ac:04:24:2d:2b:7d:a3:4c:
77:c0:5a:90:bb:eb:bd:1e:23:38:af:c7:c3:b9:78:
10:bf:e2:73:7f:c9:da:94:90:2f:f5:22:67:4c:db:
07:15:4b:4c:d0:e2:d6:4b:ae:21:36:27:b6:ef:47:
16:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:89:3C:7B:52:02:E6:60:34:39:BD:FF:12:AE:A6:6C:06:FE:69
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QBuJPHtSAuZgNDm9_xKupmwG_mk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.236.0/23
Signature Algorithm: sha256WithRSAEncryption
71:df:4f:5d:87:f9:a3:95:24:bc:dd:d8:2d:c2:61:94:fd:0c:
f2:c9:81:b1:4e:1f:bb:2e:2b:46:d7:81:6f:c1:8f:c8:c6:4f:
82:18:d5:e4:04:fe:38:c1:66:25:3f:14:10:84:e9:6e:9c:88:
dd:9c:c5:09:9b:75:ce:6c:85:4c:a1:7e:1e:36:6a:f6:7e:30:
c2:d4:b9:b7:2a:50:c6:99:f2:05:1b:51:15:4c:44:ce:05:9d:
f5:52:bf:2a:92:aa:4e:8b:10:b6:2a:52:cc:35:ac:f5:3b:ae:
11:b8:8c:79:ca:80:6b:e8:6f:1f:1a:37:16:92:06:55:e2:5e:
ca:70:b5:f1:3e:a4:aa:5b:29:d0:2a:0c:ed:fb:c3:ce:61:c0:
36:34:06:dc:17:d7:d8:f6:e4:9d:31:d2:9a:c9:d9:91:87:3b:
f0:9d:31:a8:dc:3c:04:1d:f2:1e:7e:68:4a:2b:a1:25:09:c1:
a6:87:7b:28:7a:9d:b8:91:1b:1e:a3:cc:9f:52:39:de:49:e3:
78:7d:99:33:6e:42:ca:7e:2e:a8:65:06:ec:3b:a2:14:fa:60:
d2:f0:f4:fb:92:82:2d:8d:9c:14:e4:22:00:21:4e:4f:f8:40:
9c:7d:83:86:ca:c0:e1:97:58:6f:d4:fa:7f:13:92:06:90:dc:
c2:12:5d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org