Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQG2jVqAmGqTO4gtjn4VyGFrTRU.roa
File: RQG2jVqAmGqTO4gtjn4VyGFrTRU.roa (raw, json)
Hash identifier: dUoOg8/xUhXCctCs9+NIyNHomYCRJfR4q3RAP494Xd8=
Subject key identifier: 45:01:B6:8D:5A:80:98:6A:93:3B:88:2D:8E:7E:15:C8:61:6B:4D:15
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CE4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQG2jVqAmGqTO4gtjn4VyGFrTRU.roa
Signing time: Wed 29 Sep 2021 02:48:21 +0000
ROA not before: Wed 29 Sep 2021 02:48:21 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.176.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7396 (0x1ce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:21 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4501B68D5A80986A933B882D8E7E15C8616B4D15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:37:d0:43:39:31:0a:bc:48:a1:f9:7a:1a:
b8:4a:ff:fc:81:f2:26:0a:68:3d:bc:b2:c0:e3:eb:
d7:d1:25:68:f0:9b:62:c1:8c:bb:e8:16:52:4d:c1:
16:fc:f3:38:e2:77:db:12:4b:3c:7b:2b:a3:4f:c2:
ba:6b:ad:16:d2:40:4a:69:33:e4:fb:eb:43:cf:81:
f4:d1:b4:7f:a9:a0:44:6d:11:cd:89:6e:b5:9e:76:
08:6e:07:18:7f:24:22:89:78:46:c9:3e:7b:05:8f:
79:d9:24:a7:07:82:4b:69:e1:ab:f8:3f:73:13:71:
3a:17:6b:c3:ca:e7:d9:ec:c4:5b:99:97:b6:58:4b:
5a:ae:1a:b2:39:e7:2c:5f:26:bf:1e:57:43:59:10:
6a:68:94:3a:59:3f:b5:69:80:47:d7:8a:f9:4e:34:
a5:92:9d:9f:85:c5:b1:60:42:e1:c5:8c:ec:9b:ae:
63:53:3f:0c:6d:5a:27:7d:3f:2e:53:ff:3c:c3:ef:
3d:8f:db:ea:75:1d:78:79:39:35:8c:c1:24:da:7b:
4b:f9:47:e6:60:cb:98:c3:ef:de:f9:45:78:3f:c5:
92:be:e7:46:54:8f:2d:80:3a:92:c5:8d:c1:23:d4:
ea:f7:49:ee:cc:34:c6:bb:55:eb:c0:88:0e:bf:e8:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:01:B6:8D:5A:80:98:6A:93:3B:88:2D:8E:7E:15:C8:61:6B:4D:15
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQG2jVqAmGqTO4gtjn4VyGFrTRU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.68.0/22
Signature Algorithm: sha256WithRSAEncryption
30:07:3b:5d:b4:fc:68:af:54:3f:d9:28:16:3d:bd:21:8c:3c:
03:13:2d:54:2d:d6:a9:c1:0d:ce:47:a2:d4:ff:32:04:ac:df:
a9:9f:d6:12:7e:da:04:3e:ca:a8:45:3b:a6:a1:17:b3:ae:10:
ce:8a:44:fa:ab:f4:01:e2:ba:04:bb:94:ee:13:d2:50:3a:31:
13:44:16:d4:20:6d:95:f2:6d:f2:c2:e1:e1:52:da:2d:2c:c6:
2a:9a:71:85:7b:f3:0a:0c:01:42:99:7d:79:a1:47:b3:c4:64:
7d:ae:6a:40:90:4c:ed:bc:3c:f1:44:ed:d0:d8:82:43:44:e7:
ab:ff:6f:f8:b0:fe:59:ec:f9:2f:7f:c5:a8:04:7b:4a:17:d9:
ba:83:89:d2:1a:f7:49:af:73:c1:8d:a6:a0:bc:84:87:4b:c1:
10:12:c9:94:1a:12:32:f3:ef:c4:b9:0d:c7:4e:1a:45:68:44:
71:e7:8c:46:6e:5e:ab:ab:2c:92:cf:3c:8c:e6:fc:c9:b6:89:
88:6b:61:29:4f:fa:b7:6d:64:96:93:71:08:73:29:f1:3e:ed:
88:75:e2:d0:85:4f:86:53:22:c3:2f:0a:b2:52:26:64:52:c8:
f2:95:1b:8f:7f:bc:75:f9:cc:87:2b:40:19:76:fe:2c:ae:c1:
60:8d:ea:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org