Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RmO9pAB4w7aLKr1BUe9MmGkW1LQ.roa
File: RmO9pAB4w7aLKr1BUe9MmGkW1LQ.roa (raw, json)
Hash identifier: jZtitScoOBDbXWmEKTnecMn1sPI4wWntoc4e5sFQ/X0=
Subject key identifier: 46:63:BD:A4:00:78:C3:B6:8B:2A:BD:41:51:EF:4C:98:69:16:D4:B4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1ABA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RmO9pAB4w7aLKr1BUe9MmGkW1LQ.roa
Signing time: Wed 29 Sep 2021 02:45:41 +0000
ROA not before: Wed 29 Sep 2021 02:45:41 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 180.176.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6842 (0x1aba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:41 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4663BDA40078C3B68B2ABD4151EF4C986916D4B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:1e:59:bf:84:b7:36:43:d2:dd:fe:06:b0:
37:e4:66:f7:1a:0c:b9:20:16:83:c3:2d:a9:b6:3c:
c9:e2:e1:cb:b0:e5:58:8a:a3:0c:8d:5e:a8:7c:44:
7a:5c:f4:ea:c1:e1:6a:d7:91:b2:8f:3b:f3:1c:7a:
d7:d7:37:4b:1d:4b:e7:d9:ae:57:2e:d7:1b:04:7e:
4b:b1:d6:32:af:ba:51:26:d9:10:b6:8e:22:61:af:
f4:0b:06:9c:59:c6:0a:24:2e:67:cd:2d:15:08:11:
9c:e7:6c:4f:86:0b:4e:75:3b:79:f5:94:ea:e0:a0:
28:cc:a8:9c:0a:22:18:67:5f:02:87:f0:69:ef:bf:
61:06:f9:07:95:b6:a2:87:33:bb:b6:08:68:07:79:
3a:06:ad:e9:76:f3:ea:8c:e9:e3:b6:34:12:d5:e7:
bd:08:75:57:d6:16:94:c0:22:18:c4:e0:9c:15:28:
90:72:b2:90:5d:e6:22:f4:71:d0:66:29:be:f1:b8:
24:ae:ac:75:02:e7:8f:d3:09:5a:69:05:fd:2a:70:
a4:25:ca:c2:1c:87:9d:d1:c0:bd:a5:33:2b:1f:0d:
54:9b:09:ba:43:77:a9:88:86:a1:65:7f:7f:2a:3d:
da:03:55:17:bd:83:81:25:80:14:ea:8f:51:ba:18:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:63:BD:A4:00:78:C3:B6:8B:2A:BD:41:51:EF:4C:98:69:16:D4:B4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RmO9pAB4w7aLKr1BUe9MmGkW1LQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.56.0/21
Signature Algorithm: sha256WithRSAEncryption
af:d8:d1:5d:45:de:ae:60:d2:4d:9f:09:79:da:cb:10:7f:0d:
d6:51:88:69:e3:df:03:f5:15:56:9f:bb:da:5b:3f:97:be:32:
9e:88:d6:f8:47:50:7c:0e:7d:1e:be:a3:fe:62:d5:39:17:79:
12:f0:6d:f9:81:b6:5e:e2:0f:6e:0c:6c:1b:9a:1b:ff:79:95:
4d:f9:a2:0b:2e:83:59:e1:41:bf:ac:f1:ec:3b:e5:6b:ed:14:
22:5b:3c:8d:35:ef:c7:75:1b:41:7c:6b:c4:2c:bd:ed:72:eb:
2b:f4:85:20:cb:77:ef:f3:49:d1:15:9c:81:b5:de:0a:a5:57:
38:b4:50:c1:72:2a:13:bc:3a:84:de:10:09:69:e2:cd:5c:de:
2b:ed:d5:d1:29:22:8b:d7:06:55:94:a0:c5:ae:7a:29:5b:f8:
2e:ea:4f:35:c9:5c:84:b5:e1:d8:fb:2e:0e:16:49:80:26:d5:
20:d0:15:8d:b5:ce:a1:d8:98:a7:5a:93:ed:ab:cd:75:62:47:
cc:0f:0a:0a:38:c3:7d:db:90:c0:aa:3e:29:a0:5b:2a:b1:17:
b1:1f:db:b3:c2:2e:27:cd:88:88:16:6e:e2:bb:ae:e7:b0:f3:
c4:f0:24:19:95:9c:b2:11:89:a3:82:3b:9f:7e:38:b0:15:b1:
ec:e4:05:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org