Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QMTLodg3TlY8FJpyvb2l_bE6OXg.roa
File: QMTLodg3TlY8FJpyvb2l_bE6OXg.roa (raw, json)
Hash identifier: vkI79x/9X0b2DmXCEWeRoDfxTqCODVPUW+S/k4xCeBc=
Subject key identifier: 40:C4:CB:A1:D8:37:4E:56:3C:14:9A:72:BD:BD:A5:FD:B1:3A:39:78
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C94
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QMTLodg3TlY8FJpyvb2l_bE6OXg.roa
Signing time: Wed 29 Sep 2021 02:47:56 +0000
ROA not before: Wed 29 Sep 2021 02:47:56 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.177.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7316 (0x1c94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:56 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=40C4CBA1D8374E563C149A72BDBDA5FDB13A3978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d9:15:1a:b6:a4:c3:48:4a:d8:f5:4c:bb:67:
cd:0c:72:36:7e:8d:dc:42:f1:99:f7:b2:dc:86:bc:
e0:24:56:8f:31:8f:ae:95:8a:0c:88:e6:a2:ca:c8:
60:d3:17:9b:17:46:88:35:ed:7e:5a:c1:a7:a4:df:
b0:e9:e1:a6:a2:32:49:57:08:67:33:8e:7b:23:9a:
4d:76:7a:16:3a:af:22:8a:91:2a:6c:f1:69:c3:32:
63:25:12:2c:7b:03:1f:ae:d9:77:7e:a3:a4:af:2d:
3d:ca:88:7c:d7:78:ee:7b:29:21:b0:52:cc:4f:a9:
f4:bb:74:62:3b:e7:33:01:72:8b:10:d4:ed:6b:09:
e8:d9:29:d9:51:94:3b:ee:3d:b3:0c:9b:c8:82:07:
5e:cb:5f:39:7f:f8:ed:f0:e6:a4:e0:42:e2:f9:51:
d0:3a:e0:0a:09:a5:d9:cb:52:d3:24:0d:10:26:1f:
dd:72:63:01:10:6e:03:2e:fb:9a:bd:a5:e7:fa:12:
f7:1a:70:f1:23:25:41:8d:69:bc:2c:70:ee:73:ed:
62:fb:89:43:a3:2f:ac:0f:d4:86:56:5d:21:31:2b:
07:f7:86:64:6f:78:0c:e1:3f:3e:ce:81:65:36:dc:
5f:9c:15:d7:2d:c2:b2:e1:e9:76:37:c4:3c:15:c6:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C4:CB:A1:D8:37:4E:56:3C:14:9A:72:BD:BD:A5:FD:B1:3A:39:78
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QMTLodg3TlY8FJpyvb2l_bE6OXg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.140.0/22
Signature Algorithm: sha256WithRSAEncryption
08:0a:ea:d2:e4:54:c9:1b:1a:67:a8:fe:0d:ff:ca:db:87:82:
6d:0a:8a:55:6d:43:ed:f4:f7:8f:37:9f:4c:c3:47:24:ed:e3:
56:15:d4:ee:35:95:47:59:71:2d:3e:10:1b:e9:40:d0:ae:19:
8e:fe:db:8a:81:72:7d:ba:fd:b3:a2:c7:9e:5f:d8:7c:75:f9:
6c:cc:93:6e:ac:dd:e2:3e:3d:7f:0b:92:6d:25:ab:7b:2e:be:
99:01:49:d7:7e:57:1c:58:eb:42:0a:b8:c8:2f:b3:25:42:2a:
5f:a0:58:77:56:ff:03:8f:90:9e:c8:79:54:f4:f3:88:aa:61:
d1:64:5c:c0:d2:30:da:92:67:7c:28:00:6f:53:7c:30:68:1e:
99:92:6c:a8:59:9d:f0:b9:6a:e3:d8:bb:5d:7e:37:8e:53:4f:
ff:cd:2d:05:29:09:ef:9d:1d:43:81:a4:89:3e:37:cc:47:61:
da:ec:71:9c:6c:02:ba:23:6a:13:52:30:39:4e:7a:fb:19:69:
6e:ac:a8:a9:ae:5f:3d:57:36:f7:bc:0b:97:87:2f:6d:19:f3:
60:62:fe:fc:10:af:59:20:ed:68:ff:2d:d2:d1:ff:86:c8:16:
45:8b:8a:17:16:05:da:fa:9f:14:b1:83:2d:14:8d:d8:0f:ee:
d2:fa:d4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:30 2024 by rpki-client on console-ams.rpki-client.org