Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SUZjXV5aV1I3LzypM4Rtsofyb1k.roa
File: SUZjXV5aV1I3LzypM4Rtsofyb1k.roa (raw, json)
Hash identifier: rhXIutu+psJQl4wlaKZyZ+0K67ODR62wBYiMPlVYof0=
Subject key identifier: 49:46:63:5D:5E:5A:57:52:37:2F:3C:A9:33:84:6D:B2:87:F2:6F:59
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1587
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SUZjXV5aV1I3LzypM4Rtsofyb1k.roa
Signing time: Sun 07 Feb 2021 12:05:07 +0000
ROA not before: Sun 07 Feb 2021 12:05:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5511 (0x1587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:05:07 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4946635D5E5A5752372F3CA933846DB287F26F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:9d:15:06:bb:e9:5c:01:39:b4:88:b5:7f:
3a:f3:21:77:a5:b5:22:14:9a:42:56:2e:0a:1f:7f:
38:cb:22:69:83:61:3c:6b:73:ba:c2:ed:de:a4:39:
6e:8d:9c:dc:74:6b:e0:a4:7c:68:5c:ef:85:dd:88:
7b:7e:da:6a:92:c8:96:b1:8d:f4:58:9b:64:9c:97:
b5:1d:ce:68:5f:1d:c9:fd:57:d1:e9:99:79:4c:c0:
50:64:37:06:07:03:24:6b:99:97:45:cd:5d:17:5e:
de:9d:05:d8:59:70:3d:4e:fc:dd:45:42:6d:9f:78:
1c:80:b5:6c:0d:d7:0a:cc:5c:a2:76:82:b8:5c:2a:
77:1b:71:5c:f7:95:13:06:8c:da:18:32:be:f7:9e:
7a:9c:d1:b0:cd:a9:0b:0b:01:ad:9e:36:f8:81:31:
01:6e:d8:a1:0b:ad:5e:8e:e2:10:77:04:bc:9e:41:
c3:ed:4e:49:75:da:99:f1:7a:ee:75:ea:47:33:65:
32:66:5a:d9:fb:13:a6:98:2c:9b:3b:51:3f:11:f9:
e0:da:56:92:f1:a0:2b:dc:0f:6d:32:12:2d:b6:44:
9a:b9:d3:ba:b6:55:62:f3:91:54:66:6d:c5:10:63:
3d:29:e8:68:75:2b:b7:d3:8b:4c:06:1f:8e:ef:9d:
69:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:46:63:5D:5E:5A:57:52:37:2F:3C:A9:33:84:6D:B2:87:F2:6F:59
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SUZjXV5aV1I3LzypM4Rtsofyb1k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.24.0/22
Signature Algorithm: sha256WithRSAEncryption
97:be:c8:df:bf:c4:17:f4:cc:57:e7:e5:03:1d:8b:54:0e:a2:
e2:2e:ee:2b:e0:16:8a:dc:ab:d7:19:be:ef:8e:c0:58:29:b2:
4d:e5:2d:19:2b:48:2a:55:0a:c9:d3:a4:77:3a:f1:69:36:20:
76:03:30:fe:0f:20:8b:3c:f4:7a:d4:a1:a5:4f:81:d8:4c:56:
1c:ef:b5:3d:54:8c:9e:12:8f:ca:ab:41:fd:18:95:83:e8:15:
45:ad:e9:59:75:8d:88:ac:cb:65:e4:f5:a9:04:3e:a8:31:89:
b5:21:be:58:0a:47:58:1b:d2:6c:aa:17:f8:bb:1f:8b:54:8d:
3e:ae:d4:27:1d:15:1a:8c:91:73:1c:52:7f:44:3b:28:9c:bb:
da:ea:57:0b:06:2d:95:4b:ea:a2:9c:cc:99:d4:38:cd:fa:c7:
c2:68:25:2c:42:3f:f3:be:1f:27:d2:30:03:c9:da:0e:3e:e1:
5a:34:4a:3d:d2:11:0a:1f:c0:71:04:f4:50:d2:d7:dc:b7:15:
86:d3:a0:bc:da:c7:e5:a3:33:8e:13:77:a5:bc:09:54:d1:cd:
c2:96:6c:cd:fd:07:c3:59:53:a9:29:09:27:2c:a4:b4:ae:83:
89:a9:2e:32:c6:45:26:a7:fe:3e:e8:99:8f:08:eb:6e:37:94:
57:c0:78:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:29 2023 by rpki-client on console-fra.rpki-client.org