Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RLRArKo7w2M4lkRPYq2Z9oRj76s.roa
File: RLRArKo7w2M4lkRPYq2Z9oRj76s.roa (raw, json)
Hash identifier: ESRHw7SiEzNEdEAogh1RC3mt5Ztro5oHGKORIqUG684=
Subject key identifier: 44:B4:40:AC:AA:3B:C3:63:38:96:44:4F:62:AD:99:F6:84:63:EF:AB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 141D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RLRArKo7w2M4lkRPYq2Z9oRj76s.roa
Signing time: Sun 07 Feb 2021 11:57:27 +0000
ROA not before: Sun 07 Feb 2021 11:57:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5149 (0x141d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:57:27 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=44B440ACAA3BC3633896444F62AD99F68463EFAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:9d:a2:5f:6f:bd:ab:d5:98:16:d4:a2:b4:
96:2b:2f:ea:b9:8c:70:51:1d:20:0e:dd:44:0b:d0:
65:a1:bf:d7:fc:97:8a:ad:2a:9a:c4:17:7c:6e:a6:
52:f0:02:41:9d:85:d4:93:39:0e:0d:7d:77:d6:f6:
93:0c:41:1b:26:76:00:87:c9:bb:bd:f4:ae:57:74:
77:80:90:ef:a6:7c:21:65:2a:c3:ec:7a:d9:71:83:
08:28:d0:45:1b:f8:07:37:e5:2f:d2:96:2a:74:51:
99:a9:e9:3c:cc:d8:7d:ac:50:0f:06:e3:95:0f:93:
9b:ce:05:95:77:ce:f1:8c:95:f3:29:fc:c8:57:ec:
84:c3:5c:f0:58:a9:b9:bb:15:fc:47:27:86:45:bb:
2d:29:33:5b:7c:dc:4f:40:2e:fe:66:28:cc:08:08:
7e:b4:f7:ad:a9:99:43:67:ee:0b:e4:68:b1:f5:98:
27:8a:c4:42:4e:61:6f:b6:20:b8:96:39:b5:c9:8a:
b5:1a:79:43:aa:6e:4c:b3:03:44:1e:52:4f:26:5f:
7b:59:0d:63:4e:96:cd:3a:f5:4d:c1:4e:40:02:35:
5b:4e:ef:5b:38:be:38:8e:19:bd:7c:92:ac:3c:60:
9a:27:81:e3:ea:8a:6b:4d:03:5c:17:4f:dc:4c:f6:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B4:40:AC:AA:3B:C3:63:38:96:44:4F:62:AD:99:F6:84:63:EF:AB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RLRArKo7w2M4lkRPYq2Z9oRj76s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.196.0/22
Signature Algorithm: sha256WithRSAEncryption
63:de:c9:be:4c:96:2e:a7:5a:82:9c:d0:7b:c1:2d:82:79:7c:
c1:c5:ab:f7:ec:49:f2:a2:a6:ed:a7:e1:14:f9:36:ef:f0:25:
f6:39:ee:f6:93:1a:03:be:50:1f:ce:8c:b5:d2:e3:33:8f:d2:
df:73:01:27:d3:cf:58:cf:30:d1:ee:d0:fe:f4:18:3b:78:20:
c7:72:5b:5f:3c:35:60:9c:f4:da:ab:6b:af:ff:2b:0a:cd:f2:
3f:2f:06:3a:6f:0f:b8:0b:ec:a2:bd:f2:9d:d9:c0:d5:55:73:
bd:25:f5:98:dc:f0:60:8f:be:a0:25:3f:c5:fc:bf:e6:a3:d5:
25:57:ae:36:2a:41:c3:4e:95:bf:b1:0a:6f:9a:3d:34:e5:7f:
6d:22:d8:6f:5e:1d:88:52:35:17:32:04:24:7d:de:80:e6:b3:
ca:bd:c6:83:dc:5b:9f:80:80:fc:e6:75:49:db:4f:9b:3f:bd:
5d:f9:d7:25:86:f9:ae:e2:94:cf:d6:92:ed:3c:9d:00:99:bc:
c7:cf:5d:d7:49:ab:15:e8:6b:06:0d:9e:b3:46:12:df:05:0e:
06:bd:e9:a3:24:3e:ca:b2:d5:d5:66:78:00:d7:24:ba:e2:4d:
cc:08:26:2f:f3:85:57:0d:4f:c6:5e:69:32:e7:1f:94:23:90:
c8:83:db:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org