Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qp_6UlN1M7YuUP5EwaigMOLBrsQ.roa
File: Qp_6UlN1M7YuUP5EwaigMOLBrsQ.roa (raw, json)
Hash identifier: 0gyKUv1+b9ZWy1DtxztbwoWtosBTaqy5L1f0/3uFNLA=
Subject key identifier: 42:9F:FA:52:53:75:33:B6:2E:50:FE:44:C1:A8:A0:30:E2:C1:AE:C4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qp_6UlN1M7YuUP5EwaigMOLBrsQ.roa
Signing time: Thu 15 Sep 2022 02:45:12 +0000
ROA not before: Thu 15 Sep 2022 02:45:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=429FFA52537533B62E50FE44C1A8A030E2C1AEC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d6:86:95:56:06:be:53:67:4d:ec:29:73:58:
d0:38:dd:bd:07:fb:58:d0:c9:a7:1f:f2:a8:07:ad:
3f:e2:8a:fe:92:b8:fd:aa:e4:a1:62:8e:7b:f3:09:
35:1d:1c:49:0a:1c:a7:38:73:07:f9:a3:10:53:7a:
2b:6d:de:d2:7f:ce:f1:9a:f2:03:a1:65:f0:89:25:
39:34:32:fe:f1:58:cd:c0:1b:02:8c:61:05:4e:b8:
9b:83:cf:77:35:a0:26:f4:c3:5a:ea:83:86:a5:f8:
e1:e0:45:7d:39:4d:fb:71:5c:35:40:c4:aa:bd:cd:
0b:bf:17:69:db:77:cf:55:d0:00:56:d8:31:59:32:
29:ac:0a:05:8e:5c:28:a1:59:fe:b6:5a:00:d7:62:
8d:dd:af:15:f0:e2:5d:49:76:06:45:a5:d8:1e:18:
cd:e6:70:b1:4c:bf:09:d7:0b:9b:31:3a:a5:42:46:
8e:cd:20:32:d4:89:f3:64:86:58:02:da:bd:b7:df:
fc:f4:c9:46:a2:07:22:44:f3:fb:b5:b5:62:95:7b:
1e:a3:b1:8a:61:45:8c:d2:c4:89:c1:1c:4e:c8:72:
18:1c:b5:fb:c2:7b:00:28:1a:c2:11:46:07:1b:3b:
a5:d3:d8:eb:50:dc:86:d1:4b:93:5f:ef:8e:79:86:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9F:FA:52:53:75:33:B6:2E:50:FE:44:C1:A8:A0:30:E2:C1:AE:C4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qp_6UlN1M7YuUP5EwaigMOLBrsQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.8.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:a5:43:55:01:02:26:8d:bb:32:74:2a:b8:e6:37:e5:6f:4e:
76:62:f5:30:36:43:3d:61:52:a9:cf:85:e8:c3:a3:9d:0d:1d:
aa:cf:33:e5:5a:c2:9d:16:3d:d9:81:b1:c6:67:68:92:c7:69:
8d:cb:17:2c:c9:ae:d4:23:0a:d5:6b:f2:2b:aa:b1:71:ed:b1:
f3:46:b7:b2:68:f4:19:1e:fe:87:f0:2e:40:ed:5e:7d:2d:3f:
bd:0e:1c:29:15:7e:5a:f8:00:e4:fd:e2:b9:c3:b1:f7:9f:07:
e4:4a:03:28:c6:74:99:4a:b8:06:c4:9c:9c:49:13:55:b5:dd:
fb:ac:87:9f:e9:69:1c:de:a7:71:03:16:6d:4a:8e:52:d9:4d:
7c:89:0b:ae:33:50:79:eb:79:59:62:cb:81:8d:e9:3e:9f:0b:
42:e9:5a:59:68:05:3d:0b:25:66:14:6f:26:87:aa:3c:bd:0a:
87:f4:a7:54:79:b1:72:d7:a1:ed:9d:c9:9e:2c:e1:cc:d9:4a:
26:2f:dc:8f:53:b7:5e:ff:f2:ca:58:c1:59:1e:1b:f1:c6:2d:
a8:af:05:9f:2b:a5:60:6f:a3:1e:18:b5:db:c1:a8:ae:c4:62:
a2:59:50:ff:f9:ac:eb:d0:5b:6d:32:b4:ee:33:a3:55:ce:9d:
4f:82:83:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org