Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Szdh5L3BqI8oGHsnMW3aQf7TehY.roa
File: Szdh5L3BqI8oGHsnMW3aQf7TehY.roa (raw, json)
Hash identifier: V0vnp8LKW9k0QPMYU/SK9d51f/stYopQp8vUZgaXXmg=
Subject key identifier: 4B:37:61:E4:BD:C1:A8:8F:28:18:7B:27:31:6D:DA:41:FE:D3:7A:16
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D93
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Szdh5L3BqI8oGHsnMW3aQf7TehY.roa
Signing time: Tue 29 Sep 2020 09:54:43 +0000
ROA not before: Tue 29 Sep 2020 09:54:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3475 (0xd93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4B3761E4BDC1A88F28187B27316DDA41FED37A16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:df:9c:bf:8f:8e:4a:cb:b0:ed:e6:9a:19:
52:89:34:b9:d2:05:cc:1c:51:82:9d:c9:5c:b7:a9:
e1:7b:db:0e:55:c1:f2:e9:c9:d0:a5:92:96:96:77:
9a:e5:7e:70:ed:32:7f:15:f5:ec:ea:6f:42:e3:4d:
cc:f9:18:09:cf:67:65:22:fe:9f:6e:2b:ae:36:93:
bc:55:59:61:1b:f2:0f:e9:90:c8:86:4e:88:d7:41:
41:7e:a8:8f:18:c6:e7:b0:bd:b7:5a:70:a7:56:a4:
2c:12:27:7c:04:de:15:a3:ca:f0:89:38:5b:9f:3a:
0b:c9:25:b2:01:95:74:f1:6b:68:40:20:ae:c7:19:
1c:50:02:89:2d:0d:53:b3:ac:2c:50:bd:aa:d6:60:
3c:61:35:04:cc:28:8e:45:42:94:fa:3e:6d:86:ee:
8d:a4:96:38:a2:3e:73:a3:1e:b5:18:e4:05:b4:de:
97:16:2b:17:f8:65:09:09:e4:51:47:91:8b:d4:a5:
a9:c3:69:14:aa:16:db:6c:ed:5c:ae:af:b0:b1:a3:
50:3a:5f:f9:4e:b2:01:85:07:bf:18:b1:73:3f:89:
c9:57:38:c1:3c:23:81:77:8e:36:9d:d4:9e:65:f3:
c2:c9:2e:3f:d5:35:26:48:ea:9d:47:df:50:05:dd:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:37:61:E4:BD:C1:A8:8F:28:18:7B:27:31:6D:DA:41:FE:D3:7A:16
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Szdh5L3BqI8oGHsnMW3aQf7TehY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.232.0/22
Signature Algorithm: sha256WithRSAEncryption
34:e1:67:52:b0:80:d9:7f:1f:2a:74:0d:93:76:3f:61:5b:6e:
89:4c:ee:02:a2:b2:be:d7:71:b0:22:b6:61:5f:a5:38:aa:e8:
d7:c1:dd:7c:3e:90:20:ec:23:bd:d3:96:63:61:66:49:fc:25:
8f:26:69:df:bb:9d:48:31:12:56:18:39:9e:76:a3:9c:9b:17:
6d:1a:a8:39:6f:47:37:8e:21:c4:eb:c8:b4:11:04:40:6e:49:
4d:99:d9:8b:34:a1:37:c4:cf:5d:90:4b:8e:de:b0:7b:29:c3:
e2:2b:ce:f4:19:35:45:cf:84:40:54:13:1c:6b:80:c1:e9:2a:
ca:ca:c4:7d:95:63:35:e2:19:5e:d1:5e:c6:8a:58:4a:90:06:
11:04:be:e7:65:a7:d4:22:e0:6c:2f:4c:f8:22:b3:22:0b:b7:
c0:79:d3:51:27:db:6d:fd:60:9a:74:42:aa:3a:ed:76:44:35:
af:2c:d8:bc:6c:51:1d:84:e5:4f:72:07:b2:1d:cb:0f:24:4c:
9a:93:ff:95:71:56:a9:9d:77:ab:d2:87:70:dd:c6:60:2e:ea:
41:82:2e:64:01:47:8d:b9:69:0e:78:bc:03:05:96:ce:11:f9:
3c:70:29:01:65:9d:e0:ed:90:69:75:d8:b8:cd:92:e4:62:32:
c7:b0:de:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org