Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T4H21RKlPBk0ct_NGbAhQzzgIZ8.roa
File: T4H21RKlPBk0ct_NGbAhQzzgIZ8.roa (raw, json)
Hash identifier: dmhIzXdAij6EIyM99xe0tDliM1SzVgfeMOU9UNXcQkA=
Subject key identifier: 4F:81:F6:D5:12:A5:3C:19:34:72:DF:CD:19:B0:21:43:3C:E0:21:9F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D04
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T4H21RKlPBk0ct_NGbAhQzzgIZ8.roa
Signing time: Tue 29 Sep 2020 09:54:05 +0000
ROA not before: Tue 29 Sep 2020 09:54:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3332 (0xd04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:05 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4F81F6D512A53C193472DFCD19B021433CE0219F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:05:49:21:62:c5:dc:88:e3:d3:2a:3a:07:
36:c7:f3:bb:8e:ab:04:8a:7c:9e:d5:b4:1a:61:77:
69:5e:0b:f2:82:31:7e:61:0a:3a:92:21:b5:27:bf:
a5:23:38:02:e1:d4:7e:34:98:8d:98:29:03:81:95:
eb:68:34:47:ef:0c:d8:3a:2a:2b:4e:83:e4:67:15:
27:fc:52:6e:50:a8:1b:ff:69:dc:43:96:93:35:ba:
ef:7d:df:74:5d:5e:d9:af:13:20:03:60:4f:91:13:
28:17:22:d0:6b:1b:cf:d0:6a:42:74:c3:52:c4:0b:
e1:98:60:8f:45:b6:c9:ab:e6:a8:b4:7a:9a:e4:6d:
38:c8:0d:f1:ba:2b:a2:15:44:0d:c1:04:8a:2d:a8:
79:9a:8d:fe:0a:11:c2:b0:8a:fd:06:85:72:53:d0:
59:1b:0f:af:31:7d:95:55:b0:17:bd:aa:49:89:3a:
01:a4:aa:ff:35:be:1a:9c:7a:69:65:e8:59:f9:2f:
bd:5a:8f:a9:02:fd:b7:c4:2d:6e:07:af:65:e7:7d:
88:09:ac:ae:69:ab:91:4d:9d:f5:21:b4:ee:67:29:
bc:2d:d8:1a:f8:24:2f:7a:c4:80:18:02:45:9b:5e:
50:1d:c0:8f:bc:98:d2:4b:23:a7:cd:a4:80:2a:17:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:81:F6:D5:12:A5:3C:19:34:72:DF:CD:19:B0:21:43:3C:E0:21:9F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T4H21RKlPBk0ct_NGbAhQzzgIZ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.48.0/21
Signature Algorithm: sha256WithRSAEncryption
98:7c:56:88:c6:d4:5d:13:0f:19:23:75:ff:f9:55:01:4d:9f:
df:fe:19:fd:d2:e3:c4:6a:41:df:ac:34:18:6c:6c:1f:2e:23:
cb:38:18:b0:ca:8e:94:d6:b3:ab:9f:91:df:f5:31:42:a3:d5:
c3:b5:6c:a8:f7:10:99:7b:77:14:41:97:ee:93:20:0f:3c:db:
dc:6b:f7:7e:4c:51:6a:f2:e3:a9:69:87:a7:53:50:0d:7b:d9:
54:7f:d2:43:0c:2e:c5:fb:7a:34:2b:63:bd:f9:de:e6:90:8d:
ac:44:2c:d2:21:01:e5:70:d1:98:9a:ba:c8:6e:79:8d:44:03:
ba:75:6d:70:7d:8d:a3:6e:6b:b3:9c:d2:48:0d:9e:eb:3e:ef:
f8:da:3b:e0:bf:ca:c0:93:62:35:f8:c9:ba:23:87:a2:88:35:
2d:11:07:53:ee:48:f8:1a:d0:a3:78:4f:38:84:3e:1c:4b:d1:
ba:73:0c:6c:14:99:ba:c3:ea:8e:52:4f:de:38:93:59:45:b8:
0d:1e:07:19:db:74:1a:b5:0d:09:b5:d0:ee:b0:86:26:79:76:
0e:1d:73:e5:a6:1f:b8:dd:85:a6:f2:37:9a:3d:a6:57:8e:4e:
eb:9c:9e:27:c0:e7:82:69:8b:90:ef:df:76:b6:6b:63:f5:9b:
44:76:da:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org