Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U3_9c6azTVHfRgdElR6c8uZk1Mc.roa
File: U3_9c6azTVHfRgdElR6c8uZk1Mc.roa (raw, json)
Hash identifier: rrJv/wZ/Hr5GWGW1QDKOip62q79Kh1CPla9V2/22aOc=
Subject key identifier: 53:7F:FD:73:A6:B3:4D:51:DF:46:07:44:95:1E:9C:F2:E6:64:D4:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14D7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U3_9c6azTVHfRgdElR6c8uZk1Mc.roa
Signing time: Sun 07 Feb 2021 12:00:17 +0000
ROA not before: Sun 07 Feb 2021 12:00:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5335 (0x14d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:00:17 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=537FFD73A6B34D51DF460744951E9CF2E664D4C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:a4:2d:1e:0e:f6:92:3c:85:b4:dd:b2:a4:
aa:33:a5:a2:d5:3a:ef:f7:2c:b9:02:85:3f:d4:ba:
42:be:55:0c:fb:d9:2c:e3:82:77:3b:4e:72:e4:a5:
62:17:4d:8f:24:eb:13:20:ec:82:d6:13:2e:79:b1:
43:44:05:29:42:0d:e8:33:80:18:ca:50:57:6a:a8:
9a:14:53:6b:9e:92:c3:b7:9a:4a:34:0b:04:76:78:
92:c5:44:21:f0:cd:96:29:3a:bb:c9:87:c3:da:da:
7d:ab:75:60:d2:8f:7c:27:a5:f1:16:58:74:c9:47:
48:84:f2:1e:b4:c3:29:0f:53:d6:32:2c:89:55:c6:
02:2d:69:cb:71:9a:7b:82:d6:15:0e:e3:2b:d3:88:
c6:ff:81:1a:b8:3c:8f:61:08:c8:ad:5d:b0:e3:f7:
ae:34:29:cd:17:7f:90:3e:26:02:51:2a:64:4b:b4:
ab:e1:c7:15:a7:07:7b:c1:6e:44:01:06:ff:3f:de:
de:5d:c2:c0:db:29:49:26:06:1e:77:13:02:0f:fd:
03:e8:80:44:18:eb:3d:42:b7:7a:cb:0f:4d:c6:fa:
4c:d9:ef:fe:58:3d:96:e6:72:49:c7:ef:22:9a:4b:
72:58:c6:6f:4b:d8:3e:f9:03:64:8c:e8:35:8d:e7:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7F:FD:73:A6:B3:4D:51:DF:46:07:44:95:1E:9C:F2:E6:64:D4:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U3_9c6azTVHfRgdElR6c8uZk1Mc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.104.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:67:e3:5a:59:ac:1f:0a:36:90:a8:83:57:b6:fb:bd:c9:e6:
28:48:df:e3:3c:d1:52:b7:f2:12:f7:2f:60:15:58:ef:c4:3a:
7f:31:75:d7:e0:c8:ff:c5:bc:6a:1a:57:7c:de:01:73:c6:c9:
07:ae:ed:83:37:84:4c:53:b5:c5:27:af:71:66:6e:02:d5:27:
6e:00:93:44:df:22:27:c6:f9:2d:60:25:24:c0:e0:46:20:b4:
1a:07:7b:b3:9b:9f:0c:4f:86:5a:3d:aa:b2:96:fb:4a:52:f7:
94:7b:c7:0b:c9:1e:c6:00:f3:1b:d1:9d:2b:64:98:50:ef:da:
48:41:98:a9:17:75:f2:c6:c8:37:67:77:f2:ab:8d:a1:66:7c:
dc:34:4a:25:18:04:57:8c:f8:5a:7c:79:4d:e6:cc:5f:f3:a9:
68:2c:ab:ee:73:4c:d3:93:e7:63:1e:c2:b5:19:aa:ed:0e:5f:
c4:4b:b2:83:18:46:80:72:9e:db:76:52:f2:4f:bf:a9:98:ad:
35:3e:7a:5e:20:4c:36:bb:01:c1:f7:41:c6:b0:4b:d1:b3:45:
dc:87:35:3a:14:c9:80:a8:d3:18:b1:3e:b6:05:a6:13:6e:68:
a4:02:b2:b0:fa:54:0d:0f:f5:ea:cb:e0:87:63:b1:a7:03:7a:
14:c6:1a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org