Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UY5spFtD4o3obHk9iYqBHE538lc.roa
File: UY5spFtD4o3obHk9iYqBHE538lc.roa (raw, json)
Hash identifier: TQNHo1HGz/kSYN1gFGUKg9ppjr6VbsuUhFeTWQwQ7DA=
Subject key identifier: 51:8E:6C:A4:5B:43:E2:8D:E8:6C:79:3D:89:8A:81:1C:4E:77:F2:57
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1791
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UY5spFtD4o3obHk9iYqBHE538lc.roa
Signing time: Sun 07 Feb 2021 12:20:19 +0000
ROA not before: Sun 07 Feb 2021 12:20:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6033 (0x1791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:20:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=518E6CA45B43E28DE86C793D898A811C4E77F257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:2f:26:bc:f3:d7:e0:26:54:5c:8b:59:2f:
52:8d:28:a8:94:8e:7f:1e:b9:8b:8a:f3:d8:28:20:
f3:58:51:a9:09:84:14:35:e3:a6:9b:9b:9c:5c:98:
fb:84:f1:24:1c:5b:b2:1b:e8:3a:ba:22:ba:6f:ab:
14:db:63:f2:64:3d:04:a4:8f:82:1a:7a:61:a8:07:
c3:6e:1d:f6:3b:e4:c0:e0:17:53:ab:58:1f:64:45:
1d:ea:ae:a2:ae:85:5d:b7:8d:80:f5:27:49:16:76:
0a:cc:ef:0e:18:d1:0d:bf:d3:bc:35:49:32:95:9f:
6d:38:12:e6:f8:03:0b:c3:7e:92:75:a8:50:69:89:
3b:4d:7f:ea:7a:c4:60:38:8e:86:64:49:27:a2:c5:
54:2b:98:30:e3:25:ae:4a:7c:80:b7:d7:05:9d:5e:
39:e2:7f:3b:4a:19:6f:e9:ff:7c:cf:31:48:53:41:
d8:16:2a:9b:9e:f5:7f:96:06:a8:57:a5:12:25:51:
43:f4:ae:5e:67:e8:b0:fa:3c:f4:5f:ce:16:78:88:
05:45:ed:8a:ad:5f:4c:5f:14:26:6e:a8:c3:28:fd:
0f:28:5b:97:a0:c1:d5:c8:a8:6d:02:99:6b:cc:27:
fe:8b:4c:57:55:99:69:7c:36:5a:e5:40:d1:26:17:
9e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8E:6C:A4:5B:43:E2:8D:E8:6C:79:3D:89:8A:81:1C:4E:77:F2:57
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UY5spFtD4o3obHk9iYqBHE538lc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.176.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:01:ae:c6:d3:fe:88:53:6b:23:fe:79:2b:9b:16:ee:29:a2:
65:c2:33:12:6e:b9:59:8d:50:33:48:0c:3f:ab:1d:da:28:53:
2b:41:cf:1a:9e:84:74:0b:be:a4:07:63:78:43:4f:3a:3f:36:
9f:d3:29:00:05:41:d5:0e:d3:23:87:94:21:78:6b:4f:c4:7f:
44:a8:0d:6f:e1:b7:94:37:5e:ba:51:6c:e9:a8:fc:f8:5e:31:
8f:64:d1:53:6e:6b:ed:90:81:ac:ec:1f:7e:68:db:1f:a3:39:
8b:6e:51:b7:b7:7e:ab:c7:8f:89:4d:90:59:10:a0:3b:04:e9:
70:88:ac:e8:15:91:d6:08:fb:02:18:e7:b3:06:ed:3a:29:90:
bd:19:f0:42:f4:dc:72:ec:76:4f:5c:6e:be:17:a6:a4:49:e8:
99:74:a0:58:24:cc:e5:1f:b0:75:11:59:15:a3:5b:b4:e5:ad:
30:5d:fc:f1:e1:e5:b8:d7:99:73:89:11:a1:22:0a:47:9f:aa:
55:ce:cc:21:bb:a9:d8:48:a0:0b:82:70:d3:15:9f:83:2e:76:
62:ff:a2:8f:ae:75:b2:a9:59:64:5d:66:05:fc:1f:c7:34:0e:
88:e5:22:7a:18:e1:b0:39:de:08:12:86:e2:4e:47:a9:ab:96:
c9:2e:84:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:20 2023 by rpki-client on console-ams.rpki-client.org