Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S2DBUj7K--Euma5slObCL2L_UDY.roa
File: S2DBUj7K--Euma5slObCL2L_UDY.roa (raw, json)
Hash identifier: M6iwO81j2dbddlyTNqEvrkUfHMEIAkmkCwh+LoszPQU=
Subject key identifier: 4B:60:C1:52:3E:CA:FB:E1:2E:99:AE:6C:94:E6:C2:2F:62:FF:50:36
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E42
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S2DBUj7K--Euma5slObCL2L_UDY.roa
Signing time: Tue 29 Sep 2020 09:55:32 +0000
ROA not before: Tue 29 Sep 2020 09:55:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3650 (0xe42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4B60C1523ECAFBE12E99AE6C94E6C22F62FF5036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:c2:e5:31:ed:67:13:3e:f5:d3:2e:d3:a2:
5a:b3:d2:d2:53:d3:15:cc:d9:cc:0b:e1:8d:47:b0:
8f:c7:c2:b5:94:84:a4:3f:f9:97:08:5c:0d:2a:be:
ab:93:d9:3f:7d:01:10:0c:6a:d9:f9:3a:5d:ef:8a:
e5:cf:bc:33:28:6d:77:20:e7:db:f1:64:98:3d:4b:
ec:a8:98:f6:ed:21:ff:16:41:51:57:46:64:57:05:
d4:35:05:35:fe:f6:9c:33:d6:93:3a:b8:b9:46:17:
e9:68:d0:52:8e:66:c8:6c:2b:da:56:91:ec:24:bd:
a5:41:55:e5:cc:5e:f7:d7:a1:97:8e:b8:12:49:4e:
21:38:65:d6:63:47:d2:e5:a3:ec:dc:3b:82:e8:54:
a9:aa:06:c1:7b:7a:47:60:99:d1:6e:d5:c6:c6:3a:
b2:97:b1:11:88:95:10:90:74:b4:f3:f6:db:a5:55:
de:02:39:e4:a4:42:17:81:3e:2e:ab:18:1e:c9:59:
44:c2:f3:59:92:e5:5c:9a:3d:0d:eb:aa:c0:aa:2c:
48:d9:a3:00:6b:a2:67:dd:cf:ba:e2:b4:1b:e8:25:
3f:c5:04:0d:fc:0c:4a:d2:1b:6d:16:28:0a:b9:50:
68:3f:c5:88:13:7f:b1:dd:25:e4:69:18:5e:3f:57:
72:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:60:C1:52:3E:CA:FB:E1:2E:99:AE:6C:94:E6:C2:2F:62:FF:50:36
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S2DBUj7K--Euma5slObCL2L_UDY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.248.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:0f:7e:6e:20:9c:c2:02:1e:f0:7c:19:8d:42:56:24:47:be:
96:da:0d:a5:22:28:16:46:53:03:6f:fd:b3:04:ac:f5:b2:93:
77:ce:4a:73:c0:8c:fe:d9:4f:7f:0b:46:8c:38:50:88:87:06:
ac:07:18:25:a9:8c:e9:11:5c:5b:04:09:01:fe:d6:46:de:db:
8d:d5:0f:c5:4e:da:b9:ad:99:b6:82:29:f3:d6:d1:93:f4:c6:
7d:bc:6a:66:66:33:04:ef:6b:bc:a0:0b:8c:ae:0f:db:37:a1:
b9:9c:47:c1:78:ff:9c:0f:20:57:dc:15:34:35:37:3a:3a:a1:
2f:11:9d:1c:b2:e2:9a:ed:a2:6b:9d:82:8c:79:c6:ac:fb:dd:
3a:78:96:70:22:68:a8:01:21:de:3a:74:25:c1:31:19:b3:46:
0d:fc:7b:5d:82:28:06:5c:17:d1:a3:f1:cb:e7:16:14:6b:1e:
a5:7c:33:97:3a:00:38:40:6c:cd:1b:0c:1b:12:1f:9c:07:fa:
c3:dc:a7:91:fd:98:3e:db:a4:fd:ed:a8:1d:7b:d7:38:f7:4b:
45:f4:1b:0d:a4:ac:da:ec:86:e8:86:23:c6:9c:e4:51:aa:81:
30:6f:5d:cb:29:ca:c4:38:89:bd:9c:ad:08:61:b5:4f:23:07:
e9:3f:c9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org