Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qg0yrkbqVGk35X8T0Jo4YC4wxcs.roa
File: Qg0yrkbqVGk35X8T0Jo4YC4wxcs.roa (raw, json)
Hash identifier: FZi4dQSK8WXKiGTViRBvUKorgAsNa08MfFXJOMObTks=
Subject key identifier: 42:0D:32:AE:46:EA:54:69:37:E5:7F:13:D0:9A:38:60:2E:30:C5:CB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qg0yrkbqVGk35X8T0Jo4YC4wxcs.roa
Signing time: Thu 15 Sep 2022 02:45:16 +0000
ROA not before: Thu 15 Sep 2022 02:45:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=420D32AE46EA546937E57F13D09A38602E30C5CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:b4:07:48:32:20:23:69:b6:82:6c:53:a0:
a2:6e:d7:11:3e:da:0b:06:b9:32:ed:38:77:43:50:
a9:3c:8e:71:82:42:1a:03:f3:30:bd:e8:db:d2:8b:
da:01:0b:94:f1:c7:b4:84:aa:80:ef:93:69:ed:93:
74:0c:f6:7c:68:eb:a6:e1:b7:65:ad:7c:45:e2:c5:
64:e9:59:4e:77:9e:4f:ea:ac:32:6a:68:56:5c:03:
10:3b:af:88:f8:58:90:df:63:9f:bc:97:5a:52:b6:
3c:43:13:58:03:e0:af:d5:00:88:cd:a2:e9:9b:77:
27:ff:14:99:7c:33:1e:48:55:3c:2f:41:aa:10:9b:
9a:7b:a1:ef:fa:ae:d8:57:c3:23:c0:28:b2:49:94:
e8:81:ee:2e:5a:a8:83:00:a4:93:e0:82:cf:86:bc:
bc:ba:4a:d4:fe:1a:e5:81:62:e2:7e:1f:ba:f0:59:
ef:78:31:89:80:98:24:00:61:9c:79:ad:3a:6b:01:
f4:cc:1f:05:e4:5f:05:77:5a:6a:28:17:66:bd:fb:
59:6e:d1:3a:62:ce:d3:c5:8b:b1:87:4c:cd:eb:1e:
e0:b9:8f:0a:64:19:91:78:d9:74:50:3b:4a:8e:06:
f5:52:14:be:36:39:f0:5b:49:c0:c2:1c:f6:16:f8:
c1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0D:32:AE:46:EA:54:69:37:E5:7F:13:D0:9A:38:60:2E:30:C5:CB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qg0yrkbqVGk35X8T0Jo4YC4wxcs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.172.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:39:ec:07:f2:38:75:6b:ea:e6:3f:88:02:57:fa:42:41:17:
0c:f8:b7:a1:b0:83:5e:c7:0c:12:17:74:33:7b:c6:b1:86:36:
79:a3:38:c2:a7:db:c9:c2:f0:e6:0d:68:55:2e:87:50:d3:6a:
86:24:f7:63:58:81:aa:e3:f5:73:5d:b7:f2:3a:c8:b7:b6:41:
12:d3:c2:c1:c9:e8:89:06:23:4e:cd:37:ac:c3:5d:28:e4:20:
dc:78:3d:1d:0c:1d:7f:9f:ec:ab:5d:5a:57:27:a9:b4:61:81:
05:4c:94:bc:c6:26:d8:ad:bb:17:7f:12:90:69:1e:ed:3c:9b:
0a:83:f6:93:89:c7:00:02:89:70:db:09:f2:b5:b8:b6:f1:e7:
9a:8f:1d:97:1c:4e:e9:fc:39:64:13:a4:2a:d9:23:46:f4:45:
2c:82:63:7a:82:75:67:ee:34:01:a9:76:0f:29:cf:f4:e4:88:
d0:2b:1f:1d:88:2c:5b:63:a2:12:f7:e5:48:6c:55:eb:9c:87:
2b:57:52:e9:f8:49:f1:75:75:65:e2:cc:2c:7d:9a:62:0d:69:
c0:bf:03:1f:c8:83:2e:ec:80:98:b5:c8:41:e6:45:d3:6f:71:
6d:1f:2e:8e:d3:41:79:70:ca:4f:60:23:31:15:ad:65:32:4c:
eb:52:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org