Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T-iii_jclno5TewSXe3tUbeazFQ.roa
File: T-iii_jclno5TewSXe3tUbeazFQ.roa (raw, json)
Hash identifier: 1kVxnlBSJrWlmDxlCkTMSB3AhmnEGk9J5Nz/ot1MER0=
Subject key identifier: 4F:E8:A2:8B:F8:DC:96:7A:39:4D:EC:12:5D:ED:ED:51:B7:9A:CC:54
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2088
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T-iii_jclno5TewSXe3tUbeazFQ.roa
Signing time: Fri 25 Nov 2022 04:38:50 +0000
ROA not before: Fri 25 Nov 2022 04:38:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8328 (0x2088)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4FE8A28BF8DC967A394DEC125DEDED51B79ACC54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:91:44:74:a0:f3:84:5c:51:06:86:ba:f9:
c4:41:92:7e:b7:8f:fe:cf:b5:40:7d:72:c1:92:3f:
b7:d9:bf:94:13:7a:0e:a9:08:bb:60:26:24:4b:f7:
c6:6b:65:99:1a:f9:6e:11:68:5e:28:85:3e:51:b2:
cd:4a:4c:05:37:c1:5d:0b:04:12:74:f4:b6:32:f1:
dd:bb:40:dc:13:07:98:1e:95:5d:53:2c:a6:2d:09:
40:7c:b6:9f:fa:6a:0d:d0:9e:0e:83:7d:74:f9:0b:
8e:e0:0d:46:f5:a4:d5:2e:54:d6:50:79:8a:96:78:
ef:32:ae:4b:90:5d:03:a2:ff:ed:3f:f1:f4:cf:a6:
a5:cf:93:a2:14:7a:d2:0d:57:f0:7a:d8:29:d8:52:
ac:37:e1:cd:8e:87:91:a5:54:33:1b:91:54:15:ac:
86:85:a6:62:39:7f:40:cd:86:ac:5f:87:0e:82:0f:
7f:30:76:ae:80:a6:4f:ab:4c:18:37:d3:e0:d2:2f:
72:c5:5b:b7:30:e6:60:d5:18:16:2c:a2:bc:11:c2:
bc:9c:3d:8b:4c:55:f7:cf:65:65:68:0c:67:ca:32:
2c:d3:f1:fe:69:09:56:95:38:40:47:ef:51:34:a0:
f1:25:c5:92:18:41:af:ea:30:69:64:20:50:62:ec:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E8:A2:8B:F8:DC:96:7A:39:4D:EC:12:5D:ED:ED:51:B7:9A:CC:54
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T-iii_jclno5TewSXe3tUbeazFQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:9d:78:9a:aa:ff:e7:e2:e2:2c:93:52:4d:f9:7d:9a:84:24:
ac:82:01:40:5d:11:2d:af:14:b3:9e:fd:3b:85:a9:ef:5a:d7:
2d:fd:51:cf:f6:78:01:45:38:f9:c2:ae:d3:0a:fa:bb:a8:df:
3c:c1:88:bf:7d:1f:e3:bb:4f:aa:56:ff:4b:52:c5:ac:91:8d:
ea:21:8e:be:0c:58:49:22:2b:42:c0:0d:6e:d2:de:2d:4f:28:
27:73:2c:7e:8d:63:57:d7:8c:4e:de:f2:c0:ca:4c:21:4c:46:
66:ec:25:92:8a:f9:73:20:f5:cc:fb:a2:e9:64:78:a0:6d:dc:
7d:11:7c:ae:6a:7c:87:fc:43:7e:86:81:22:43:ee:31:c0:4e:
0a:f5:6a:13:69:6e:23:ee:3f:92:78:0e:bb:6a:b1:bd:d0:ec:
0c:76:61:a9:d4:26:fc:2a:60:04:c4:5f:d0:54:1d:b3:6c:a7:
de:88:99:04:25:e5:46:94:7d:dd:25:35:58:32:a4:41:04:70:
da:62:5e:ea:b0:39:06:2e:7a:c0:bd:43:f9:42:42:73:32:d2:
17:47:7f:51:92:3e:f5:cd:d7:ac:ef:b3:c1:aa:87:d5:ad:35:
fc:fd:2a:91:32:97:51:c2:0a:6d:92:e1:c7:66:3b:fa:90:cc:
ca:bc:60:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org